last executing test programs: 1.54285243s ago: executing program 2 (id=1253): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="01c06da66f2a593f1109421fcee6fc1cae738a99041ba2b20a8480aec21e7dd41224e547287c8be7cac90eb383330833f5a7cc4d989dcb12cc4958a924cafbc1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00004000005be300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x200000000000013c, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./file0\x00', 0x8600, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0x1}, {0x10, 0xe}, {0x9, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x4) r7 = epoll_create1(0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000000c0)={0x60000005}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe715778c12834, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x301) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000000)={0x0, 0xd, 0x0, 0x3d, 0x0, 0x209, 0x0}) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000040)) close_range(r9, 0xffffffffffffffff, 0x0) getgroups(0x27, &(0x7f0000002540)) dup3(r10, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.475015316s ago: executing program 3 (id=1256): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.437229749s ago: executing program 2 (id=1257): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x65757900}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x9, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x24, 0xb6, 0x0, 0x8, [0x7, 0x3659022, 0x80000001, 0x40, 0x4, 0x5, 0x6, 0x7]}, @noop]}}}}}) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="489f281bc8351f2499ad2366193b6c87602f927a547f5f90869a9446eca58e14", 0x20}, {&(0x7f0000000140)="3697caa8e67152deeb0f72c9fe296ae0400c957c786594787ca712050f8f26f570e5a672131adee4ae75563cebc46be025fe5b65", 0x34}, {&(0x7f00000002c0)="1d92b5740a5c380f927ee07c90adc862d6787091bd2402a93b72873b2ca13b56662bec1e14b7f630ef323c0ed73751fbee8e314e734ae4a873ef247eee672d89578ce822f51934c576a4901986150f42d89c35942fccb5f4ab91595d6d29eb2844b428d20c187cb02e6f448c395b0c8ac034bbe11d9f48887c223d77de5f3e2f866a5bef6ecc5c3229184e13842846f5c4b05ecf1b54b8e0a7ffa480474d5985779101bea3b50e585294f520f2b06c31dc4e1ec0efe8682b55070a28cf4ba23120d4ae22c2ba68b87839923a671f00f602a1c6", 0xd3}, {&(0x7f00000003c0)="d03a5fe71e10103a4124b1ab77fbae0ba7e96a07b7a29717409fa0fe6229697c7fae951426dc8557eb2dedbe11fe47822d859301cc5fac03e75dbc6cb85f2335a0413db83fd6e5307471d90ff2a95f639bf199111125c3d39e04df3dd52f31821e16d1ccde5a466e88901fd617a23f84e8456c65f3557471414ff6b875ddc1bcd4e4fd67a84fe345e6ecafd72529bcc579d74f2df1c789d4217477aa4a45e10cc7d5692abce22670d5e24dbedfb6f0735074ff4c756254a3c45df61fcdca9df46d68185d", 0xc4}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000543a757d2ef59a1900080000000000000000", @ANYRES32=r4, @ANYBLOB="e00000020000000000000000d8000000000000000000000007000000440c3843ac1e0101000000060044249c5000000800000000000000000800000008000000070000000f00000000000023ad01831f7d640101027f000001ac1414aaac1414bbac1e01017f000001ac1414228644ffffffff0207e91fbb82760707a90df08b820203850008bcb1ae2a1ece060627b2024f0712695897ba66c2b46e9fd0261734b2e5ab0705f5fb6c0208a022a2b1dd72861a000000030604ed60021029a01d6aff6b0a44e292bc96e5938618000000020509e9473ea5dec80906093d28ad93f8a75900"], 0xf8}}, {{&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000640)="5dee9c01cb9a0a51b5da3a091ea1b4c969711e81cc57c8c847e8b107c65bfc2cf106c80ac57493fbe01bee0e83e5007f02a3088b9a88214cd6e91a892957793fd50bd123d45fbc0380b8b5b74bb4f85a436e1998f6e1ab33949650cfe56b35730e8e5a33fd6b35fe0dca7e771b", 0x6d}, {&(0x7f00000006c0)="91576d908bdb3b05fdbaec232e9f1f0651ef7bc4a48ba538aa234f3f10", 0x1d}, {&(0x7f0000000700)="60e18a162106b91b23c74ed8413ae4cbba25a17b2fa08c038770cfa6c3dd21eab81b03aba13088d0be08b85bac7e9f65b98ff6d0d02b2cb4b1c1d762c32f0448bcc6a7342899d1ad4e17b3dde39b60c1c08f181b4b85cd8941ceb07885904817ef375469e9489dfa6a74663a9b73f39317ac68224026cf181c877c886b4a64bb9ffb6940abdde17ef9e7afb2dea1897120ecc47c694e1370511564e3ad6de99a55591d4992144fd2bc892f74c5f5366ee04f104720c7dcaf50c6b284f4e9b1807e1a6ab3cf02dff6fc", 0xc9}, {&(0x7f0000000800)="962feef507ea2b7eb85fc5f8f2034b9aa64e899e383916fa", 0x18}, {&(0x7f0000000840)="32d64a81861d54dd8094fd1bde0f982d3dda197e5048fa03e9877f0b65a3e64e8a0a64075be8867649f64a00469897d5d693a27fc8462b7552b17677c36b4ba18fac95615b29bafea375fae70031b6b9f248e2eae2175d2cca838813b3ab6be2e29bd874d9b170e89fb485050d9e80318b1311cc217db3c177f67375c3bc22ae7a3caa27a573f2915652d2a51928896a3fac47e6150f208d843768d24b6469e208067db1761a8e33b0acc89c87aaaa49ebc2dc7a6b48c434ab6f9b20c3514d80dbbfc34ee7cdf5ac8f79", 0xca}], 0x5}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="893c98b43bb26bd9497cbcc0560e6e1a1c364eda5394d037543dba4af85766266cf7d680280ce1a30a12f5a27b7aa50044db6f29c2aa4ec559046c1ed3df239c88b56630e50427f5a2a7a8c23ad9f558a2e0c55fe9cf42bf1c5210e1e1bab710e3f72744ca696de47265337c9f84", 0x6e}, {&(0x7f0000000a80)="742fa14aaf592b0c7ca48ed790fbe28a73db6cbcb6ac3506198137637ebaff4cb73f50a38d06ea188453733a49813e9c2614579c545262e90d5c627e7c9d98eea464482535ea0c50eb8294dc4971567e4649b159284864a39293ae8646132d39a277911d94c9dee075a51ed6ef7653fdc5217c57980375b95d07a885f43b87b66c481ed7c1a96f3bd378150c9bc6ce884b7bca3d371bf86762cb15ec058b3091c96267cd5839e761b4", 0xa9}, {&(0x7f0000000b40)="f60ad85bc7142f584d7c80e933de43bb18432ba2d646e9f179224587b880df3dd1d3c34ad7f0befc7f337d3a1efaa38cb32f34e3a97c42e036cad97a97915942b8f35f0c72e2a555e51a61d8b281fed6e8a5e28f9b56ed3cbd6db87e18b3bc1bd7bef806403bf9d421f9dbb22ad0810e6c8d16c0990c09a997d02a", 0x7b}, {&(0x7f0000000bc0)="8520ebfdc565f09e8edbaef20e46010bcabd31", 0x13}, {&(0x7f0000000c00)="34bee92e2ff7d22a2f39d1b42ff2145b5af005d8d2cb4b687aa5813851445956affd03a3a20b3246bbf0bf790ace26e1e40e5974b96d3eb892e68ebe8a757b609b4653076ba9d0963711c8207b68b04b738ef799136cd115aec5096c5f6e6be7b1d5e50ae97f020d76835899236e5d7bf6334570d4d6eb5d7c42fad027bfa76005715e1b1a", 0x85}, {&(0x7f0000000cc0)="32f712ef2bb364eff423c6c4b03c702d55ad2c6eb6ef35f6781abe658eacfad55c77e7815422b8717c5eb8f44b0f13563658e868b1d310965a4c3639261d6f9e92fd7a553d0f11da651c7ef91e6178ca73ba2f37c1d702d4756afea322e652df1e48a461320816cc27caf20dd08c73d22e104d5e15449fa62b4f875d1d6e0e6056e2ec8474417778ad7888539b1469375eacd855963c9c898afc3ab432fdd7c80c087d113333cecd311cb9ba4fd7114cc8f2533d330a1bde2035b2e67aa385c20b0520d73fc911a275f3e2a85acd92def2998f44be135755b0bcb32d8320bdbc9743a252deb5ecb230632e0e", 0xec}], 0x6, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}], 0x3, 0xc000005) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001040)={0x208, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xc) setsockopt$inet6_int(r5, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x185080) sendto$inet_nvme_pdu(r7, &(0x7f0000000040)=@data_c2h={{0x7, 0x3, 0x18, 0x81, 0x6}, 0x3ff, 0x9, 0xffff7fff, 0x80000000, "0d1f4ba5"}, 0x80, 0x0, 0x0, 0x0) 1.436622599s ago: executing program 3 (id=1258): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 1.399056433s ago: executing program 3 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r1, &(0x7f0000000600)={'#! ', '', [], 0xa, '\\'}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000b80), &(0x7f00000005c0)}, 0x20) 1.009449595s ago: executing program 3 (id=1264): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x9, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x24, 0xb6, 0x0, 0x8, [0x7, 0x3659022, 0x80000001, 0x40, 0x4, 0x5, 0x6, 0x7]}, @noop]}}}}}) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="489f281bc8351f2499ad2366193b6c87602f927a547f5f90869a9446eca58e14", 0x20}, {&(0x7f0000000140)="3697caa8e67152deeb0f72c9fe296ae0400c957c786594787ca712050f8f26f570e5a672131adee4ae75563cebc46be025fe5b65", 0x34}, {&(0x7f00000002c0)="1d92b5740a5c380f927ee07c90adc862d6787091bd2402a93b72873b2ca13b56662bec1e14b7f630ef323c0ed73751fbee8e314e734ae4a873ef247eee672d89578ce822f51934c576a4901986150f42d89c35942fccb5f4ab91595d6d29eb2844b428d20c187cb02e6f448c395b0c8ac034bbe11d9f48887c223d77de5f3e2f866a5bef6ecc5c3229184e13842846f5c4b05ecf1b54b8e0a7ffa480474d5985779101bea3b50e585294f520f2b06c31dc4e1ec0efe8682b55070a28cf4ba23120d4ae22c2ba68b87839923a671f00f602a1c6", 0xd3}, {&(0x7f00000003c0)="d03a5fe71e10103a4124b1ab77fbae0ba7e96a07b7a29717409fa0fe6229697c7fae951426dc8557eb2dedbe11fe47822d859301cc5fac03e75dbc6cb85f2335a0413db83fd6e5307471d90ff2a95f639bf199111125c3d39e04df3dd52f31821e16d1ccde5a466e88901fd617a23f84e8456c65f3557471414ff6b875ddc1bcd4e4fd67a84fe345e6ecafd72529bcc579d74f2df1c789d4217477aa4a45e10cc7d5692abce22670d5e24dbedfb6f0735074ff4c756254a3c45df61fcdca9df46d68185d", 0xc4}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000543a757d2ef59a1900080000000000000000", @ANYRES32=r4, @ANYBLOB="e00000020000000000000000d8000000000000000000000007000000440c3843ac1e0101000000060044249c5000000800000000000000000800000008000000070000000f00000000000023ad01831f7d640101027f000001ac1414aaac1414bbac1e01017f000001ac1414228644ffffffff0207e91fbb82760707a90df08b820203850008bcb1ae2a1ece060627b2024f0712695897ba66c2b46e9fd0261734b2e5ab0705f5fb6c0208a022a2b1dd72861a000000030604ed60021029a01d6aff6b0a44e292bc96e5938618000000020509e9473ea5dec80906093d28ad93f8a75900"], 0xf8}}, {{&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000640)="5dee9c01cb9a0a51b5da3a091ea1b4c969711e81cc57c8c847e8b107c65bfc2cf106c80ac57493fbe01bee0e83e5007f02a3088b9a88214cd6e91a892957793fd50bd123d45fbc0380b8b5b74bb4f85a436e1998f6e1ab33949650cfe56b35730e8e5a33fd6b35fe0dca7e771b", 0x6d}, {&(0x7f00000006c0)="91576d908bdb3b05fdbaec232e9f1f0651ef7bc4a48ba538aa234f3f10", 0x1d}, {&(0x7f0000000700)="60e18a162106b91b23c74ed8413ae4cbba25a17b2fa08c038770cfa6c3dd21eab81b03aba13088d0be08b85bac7e9f65b98ff6d0d02b2cb4b1c1d762c32f0448bcc6a7342899d1ad4e17b3dde39b60c1c08f181b4b85cd8941ceb07885904817ef375469e9489dfa6a74663a9b73f39317ac68224026cf181c877c886b4a64bb9ffb6940abdde17ef9e7afb2dea1897120ecc47c694e1370511564e3ad6de99a55591d4992144fd2bc892f74c5f5366ee04f104720c7dcaf50c6b284f4e9b1807e1a6ab3cf02dff6fc", 0xc9}, {&(0x7f0000000800)="962feef507ea2b7eb85fc5f8f2034b9aa64e899e383916fa", 0x18}, {&(0x7f0000000840)="32d64a81861d54dd8094fd1bde0f982d3dda197e5048fa03e9877f0b65a3e64e8a0a64075be8867649f64a00469897d5d693a27fc8462b7552b17677c36b4ba18fac95615b29bafea375fae70031b6b9f248e2eae2175d2cca838813b3ab6be2e29bd874d9b170e89fb485050d9e80318b1311cc217db3c177f67375c3bc22ae7a3caa27a573f2915652d2a51928896a3fac47e6150f208d843768d24b6469e208067db1761a8e33b0acc89c87aaaa49ebc2dc7a6b48c434ab6f9b20c3514d80dbbfc34ee7cdf5ac8f79", 0xca}], 0x5}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="893c98b43bb26bd9497cbcc0560e6e1a1c364eda5394d037543dba4af85766266cf7d680280ce1a30a12f5a27b7aa50044db6f29c2aa4ec559046c1ed3df239c88b56630e50427f5a2a7a8c23ad9f558a2e0c55fe9cf42bf1c5210e1e1bab710e3f72744ca696de47265337c9f84", 0x6e}, {&(0x7f0000000a80)="742fa14aaf592b0c7ca48ed790fbe28a73db6cbcb6ac3506198137637ebaff4cb73f50a38d06ea188453733a49813e9c2614579c545262e90d5c627e7c9d98eea464482535ea0c50eb8294dc4971567e4649b159284864a39293ae8646132d39a277911d94c9dee075a51ed6ef7653fdc5217c57980375b95d07a885f43b87b66c481ed7c1a96f3bd378150c9bc6ce884b7bca3d371bf86762cb15ec058b3091c96267cd5839e761b4", 0xa9}, {&(0x7f0000000b40)="f60ad85bc7142f584d7c80e933de43bb18432ba2d646e9f179224587b880df3dd1d3c34ad7f0befc7f337d3a1efaa38cb32f34e3a97c42e036cad97a97915942b8f35f0c72e2a555e51a61d8b281fed6e8a5e28f9b56ed3cbd6db87e18b3bc1bd7bef806403bf9d421f9dbb22ad0810e6c8d16c0990c09a997d02a", 0x7b}, {&(0x7f0000000bc0)="8520ebfdc565f09e8edbaef20e46010bcabd31", 0x13}, {&(0x7f0000000c00)="34bee92e2ff7d22a2f39d1b42ff2145b5af005d8d2cb4b687aa5813851445956affd03a3a20b3246bbf0bf790ace26e1e40e5974b96d3eb892e68ebe8a757b609b4653076ba9d0963711c8207b68b04b738ef799136cd115aec5096c5f6e6be7b1d5e50ae97f020d76835899236e5d7bf6334570d4d6eb5d7c42fad027bfa76005715e1b1a", 0x85}, {&(0x7f0000000cc0)="32f712ef2bb364eff423c6c4b03c702d55ad2c6eb6ef35f6781abe658eacfad55c77e7815422b8717c5eb8f44b0f13563658e868b1d310965a4c3639261d6f9e92fd7a553d0f11da651c7ef91e6178ca73ba2f37c1d702d4756afea322e652df1e48a461320816cc27caf20dd08c73d22e104d5e15449fa62b4f875d1d6e0e6056e2ec8474417778ad7888539b1469375eacd855963c9c898afc3ab432fdd7c80c087d113333cecd311cb9ba4fd7114cc8f2533d330a1bde2035b2e67aa385c20b0520d73fc911a275f3e2a85acd92def2998f44be135755b0bcb32d8320bdbc9743a252deb5ecb230632e0e", 0xec}], 0x6, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}], 0x3, 0xc000005) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001040)={0x208, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xc) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x185080) sendto$inet_nvme_pdu(r7, &(0x7f0000000040)=@data_c2h={{0x7, 0x3, 0x18, 0x81, 0x6}, 0x3ff, 0x9, 0xffff7fff, 0x80000000, "0d1f4ba5"}, 0x80, 0x0, 0x0, 0x0) 818.023812ms ago: executing program 4 (id=1276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="01c06da66f2a593f1109421fcee6fc1cae738a99041ba2b20a8480aec21e7dd41224e547287c8be7cac90eb383330833f5a7cc4d989dcb12cc4958a924cafbc1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00004000005be300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x200000000000013c, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./file0\x00', 0x8600, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0x1}, {0x10, 0xe}, {0x9, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x4) r7 = epoll_create1(0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000000c0)={0x60000005}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe715778c12834, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x301) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000000)={0x0, 0xd, 0x0, 0x3d, 0x0, 0x209, 0x0}) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000040)) close_range(r9, 0xffffffffffffffff, 0x0) getgroups(0x27, &(0x7f0000002540)) dup3(r10, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 775.991715ms ago: executing program 4 (id=1278): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) dup(0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000170000b74b43c4a1906c8c4f000000b6"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0xf, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x889}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @func, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x543c000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x0, 0x0, 0x3, 0x5, 0xb, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000000940)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0xb, 0x0, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40)=[r0], 0x0, 0x10, 0x7ff, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000500)='syzkaller\x00', 0xd12e, 0x91, &(0x7f0000000740)=""/145, 0x61780, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x7, 0x7, 0x4}, 0x10, r2, r3, 0x2, &(0x7f0000000bc0)=[r4, r0, r0, r0, r0, r0], &(0x7f0000000c00)=[{0x4, 0x1, 0x5, 0x1}, {0x2, 0x3, 0x2, 0xc}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r5, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8001, 0x202082) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f00000002c0)={0x1, 0x200, 0xfffffffe}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) writev(r8, &(0x7f0000000040), 0x2) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt(r9, 0x84, 0x6, &(0x7f00000002c0)="44732b0ecd80440cf9e3732623aa8550e5bb55e64a86a2a519170200000000000000e5bc", 0x24) r10 = getpgrp(0x0) r11 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r11, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc4}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000380)=ANY=[], 0x0) 647.021416ms ago: executing program 0 (id=1288): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}}, 0x0) 627.744438ms ago: executing program 0 (id=1289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) close(r3) 591.70075ms ago: executing program 2 (id=1291): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="01c06da66f2a593f1109421fcee6fc1cae738a99041ba2b20a8480aec21e7dd41224e547287c8be7cac90eb383330833f5a7cc4d989dcb12cc4958a924cafbc1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00004000005be300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x200000000000013c, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x8600, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0x1}, {0x10, 0xe}, {0x9, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x4) r6 = epoll_create1(0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f00000000c0)={0x60000005}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r9) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x301) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000000)={0x0, 0xd, 0x0, 0x3d, 0x0, 0x209, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) getgroups(0x27, &(0x7f0000002540)) bpf$MAP_CREATE(0x0, 0x0, 0x0) 550.508264ms ago: executing program 0 (id=1293): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x40, 0x8, 0x0, 0x0, 0x0, 0xfffe, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 549.861964ms ago: executing program 2 (id=1294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="01c06da66f2a593f1109421fcee6fc1cae738a99041ba2b20a8480aec21e7dd41224e547287c8be7cac90eb383330833f5a7cc4d989dcb12cc4958a924cafbc1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00004000005be300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x200000000000013c, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./file0\x00', 0x8600, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0x1}, {0x10, 0xe}, {0x9, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x4) r7 = epoll_create1(0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000000c0)={0x60000005}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe715778c12834, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x301) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000000)={0x0, 0xd, 0x0, 0x3d, 0x0, 0x209, 0x0}) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000040)) close_range(r9, 0xffffffffffffffff, 0x0) getgroups(0x27, &(0x7f0000002540)) dup3(r10, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 501.427118ms ago: executing program 0 (id=1296): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x65757900}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x9, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x24, 0xb6, 0x0, 0x8, [0x7, 0x3659022, 0x80000001, 0x40, 0x4, 0x5, 0x6, 0x7]}, @noop]}}}}}) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="489f281bc8351f2499ad2366193b6c87602f927a547f5f90869a9446eca58e14", 0x20}, {&(0x7f0000000140)="3697caa8e67152deeb0f72c9fe296ae0400c957c786594787ca712050f8f26f570e5a672131adee4ae75563cebc46be025fe5b65", 0x34}, {&(0x7f00000002c0)="1d92b5740a5c380f927ee07c90adc862d6787091bd2402a93b72873b2ca13b56662bec1e14b7f630ef323c0ed73751fbee8e314e734ae4a873ef247eee672d89578ce822f51934c576a4901986150f42d89c35942fccb5f4ab91595d6d29eb2844b428d20c187cb02e6f448c395b0c8ac034bbe11d9f48887c223d77de5f3e2f866a5bef6ecc5c3229184e13842846f5c4b05ecf1b54b8e0a7ffa480474d5985779101bea3b50e585294f520f2b06c31dc4e1ec0efe8682b55070a28cf4ba23120d4ae22c2ba68b87839923a671f00f602a1c6", 0xd3}, {&(0x7f00000003c0)="d03a5fe71e10103a4124b1ab77fbae0ba7e96a07b7a29717409fa0fe6229697c7fae951426dc8557eb2dedbe11fe47822d859301cc5fac03e75dbc6cb85f2335a0413db83fd6e5307471d90ff2a95f639bf199111125c3d39e04df3dd52f31821e16d1ccde5a466e88901fd617a23f84e8456c65f3557471414ff6b875ddc1bcd4e4fd67a84fe345e6ecafd72529bcc579d74f2df1c789d4217477aa4a45e10cc7d5692abce22670d5e24dbedfb6f0735074ff4c756254a3c45df61fcdca9df46d68185d", 0xc4}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000543a757d2ef59a1900080000000000000000", @ANYRES32=r3, @ANYBLOB="e00000020000000000000000d8000000000000000000000007000000440c3843ac1e0101000000060044249c5000000800000000000000000800000008000000070000000f00000000000023ad01831f7d640101027f000001ac1414aaac1414bbac1e01017f000001ac1414228644ffffffff0207e91fbb82760707a90df08b820203850008bcb1ae2a1ece060627b2024f0712695897ba66c2b46e9fd0261734b2e5ab0705f5fb6c0208a022a2b1dd72861a000000030604ed60021029a01d6aff6b0a44e292bc96e5938618000000020509e9473ea5dec80906093d28ad93f8a75900"], 0xf8}}, {{&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000640)="5dee9c01cb9a0a51b5da3a091ea1b4c969711e81cc57c8c847e8b107c65bfc2cf106c80ac57493fbe01bee0e83e5007f02a3088b9a88214cd6e91a892957793fd50bd123d45fbc0380b8b5b74bb4f85a436e1998f6e1ab33949650cfe56b35730e8e5a33fd6b35fe0dca7e771b", 0x6d}, {&(0x7f00000006c0)="91576d908bdb3b05fdbaec232e9f1f0651ef7bc4a48ba538aa234f3f10", 0x1d}, {&(0x7f0000000700)="60e18a162106b91b23c74ed8413ae4cbba25a17b2fa08c038770cfa6c3dd21eab81b03aba13088d0be08b85bac7e9f65b98ff6d0d02b2cb4b1c1d762c32f0448bcc6a7342899d1ad4e17b3dde39b60c1c08f181b4b85cd8941ceb07885904817ef375469e9489dfa6a74663a9b73f39317ac68224026cf181c877c886b4a64bb9ffb6940abdde17ef9e7afb2dea1897120ecc47c694e1370511564e3ad6de99a55591d4992144fd2bc892f74c5f5366ee04f104720c7dcaf50c6b284f4e9b1807e1a6ab3cf02dff6fc", 0xc9}, {&(0x7f0000000800)="962feef507ea2b7eb85fc5f8f2034b9aa64e899e383916fa", 0x18}, {&(0x7f0000000840)="32d64a81861d54dd8094fd1bde0f982d3dda197e5048fa03e9877f0b65a3e64e8a0a64075be8867649f64a00469897d5d693a27fc8462b7552b17677c36b4ba18fac95615b29bafea375fae70031b6b9f248e2eae2175d2cca838813b3ab6be2e29bd874d9b170e89fb485050d9e80318b1311cc217db3c177f67375c3bc22ae7a3caa27a573f2915652d2a51928896a3fac47e6150f208d843768d24b6469e208067db1761a8e33b0acc89c87aaaa49ebc2dc7a6b48c434ab6f9b20c3514d80dbbfc34ee7cdf5ac8f79", 0xca}], 0x5}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="893c98b43bb26bd9497cbcc0560e6e1a1c364eda5394d037543dba4af85766266cf7d680280ce1a30a12f5a27b7aa50044db6f29c2aa4ec559046c1ed3df239c88b56630e50427f5a2a7a8c23ad9f558a2e0c55fe9cf42bf1c5210e1e1bab710e3f72744ca696de47265337c9f84", 0x6e}, {&(0x7f0000000a80)="742fa14aaf592b0c7ca48ed790fbe28a73db6cbcb6ac3506198137637ebaff4cb73f50a38d06ea188453733a49813e9c2614579c545262e90d5c627e7c9d98eea464482535ea0c50eb8294dc4971567e4649b159284864a39293ae8646132d39a277911d94c9dee075a51ed6ef7653fdc5217c57980375b95d07a885f43b87b66c481ed7c1a96f3bd378150c9bc6ce884b7bca3d371bf86762cb15ec058b3091c96267cd5839e761b4", 0xa9}, {&(0x7f0000000b40)="f60ad85bc7142f584d7c80e933de43bb18432ba2d646e9f179224587b880df3dd1d3c34ad7f0befc7f337d3a1efaa38cb32f34e3a97c42e036cad97a97915942b8f35f0c72e2a555e51a61d8b281fed6e8a5e28f9b56ed3cbd6db87e18b3bc1bd7bef806403bf9d421f9dbb22ad0810e6c8d16c0990c09a997d02a", 0x7b}, {&(0x7f0000000bc0)="8520ebfdc565f09e8edbaef20e46010bcabd31", 0x13}, {&(0x7f0000000c00)="34bee92e2ff7d22a2f39d1b42ff2145b5af005d8d2cb4b687aa5813851445956affd03a3a20b3246bbf0bf790ace26e1e40e5974b96d3eb892e68ebe8a757b609b4653076ba9d0963711c8207b68b04b738ef799136cd115aec5096c5f6e6be7b1d5e50ae97f020d76835899236e5d7bf6334570d4d6eb5d7c42fad027bfa76005715e1b1a", 0x85}, {&(0x7f0000000cc0)="32f712ef2bb364eff423c6c4b03c702d55ad2c6eb6ef35f6781abe658eacfad55c77e7815422b8717c5eb8f44b0f13563658e868b1d310965a4c3639261d6f9e92fd7a553d0f11da651c7ef91e6178ca73ba2f37c1d702d4756afea322e652df1e48a461320816cc27caf20dd08c73d22e104d5e15449fa62b4f875d1d6e0e6056e2ec8474417778ad7888539b1469375eacd855963c9c898afc3ab432fdd7c80c087d113333cecd311cb9ba4fd7114cc8f2533d330a1bde2035b2e67aa385c20b0520d73fc911a275f3e2a85acd92def2998f44be135755b0bcb32d8320bdbc9743a252deb5ecb230632e0e", 0xec}], 0x6, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}], 0x3, 0xc000005) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001040)={0x208, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0xc) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 489.599919ms ago: executing program 2 (id=1298): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="000000930000000066000000000000001800000000000000000000000000000005b8f8ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) clock_settime(0x7, &(0x7f0000000040)={0x0, 0x989680}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000001480)=[{0x200000000006, 0x54, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0x32, 0x12, ""/18}, &(0x7f0000001280)=0x32, 0x0) 469.023401ms ago: executing program 0 (id=1300): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x92, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'rose0\x00', 0x400}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0180140000000000000000000077aeaeec000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) close(r5) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) umount2(&(0x7f0000000100)='./file0\x00', 0xa) 465.201851ms ago: executing program 2 (id=1301): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x65757900}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x9, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x24, 0xb6, 0x0, 0x8, [0x7, 0x3659022, 0x80000001, 0x40, 0x4, 0x5, 0x6, 0x7]}, @noop]}}}}}) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="489f281bc8351f2499ad2366193b6c87602f927a547f5f90869a9446eca58e14", 0x20}, {&(0x7f0000000140)="3697caa8e67152deeb0f72c9fe296ae0400c957c786594787ca712050f8f26f570e5a672131adee4ae75563cebc46be025fe5b65", 0x34}, {&(0x7f00000002c0)="1d92b5740a5c380f927ee07c90adc862d6787091bd2402a93b72873b2ca13b56662bec1e14b7f630ef323c0ed73751fbee8e314e734ae4a873ef247eee672d89578ce822f51934c576a4901986150f42d89c35942fccb5f4ab91595d6d29eb2844b428d20c187cb02e6f448c395b0c8ac034bbe11d9f48887c223d77de5f3e2f866a5bef6ecc5c3229184e13842846f5c4b05ecf1b54b8e0a7ffa480474d5985779101bea3b50e585294f520f2b06c31dc4e1ec0efe8682b55070a28cf4ba23120d4ae22c2ba68b87839923a671f00f602a1c6", 0xd3}, {&(0x7f00000003c0)="d03a5fe71e10103a4124b1ab77fbae0ba7e96a07b7a29717409fa0fe6229697c7fae951426dc8557eb2dedbe11fe47822d859301cc5fac03e75dbc6cb85f2335a0413db83fd6e5307471d90ff2a95f639bf199111125c3d39e04df3dd52f31821e16d1ccde5a466e88901fd617a23f84e8456c65f3557471414ff6b875ddc1bcd4e4fd67a84fe345e6ecafd72529bcc579d74f2df1c789d4217477aa4a45e10cc7d5692abce22670d5e24dbedfb6f0735074ff4c756254a3c45df61fcdca9df46d68185d", 0xc4}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000543a757d2ef59a1900080000000000000000", @ANYRES32=r4, @ANYBLOB="e00000020000000000000000d8000000000000000000000007000000440c3843ac1e0101000000060044249c5000000800000000000000000800000008000000070000000f00000000000023ad01831f7d640101027f000001ac1414aaac1414bbac1e01017f000001ac1414228644ffffffff0207e91fbb82760707a90df08b820203850008bcb1ae2a1ece060627b2024f0712695897ba66c2b46e9fd0261734b2e5ab0705f5fb6c0208a022a2b1dd72861a000000030604ed60021029a01d6aff6b0a44e292bc96e5938618000000020509e9473ea5dec80906093d28ad93f8a75900"], 0xf8}}, {{&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000640)="5dee9c01cb9a0a51b5da3a091ea1b4c969711e81cc57c8c847e8b107c65bfc2cf106c80ac57493fbe01bee0e83e5007f02a3088b9a88214cd6e91a892957793fd50bd123d45fbc0380b8b5b74bb4f85a436e1998f6e1ab33949650cfe56b35730e8e5a33fd6b35fe0dca7e771b", 0x6d}, {&(0x7f00000006c0)="91576d908bdb3b05fdbaec232e9f1f0651ef7bc4a48ba538aa234f3f10", 0x1d}, {&(0x7f0000000700)="60e18a162106b91b23c74ed8413ae4cbba25a17b2fa08c038770cfa6c3dd21eab81b03aba13088d0be08b85bac7e9f65b98ff6d0d02b2cb4b1c1d762c32f0448bcc6a7342899d1ad4e17b3dde39b60c1c08f181b4b85cd8941ceb07885904817ef375469e9489dfa6a74663a9b73f39317ac68224026cf181c877c886b4a64bb9ffb6940abdde17ef9e7afb2dea1897120ecc47c694e1370511564e3ad6de99a55591d4992144fd2bc892f74c5f5366ee04f104720c7dcaf50c6b284f4e9b1807e1a6ab3cf02dff6fc", 0xc9}, {&(0x7f0000000800)="962feef507ea2b7eb85fc5f8f2034b9aa64e899e383916fa", 0x18}, {&(0x7f0000000840)="32d64a81861d54dd8094fd1bde0f982d3dda197e5048fa03e9877f0b65a3e64e8a0a64075be8867649f64a00469897d5d693a27fc8462b7552b17677c36b4ba18fac95615b29bafea375fae70031b6b9f248e2eae2175d2cca838813b3ab6be2e29bd874d9b170e89fb485050d9e80318b1311cc217db3c177f67375c3bc22ae7a3caa27a573f2915652d2a51928896a3fac47e6150f208d843768d24b6469e208067db1761a8e33b0acc89c87aaaa49ebc2dc7a6b48c434ab6f9b20c3514d80dbbfc34ee7cdf5ac8f79", 0xca}], 0x5}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="893c98b43bb26bd9497cbcc0560e6e1a1c364eda5394d037543dba4af85766266cf7d680280ce1a30a12f5a27b7aa50044db6f29c2aa4ec559046c1ed3df239c88b56630e50427f5a2a7a8c23ad9f558a2e0c55fe9cf42bf1c5210e1e1bab710e3f72744ca696de47265337c9f84", 0x6e}, {&(0x7f0000000a80)="742fa14aaf592b0c7ca48ed790fbe28a73db6cbcb6ac3506198137637ebaff4cb73f50a38d06ea188453733a49813e9c2614579c545262e90d5c627e7c9d98eea464482535ea0c50eb8294dc4971567e4649b159284864a39293ae8646132d39a277911d94c9dee075a51ed6ef7653fdc5217c57980375b95d07a885f43b87b66c481ed7c1a96f3bd378150c9bc6ce884b7bca3d371bf86762cb15ec058b3091c96267cd5839e761b4", 0xa9}, {&(0x7f0000000b40)="f60ad85bc7142f584d7c80e933de43bb18432ba2d646e9f179224587b880df3dd1d3c34ad7f0befc7f337d3a1efaa38cb32f34e3a97c42e036cad97a97915942b8f35f0c72e2a555e51a61d8b281fed6e8a5e28f9b56ed3cbd6db87e18b3bc1bd7bef806403bf9d421f9dbb22ad0810e6c8d16c0990c09a997d02a", 0x7b}, {&(0x7f0000000bc0)="8520ebfdc565f09e8edbaef20e46010bcabd31", 0x13}, {&(0x7f0000000c00)="34bee92e2ff7d22a2f39d1b42ff2145b5af005d8d2cb4b687aa5813851445956affd03a3a20b3246bbf0bf790ace26e1e40e5974b96d3eb892e68ebe8a757b609b4653076ba9d0963711c8207b68b04b738ef799136cd115aec5096c5f6e6be7b1d5e50ae97f020d76835899236e5d7bf6334570d4d6eb5d7c42fad027bfa76005715e1b1a", 0x85}, {&(0x7f0000000cc0)="32f712ef2bb364eff423c6c4b03c702d55ad2c6eb6ef35f6781abe658eacfad55c77e7815422b8717c5eb8f44b0f13563658e868b1d310965a4c3639261d6f9e92fd7a553d0f11da651c7ef91e6178ca73ba2f37c1d702d4756afea322e652df1e48a461320816cc27caf20dd08c73d22e104d5e15449fa62b4f875d1d6e0e6056e2ec8474417778ad7888539b1469375eacd855963c9c898afc3ab432fdd7c80c087d113333cecd311cb9ba4fd7114cc8f2533d330a1bde2035b2e67aa385c20b0520d73fc911a275f3e2a85acd92def2998f44be135755b0bcb32d8320bdbc9743a252deb5ecb230632e0e", 0xec}], 0x6, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}], 0x3, 0xc000005) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001040)={0x208, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xc) setsockopt$inet6_int(r5, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x185080) sendto$inet_nvme_pdu(r7, &(0x7f0000000040)=@data_c2h={{0x7, 0x3, 0x18, 0x81, 0x6}, 0x3ff, 0x9, 0xffff7fff, 0x80000000, "0d1f4ba5"}, 0x80, 0x0, 0x0, 0x0) 413.030996ms ago: executing program 1 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) 412.391166ms ago: executing program 1 (id=1304): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="01c06da66f2a593f1109421fcee6fc1cae738a99041ba2b20a8480aec21e7dd41224e547287c8be7cac90eb383330833f5a7cc4d989dcb12cc4958a924cafbc1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00004000005be300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x200000000000013c, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x8600, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0x1}, {0x10, 0xe}, {0x9, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x4) r6 = epoll_create1(0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f00000000c0)={0x60000005}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r9) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x301) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000000)={0x0, 0xd, 0x0, 0x3d, 0x0, 0x209, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) getgroups(0x27, &(0x7f0000002540)) bpf$MAP_CREATE(0x0, 0x0, 0x0) 383.937178ms ago: executing program 1 (id=1305): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 383.385638ms ago: executing program 0 (id=1306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./bus\x00', 0x10, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x81, 0x374, &(0x7f0000000980)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty, 0xba}, 0x1c) listen(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x2000000081) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x6000000) 355.73234ms ago: executing program 1 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) 350.134551ms ago: executing program 1 (id=1308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="01c06da66f2a593f1109421fcee6fc1cae738a99041ba2b20a8480aec21e7dd41224e547287c8be7cac90eb383330833f5a7cc4d989dcb12cc4958a924ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00004000005be300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x200000000000013c, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./file0\x00', 0x8600, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0x1}, {0x10, 0xe}, {0x9, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x4) r7 = epoll_create1(0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000000c0)={0x60000005}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe715778c12834, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x301) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000000)={0x0, 0xd, 0x0, 0x3d, 0x0, 0x209, 0x0}) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000040)) close_range(r9, 0xffffffffffffffff, 0x0) getgroups(0x27, &(0x7f0000002540)) dup3(r10, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 290.743216ms ago: executing program 1 (id=1309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x14, r6, 0x200}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000800ffff0000000000000000850000004100000018110000", @ANYRES32=r4], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x2040, 0x2, 0x1}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000070000000300000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000004780)={0x338c, 0x15, 0x100, 0x70bd25, 0x25dfdbfc, {0x2b, 0x46}, [@INET_DIAG_REQ_BYTECODE={0x79, 0x1, "8ec0e3a81a48294f7c81909dcc93ebc8b93499ce69314247a555c17293f3dde0ac6b7164db8fe6919a9160ea8a760cdf28c8ce5335d7941d94e9c7391841c44829235c03cfc2ca25c75f828913c22d37815d3d618c852c4dfa7f9a7879e8fa8604fbce62c70e3bcad799f9d0979264ce334f69a614"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "1f08bb74f0d96e0375f063944700ebbb7e3bdb85b0f0d21e40129a4e9e1340051426055d699c1bcd2faf382823689f74021b828e54d8390e546161f6f6a00c37f01770dc165f34e49124233fbbe7198728c8166d9c252a273f60428cf9ceb0bc17f71db73ee78fa97a38ae5bd99f80bcb63e16e5f7d6a92827124e1139c602ce1b8c0cfe5184ac99e05c52409bdd909f53315abf9aa98959892de036ea026a1be2bba653e7ec61e81184dadb3529c004e3dec56df3a3a8f6e327d67dfc295349ef3237bec6d131dcc01ff370b79a1ab556180521c90e47"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "27643db3988283ba1314233e21b137a474ef072526ac5db7854ae3c825a74ed406"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "3ee031605ddf57aad0f449effd027c27503b155934e97d7ac45ad7c7def5b9fb152cdea1f122ce7ebfaced276b417ced4c2995fc746e08e7622c7f63e1dbb9260749145923f7ffc0e63d692c01a9fdba58dd836de97f5e54552199cd0d79e013b53dee52b05969ec2216e6fbc43a9fd629513b8c65ea76a566a297c2ae6c42d88fd22874813b6274208a835a95d43319c43453b5a89b1fce44202a769e40e50c7d923fa59ffdf7b2dbef1fcdffe312649f00a6c721bd0738ac6baecddeab0cd7cbb6ccdaa0ec907836ed030f677f9f110782b0dce29295731a52942094290a8c5586582f8540"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x338c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRESHEX=r7], 0x20) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)={0x2c, r12, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'batadv_slave_0\x00', @local}) 250.36851ms ago: executing program 4 (id=1310): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 165.927257ms ago: executing program 4 (id=1311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="000000930000000066000000000000001800000000000000000000000000000005b8f8ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) clock_settime(0x7, &(0x7f0000000040)={0x0, 0x989680}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000001480)=[{0x200000000006, 0x54, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0x32, 0x12, ""/18}, &(0x7f0000001280)=0x32, 0x0) 165.043906ms ago: executing program 3 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000005c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xb, 0x3a, '#)@', 0x3a, '2\xe7\xb1\xe0Go\vhXh', 0x3a, './file0', 0x3a, [0x46]}, 0x35) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) openat$binfmt_register(0xffffff9c, &(0x7f00000005c0), 0x1, 0x0) (async) write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xb, 0x3a, '#)@', 0x3a, '2\xe7\xb1\xe0Go\vhXh', 0x3a, './file0', 0x3a, [0x46]}, 0x35) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) listen(0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 145.944738ms ago: executing program 4 (id=1313): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}}, 0x0) 67.364495ms ago: executing program 4 (id=1314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) clock_gettime(0x5, &(0x7f0000000380)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) kernel console output (not intermixed with test programs): ne - block = 0, count = 4096 [ 72.287914][ T5954] EXT4-fs (loop2): 1 orphan inode deleted [ 72.294232][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.315449][ T5956] bond1: entered promiscuous mode [ 72.320655][ T5956] bond1: entered allmulticast mode [ 72.329346][ T5956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.360240][ T5954] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz.2.830: path /76/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 72.391193][ T5954] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 17: comm syz.2.830: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.415642][ T5954] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 18: comm syz.2.830: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.417254][ T5956] bond1 (unregistering): Released all slaves [ 72.437888][ T5954] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 19: comm syz.2.830: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.462735][ T5975] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.830: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 72.491565][ T5954] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 20: comm syz.2.830: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.518794][ T5982] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.830: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 72.543637][ T5975] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.830: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 72.545122][ T5954] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 21: comm syz.2.830: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.566722][ T5975] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.830: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 72.654811][ T4300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.699126][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 72.699181][ T29] audit: type=1326 audit(1728775746.525:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cba24dff9 code=0x7ffc0000 [ 72.737675][ T29] audit: type=1326 audit(1728775746.555:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f1cba24dff9 code=0x7ffc0000 [ 72.761275][ T29] audit: type=1326 audit(1728775746.555:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cba24dff9 code=0x7ffc0000 [ 72.784691][ T29] audit: type=1326 audit(1728775746.555:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f1cba24dff9 code=0x7ffc0000 [ 72.808340][ T29] audit: type=1326 audit(1728775746.555:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cba24dff9 code=0x7ffc0000 [ 72.831828][ T29] audit: type=1326 audit(1728775746.555:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cba24ff17 code=0x7ffc0000 [ 72.855231][ T29] audit: type=1326 audit(1728775746.555:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1cba24fe8c code=0x7ffc0000 [ 72.878370][ T5991] loop3: detected capacity change from 0 to 256 [ 72.878968][ T29] audit: type=1326 audit(1728775746.555:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1cba24fdc4 code=0x7ffc0000 [ 72.893621][ T5991] FAT-fs (loop3): bogus number of FAT sectors [ 72.908782][ T29] audit: type=1326 audit(1728775746.555:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1cba24fdc4 code=0x7ffc0000 [ 72.908813][ T29] audit: type=1326 audit(1728775746.555:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1cba24cc8a code=0x7ffc0000 [ 72.915789][ T5991] FAT-fs (loop3): Can't find a valid FAT filesystem [ 73.088406][ T6001] FAULT_INJECTION: forcing a failure. [ 73.088406][ T6001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.101724][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: +}[@ Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 73.111983][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.122101][ T6001] Call Trace: [ 73.125383][ T6001] [ 73.128325][ T6001] dump_stack_lvl+0xf2/0x150 [ 73.132923][ T6001] dump_stack+0x15/0x20 [ 73.137254][ T6001] should_fail_ex+0x223/0x230 [ 73.142041][ T6001] should_fail+0xb/0x10 [ 73.146209][ T6001] should_fail_usercopy+0x1a/0x20 [ 73.151298][ T6001] _copy_from_user+0x1e/0xd0 [ 73.155966][ T6001] scsi_ioctl+0x34e/0x1540 [ 73.160661][ T6001] sg_ioctl+0xd00/0x1870 [ 73.164964][ T6001] ? __pfx_sg_ioctl+0x10/0x10 [ 73.169828][ T6001] __se_sys_ioctl+0xcd/0x140 [ 73.174424][ T6001] __x64_sys_ioctl+0x43/0x50 [ 73.179316][ T6001] x64_sys_call+0x15cc/0x2d60 [ 73.184015][ T6001] do_syscall_64+0xc9/0x1c0 [ 73.188580][ T6001] ? clear_bhb_loop+0x55/0xb0 [ 73.193549][ T6001] ? clear_bhb_loop+0x55/0xb0 [ 73.198575][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.204508][ T6001] RIP: 0033:0x7f1cba24dff9 [ 73.208959][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.229297][ T6001] RSP: 002b:00007f1cb8ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.237722][ T6001] RAX: ffffffffffffffda RBX: 00007f1cba405f80 RCX: 00007f1cba24dff9 [ 73.245904][ T6001] RDX: 0000000020000000 RSI: 0000000000005393 RDI: 0000000000000006 [ 73.253897][ T6001] RBP: 00007f1cb8ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.262085][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.270074][ T6001] R13: 0000000000000000 R14: 00007f1cba405f80 R15: 00007fff1a2dd008 [ 73.278310][ T6001] [ 73.351044][ T6008] vhci_hcd: invalid port number 61 [ 73.356285][ T6008] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 73.374917][ T6012] vhci_hcd: invalid port number 61 [ 73.380198][ T6012] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 73.440002][ T6016] loop4: detected capacity change from 0 to 512 [ 73.463610][ T6018] FAULT_INJECTION: forcing a failure. [ 73.463610][ T6018] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 73.473935][ T6016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.477356][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.1.849 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 73.500015][ T6016] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.500389][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.520883][ T6018] Call Trace: [ 73.524290][ T6018] [ 73.527222][ T6018] dump_stack_lvl+0xf2/0x150 [ 73.531841][ T6018] dump_stack+0x15/0x20 [ 73.536042][ T6018] should_fail_ex+0x223/0x230 [ 73.540822][ T6018] should_fail_alloc_page+0xfd/0x110 [ 73.546202][ T6018] __alloc_pages_noprof+0x109/0x340 [ 73.551672][ T6018] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 73.557121][ T6018] alloc_pages_noprof+0xe1/0x100 [ 73.562122][ T6018] __pte_alloc_kernel+0x34/0x1f0 [ 73.567160][ T6018] __vmap_pages_range_noflush+0x6bb/0x960 [ 73.573068][ T6018] ? should_fail_ex+0xd7/0x230 [ 73.578098][ T6018] ? should_failslab+0x8f/0xb0 [ 73.583053][ T6018] __vmalloc_node_range_noprof+0xce8/0xec0 [ 73.588970][ T6018] ? _find_next_bit+0x5d/0x90 [ 73.593762][ T6018] ? bpf_jit_alloc_exec+0x1a/0x20 [ 73.599056][ T6018] execmem_alloc+0xa8/0x190 [ 73.603638][ T6018] ? bpf_jit_alloc_exec+0x1a/0x20 [ 73.608718][ T6018] bpf_jit_alloc_exec+0x1a/0x20 [ 73.613663][ T6018] bpf_dispatcher_change_prog+0x15c/0x830 [ 73.619394][ T6018] ? __rcu_read_unlock+0x4e/0x70 [ 73.624437][ T6018] ? mntput_no_expire+0x70/0x3c0 [ 73.629388][ T6018] ? mntput+0x49/0x70 [ 73.633376][ T6018] ? ___slab_alloc+0x136/0x980 [ 73.638404][ T6018] ? bpf_test_init+0xc7/0x170 [ 73.643097][ T6018] ? should_fail_ex+0xd7/0x230 [ 73.648014][ T6018] ? should_fail_ex+0xd7/0x230 [ 73.653014][ T6018] ? _copy_from_user+0x9a/0xd0 [ 73.657788][ T6018] bpf_prog_change_xdp+0x24/0x30 [ 73.662752][ T6018] bpf_prog_test_run_xdp+0x491/0x8b0 [ 73.668326][ T6018] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.674243][ T6018] bpf_prog_test_run+0x20f/0x3a0 [ 73.679364][ T6018] __sys_bpf+0x400/0x7a0 [ 73.683712][ T6018] __x64_sys_bpf+0x43/0x50 [ 73.688174][ T6018] x64_sys_call+0x2625/0x2d60 [ 73.692958][ T6018] do_syscall_64+0xc9/0x1c0 [ 73.697614][ T6018] ? clear_bhb_loop+0x55/0xb0 [ 73.702357][ T6018] ? clear_bhb_loop+0x55/0xb0 [ 73.706545][ T6016] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.848: corrupted inode contents [ 73.707120][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.719331][ T6016] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.848: mark_inode_dirty error [ 73.725329][ T6018] RIP: 0033:0x7f6b4afadff9 [ 73.725353][ T6018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.741028][ T6016] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.848: corrupted inode contents [ 73.741538][ T6018] RSP: 002b:00007f6b49c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.761948][ T6016] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.848: mark_inode_dirty error [ 73.773434][ T6018] RAX: ffffffffffffffda RBX: 00007f6b4b165f80 RCX: 00007f6b4afadff9 [ 73.773450][ T6018] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 73.773470][ T6018] RBP: 00007f6b49c27090 R08: 0000000000000000 R09: 0000000000000000 [ 73.817528][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.825589][ T6018] R13: 0000000000000000 R14: 00007f6b4b165f80 R15: 00007ffe8c78d458 [ 73.833569][ T6018] [ 73.841634][ T6018] execmem: unable to allocate memory [ 73.861350][ T3274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.987365][ T6043] bond1: entered promiscuous mode [ 73.992752][ T6043] bond1: entered allmulticast mode [ 74.014633][ T6043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.038410][ T6043] bond1 (unregistering): Released all slaves [ 74.095796][ T6052] vhci_hcd: invalid port number 61 [ 74.100992][ T6052] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 74.156122][ T6055] vhci_hcd: invalid port number 61 [ 74.161513][ T6055] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 74.206519][ T6058] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 74.211526][ T6056] loop0: detected capacity change from 0 to 512 [ 74.287221][ T6060] vhci_hcd: default hub control req: 1f0c v0200 i0006 l0 [ 74.327255][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.377034][ T6056] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.390903][ T6066] bond1: entered promiscuous mode [ 74.395952][ T6066] bond1: entered allmulticast mode [ 74.410721][ T6066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.419720][ T6056] capability: warning: `syz.0.857' uses deprecated v2 capabilities in a way that may be insecure [ 74.465908][ T6066] bond1 (unregistering): Released all slaves [ 74.588886][ T3271] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 74.600286][ T3271] CPU: 1 UID: 0 PID: 3271 Comm: syz-executor Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 74.611314][ T3271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.621427][ T3271] Call Trace: [ 74.624748][ T3271] [ 74.627856][ T3271] dump_stack_lvl+0xf2/0x150 [ 74.632464][ T3271] dump_stack+0x15/0x20 [ 74.636644][ T3271] dump_header+0x83/0x2d0 [ 74.641011][ T3271] oom_kill_process+0x341/0x4c0 [ 74.645884][ T3271] out_of_memory+0x9af/0xbe0 [ 74.650480][ T3271] ? css_next_descendant_pre+0x11c/0x140 [ 74.656227][ T3271] mem_cgroup_out_of_memory+0x13e/0x190 [ 74.661907][ T3271] try_charge_memcg+0x51b/0x810 [ 74.666789][ T3271] charge_memcg+0x50/0xc0 [ 74.671227][ T3271] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 74.677330][ T3271] __read_swap_cache_async+0x236/0x480 [ 74.682962][ T3271] swap_cluster_readahead+0x276/0x3f0 [ 74.688350][ T3271] swapin_readahead+0xe4/0x6f0 [ 74.693169][ T3271] ? __filemap_get_folio+0x420/0x5b0 [ 74.698542][ T3271] ? swap_cache_get_folio+0x77/0x210 [ 74.703830][ T3271] do_swap_page+0x2af/0x23e0 [ 74.708422][ T3271] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 74.714045][ T3271] ? __rcu_read_lock+0x36/0x50 [ 74.718811][ T3271] ? pte_offset_map_nolock+0x124/0x1d0 [ 74.724269][ T3271] handle_mm_fault+0x8c5/0x2a80 [ 74.729198][ T3271] exc_page_fault+0x3b9/0x650 [ 74.734018][ T3271] asm_exc_page_fault+0x26/0x30 [ 74.738971][ T3271] RIP: 0033:0x7f2d863400a5 [ 74.743455][ T3271] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e c4 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 74.763647][ T3271] RSP: 002b:00007fffedfc28e8 EFLAGS: 00010246 [ 74.769856][ T3271] RAX: 0000000000000000 RBX: 0000000000000187 RCX: 00007f2d863400a3 [ 74.777832][ T3271] RDX: 00007fffedfc2900 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.785871][ T3271] RBP: 00007fffedfc295c R08: 000000001ddb442f R09: 7fffffffffffffff [ 74.793879][ T3271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 74.801847][ T3271] R13: 00000000000122cc R14: 00000000000120d4 R15: 00007fffedfc29b0 [ 74.809921][ T3271] [ 74.813318][ T3271] memory: usage 307200kB, limit 307200kB, failcnt 358 [ 74.820240][ T3271] memory+swap: usage 296504kB, limit 9007199254740988kB, failcnt 0 [ 74.828356][ T3271] kmem: usage 285820kB, limit 9007199254740988kB, failcnt 0 [ 74.835644][ T3271] Memory cgroup stats for /syz0: [ 74.846003][ T3271] cache 57344 [ 74.854409][ T3271] rss 0 [ 74.857360][ T3271] shmem 0 [ 74.860289][ T3271] mapped_file 32768 [ 74.864083][ T3271] dirty 49152 [ 74.867498][ T3271] writeback 0 [ 74.870771][ T3271] workingset_refault_anon 14 [ 74.875432][ T3271] workingset_refault_file 0 [ 74.879945][ T3271] swap 495616 [ 74.883281][ T3271] swapcached 4096 [ 74.886942][ T3271] pgpgin 44047 [ 74.890382][ T3271] pgpgout 44032 [ 74.893826][ T3271] pgfault 65490 [ 74.897436][ T3271] pgmajfault 11 [ 74.900927][ T3271] inactive_anon 4096 [ 74.904997][ T3271] active_anon 0 [ 74.908461][ T3271] inactive_file 49152 [ 74.912433][ T3271] active_file 8192 [ 74.916160][ T3271] unevictable 0 [ 74.919645][ T3271] hierarchical_memory_limit 314572800 [ 74.925231][ T3271] hierarchical_memsw_limit 9223372036854771712 [ 74.931731][ T3271] total_cache 57344 [ 74.935607][ T3271] total_rss 0 [ 74.938895][ T3271] total_shmem 0 [ 74.942344][ T3271] total_mapped_file 32768 [ 74.946705][ T3271] total_dirty 49152 [ 74.950550][ T3271] total_writeback 0 [ 74.954364][ T3271] total_workingset_refault_anon 14 [ 74.959687][ T3271] total_workingset_refault_file 0 [ 74.964916][ T3271] total_swap 495616 [ 74.968741][ T3271] total_swapcached 4096 [ 74.972984][ T3271] total_pgpgin 44047 [ 74.976899][ T3271] total_pgpgout 44032 [ 74.980876][ T3271] total_pgfault 65490 [ 74.984870][ T3271] total_pgmajfault 11 [ 74.988914][ T3271] total_inactive_anon 4096 [ 74.993415][ T3271] total_active_anon 0 [ 74.997432][ T3271] total_inactive_file 49152 [ 75.001927][ T3271] total_active_file 8192 [ 75.006336][ T3271] total_unevictable 0 [ 75.010487][ T3271] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.857,pid=6041,uid=0 [ 75.025056][ T3271] Memory cgroup out of memory: Killed process 6041 (syz.0.857) total-vm:91624kB, anon-rss:612kB, file-rss:20256kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 75.052612][ T6073] loop3: detected capacity change from 0 to 512 [ 75.070228][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.103459][ T6073] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.155648][ T6073] FAULT_INJECTION: forcing a failure. [ 75.155648][ T6073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.168956][ T6073] CPU: 1 UID: 0 PID: 6073 Comm: syz.3.863 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 75.179716][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.189769][ T6073] Call Trace: [ 75.193044][ T6073] [ 75.196033][ T6073] dump_stack_lvl+0xf2/0x150 [ 75.200752][ T6073] dump_stack+0x15/0x20 [ 75.205022][ T6073] should_fail_ex+0x223/0x230 [ 75.209761][ T6073] should_fail_alloc_page+0xfd/0x110 [ 75.215051][ T6073] __alloc_pages_noprof+0x109/0x340 [ 75.220248][ T6073] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 75.225716][ T6073] folio_alloc_noprof+0xee/0x130 [ 75.230665][ T6073] filemap_alloc_folio_noprof+0x69/0x220 [ 75.236430][ T6073] __filemap_get_folio+0x298/0x5b0 [ 75.241603][ T6073] ext4_write_begin+0x18c/0xc30 [ 75.246672][ T6073] ? exc_page_fault+0x32e/0x650 [ 75.251588][ T6073] ? fault_in_readable+0x97/0x1b0 [ 75.256770][ T6073] ext4_da_write_begin+0x1b6/0x540 [ 75.261987][ T6073] generic_perform_write+0x1a8/0x4a0 [ 75.267274][ T6073] ext4_buffered_write_iter+0x1ea/0x370 [ 75.272830][ T6073] ext4_file_write_iter+0x293/0xe10 [ 75.278412][ T6073] ? kstrtouint+0x77/0xc0 [ 75.282844][ T6073] ? kstrtouint_from_user+0xb0/0xe0 [ 75.288114][ T6073] ? avc_policy_seqno+0x15/0x20 [ 75.293116][ T6073] vfs_write+0x76a/0x910 [ 75.297376][ T6073] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 75.303183][ T6073] ksys_write+0xeb/0x1b0 [ 75.307481][ T6073] __x64_sys_write+0x42/0x50 [ 75.312084][ T6073] x64_sys_call+0x27dd/0x2d60 [ 75.316784][ T6073] do_syscall_64+0xc9/0x1c0 [ 75.321320][ T6073] ? clear_bhb_loop+0x55/0xb0 [ 75.326008][ T6073] ? clear_bhb_loop+0x55/0xb0 [ 75.330702][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.336651][ T6073] RIP: 0033:0x7f2b7448dff9 [ 75.341068][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.360827][ T6073] RSP: 002b:00007f2b73101038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.369277][ T6073] RAX: ffffffffffffffda RBX: 00007f2b74645f80 RCX: 00007f2b7448dff9 [ 75.377512][ T6073] RDX: 0000000000001001 RSI: 0000000020000100 RDI: 0000000000000005 [ 75.385503][ T6073] RBP: 00007f2b73101090 R08: 0000000000000000 R09: 0000000000000000 [ 75.393549][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.401526][ T6073] R13: 0000000000000000 R14: 00007f2b74645f80 R15: 00007ffee5017da8 [ 75.409526][ T6073] [ 75.412739][ T6042] syz.0.857 (6042) used greatest stack depth: 9848 bytes left [ 75.424153][ T6077] loop2: detected capacity change from 0 to 512 [ 75.433542][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.463081][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.487669][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.533182][ T4300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.552723][ T6082] validate_nla: 2 callbacks suppressed [ 75.552739][ T6082] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 75.596878][ T6085] loop2: detected capacity change from 0 to 512 [ 75.621498][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.646452][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.658356][ T6085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.686332][ T6085] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.797268][ T6094] SELinux: Context system_u:object_r:groupadd_exec_t:s0 is not valid (left unmapped). [ 75.849192][ T4300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.915261][ T6105] loop1: detected capacity change from 0 to 512 [ 75.928473][ T6105] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.949875][ T6105] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 75.974560][ T6110] loop2: detected capacity change from 0 to 512 [ 75.983833][ T6110] EXT4-fs: Ignoring removed orlov option [ 75.991808][ T6105] EXT4-fs (loop1): 1 truncate cleaned up [ 75.998071][ T6112] netlink: 'syz.3.877': attribute type 1 has an invalid length. [ 76.006766][ T6105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.017840][ T6110] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 76.029509][ T6110] EXT4-fs (loop2): group descriptors corrupted! [ 76.065062][ T3603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.067537][ T6116] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 76.139138][ T6122] FAULT_INJECTION: forcing a failure. [ 76.139138][ T6122] name failslab, interval 1, probability 0, space 0, times 0 [ 76.152118][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.2.882 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 76.163089][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.173144][ T6122] Call Trace: [ 76.176430][ T6122] [ 76.179357][ T6122] dump_stack_lvl+0xf2/0x150 [ 76.184051][ T6122] dump_stack+0x15/0x20 [ 76.188213][ T6122] should_fail_ex+0x223/0x230 [ 76.192951][ T6122] ? ip6_setup_cork+0x122/0x770 [ 76.197809][ T6122] should_failslab+0x8f/0xb0 [ 76.202480][ T6122] __kmalloc_cache_noprof+0x4b/0x2a0 [ 76.207800][ T6122] ip6_setup_cork+0x122/0x770 [ 76.212635][ T6122] ip6_append_data+0x173/0x260 [ 76.217473][ T6122] ? __pfx_raw6_getfrag+0x10/0x10 [ 76.222728][ T6122] rawv6_sendmsg+0xd87/0xf50 [ 76.227322][ T6122] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 76.232501][ T6122] inet_sendmsg+0xc5/0xd0 [ 76.237089][ T6122] __sock_sendmsg+0x102/0x180 [ 76.242063][ T6122] __sys_sendto+0x1d6/0x260 [ 76.246969][ T6122] __x64_sys_sendto+0x78/0x90 [ 76.251893][ T6122] x64_sys_call+0x2959/0x2d60 [ 76.256923][ T6122] do_syscall_64+0xc9/0x1c0 [ 76.261509][ T6122] ? clear_bhb_loop+0x55/0xb0 [ 76.266220][ T6122] ? clear_bhb_loop+0x55/0xb0 [ 76.271010][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.276931][ T6122] RIP: 0033:0x7f1cba24dff9 [ 76.281404][ T6122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.301215][ T6122] RSP: 002b:00007f1cb8ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 76.309737][ T6122] RAX: ffffffffffffffda RBX: 00007f1cba405f80 RCX: 00007f1cba24dff9 [ 76.317782][ T6122] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000003 [ 76.325831][ T6122] RBP: 00007f1cb8ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.333794][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.341761][ T6122] R13: 0000000000000000 R14: 00007f1cba405f80 R15: 00007fff1a2dd008 [ 76.349733][ T6122] [ 76.484018][ T6135] bond1: entered promiscuous mode [ 76.489186][ T6135] bond1: entered allmulticast mode [ 76.506328][ T6135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.535355][ T6135] bond1 (unregistering): Released all slaves [ 76.590746][ T6145] loop3: detected capacity change from 0 to 512 [ 76.632166][ T6143] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 76.650364][ T6145] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.672173][ T6145] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 76.672315][ T6147] loop4: detected capacity change from 0 to 1024 [ 76.693967][ T6145] EXT4-fs (loop3): 1 truncate cleaned up [ 76.701528][ T6145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.715011][ T6147] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.730014][ T6147] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.745092][ T6147] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.753890][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.756554][ T6147] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.891: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.776797][ T6147] EXT4-fs (loop4): 1 orphan inode deleted [ 76.823593][ T6147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.922842][ T6147] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz.4.891: path /191/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 76.948409][ T6147] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 17: comm syz.4.891: path /191/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 76.969575][ T6147] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 18: comm syz.4.891: path /191/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 77.033565][ T6171] FAULT_INJECTION: forcing a failure. [ 77.033565][ T6171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.046932][ T6171] CPU: 1 UID: 0 PID: 6171 Comm: syz.1.899 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 77.057659][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.067945][ T6171] Call Trace: [ 77.071330][ T6171] [ 77.074302][ T6171] dump_stack_lvl+0xf2/0x150 [ 77.078914][ T6171] dump_stack+0x15/0x20 [ 77.083341][ T6171] should_fail_ex+0x223/0x230 [ 77.088159][ T6171] should_fail_alloc_page+0xfd/0x110 [ 77.093475][ T6171] __alloc_pages_noprof+0x109/0x340 [ 77.098685][ T6171] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 77.104450][ T6171] folio_alloc_mpol_noprof+0x36/0x70 [ 77.109851][ T6171] shmem_get_folio_gfp+0x3d1/0xd90 [ 77.115049][ T6171] shmem_fallocate+0x593/0x860 [ 77.119827][ T6171] vfs_fallocate+0x368/0x3b0 [ 77.124444][ T6171] __x64_sys_fallocate+0x79/0xc0 [ 77.129531][ T6171] x64_sys_call+0x2783/0x2d60 [ 77.134234][ T6171] do_syscall_64+0xc9/0x1c0 [ 77.138956][ T6171] ? clear_bhb_loop+0x55/0xb0 [ 77.143755][ T6171] ? clear_bhb_loop+0x55/0xb0 [ 77.148637][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.154824][ T6171] RIP: 0033:0x7f6b4afadff9 [ 77.156395][ T6147] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 19: comm syz.4.891: path /191/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 77.159886][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.198526][ T6147] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 20: comm syz.4.891: path /191/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 77.200199][ T6171] RSP: 002b:00007f6b49c27038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 77.229880][ T6171] RAX: ffffffffffffffda RBX: 00007f6b4b165f80 RCX: 00007f6b4afadff9 [ 77.237862][ T6171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 77.245981][ T6171] RBP: 00007f6b49c27090 R08: 0000000000000000 R09: 0000000000000000 [ 77.254036][ T6171] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000002 [ 77.262618][ T6171] R13: 0000000000000000 R14: 00007f6b4b165f80 R15: 00007ffe8c78d458 [ 77.270616][ T6171] [ 77.274108][ T6147] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 21: comm syz.4.891: path /191/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 77.306847][ T6147] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 22: comm syz.4.891: path /191/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 77.336475][ T6147] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 23: comm syz.4.891: path /191/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 77.410920][ T6169] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.891: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 77.469472][ T6175] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.891: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 77.694494][ T3274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.742214][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 77.742226][ T29] audit: type=1400 audit(1728775751.565:1359): avc: denied { mount } for pid=6178 comm="syz.3.902" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.758737][ T6182] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 77.920767][ T6188] bond1: entered promiscuous mode [ 77.925855][ T6188] bond1: entered allmulticast mode [ 77.932572][ T6193] vhci_hcd: invalid port number 61 [ 77.937969][ T6193] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 77.945389][ T6188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.968314][ T6188] bond1 (unregistering): Released all slaves [ 78.020262][ T6196] vhci_hcd: invalid port number 61 [ 78.025433][ T6196] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 78.107899][ T6206] loop1: detected capacity change from 0 to 512 [ 78.128723][ T6206] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.149339][ T6206] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 78.171838][ T6206] EXT4-fs (loop1): 1 truncate cleaned up [ 78.192368][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.209507][ T6214] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 78.234591][ T3603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.291156][ T6218] capability: warning: `syz.1.913' uses 32-bit capabilities (legacy support in use) [ 78.424520][ T6227] vhci_hcd: invalid port number 61 [ 78.429765][ T6227] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 78.491641][ T6231] SET target dimension over the limit! [ 78.497773][ T6231] FAULT_INJECTION: forcing a failure. [ 78.497773][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.510883][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.1.921 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 78.521489][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.531558][ T6231] Call Trace: [ 78.534829][ T6231] [ 78.537758][ T6231] dump_stack_lvl+0xf2/0x150 [ 78.542372][ T6231] dump_stack+0x15/0x20 [ 78.546699][ T6231] should_fail_ex+0x223/0x230 [ 78.551507][ T6231] should_fail+0xb/0x10 [ 78.555677][ T6231] should_fail_usercopy+0x1a/0x20 [ 78.560772][ T6231] _copy_to_user+0x1e/0xa0 [ 78.565192][ T6231] simple_read_from_buffer+0xa0/0x110 [ 78.570634][ T6231] proc_fail_nth_read+0xf9/0x140 [ 78.575578][ T6231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.581140][ T6231] vfs_read+0x195/0x720 [ 78.585312][ T6231] ? __rcu_read_unlock+0x4e/0x70 [ 78.590352][ T6231] ? __fget_files+0x1d4/0x210 [ 78.595045][ T6231] ksys_read+0xeb/0x1b0 [ 78.599235][ T6231] __x64_sys_read+0x42/0x50 [ 78.603917][ T6231] x64_sys_call+0x27d3/0x2d60 [ 78.608617][ T6231] do_syscall_64+0xc9/0x1c0 [ 78.613180][ T6231] ? clear_bhb_loop+0x55/0xb0 [ 78.617871][ T6231] ? clear_bhb_loop+0x55/0xb0 [ 78.622581][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.629013][ T6231] RIP: 0033:0x7f6b4afaca3c [ 78.633418][ T6231] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 78.653031][ T6231] RSP: 002b:00007f6b49c27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.661539][ T6231] RAX: ffffffffffffffda RBX: 00007f6b4b165f80 RCX: 00007f6b4afaca3c [ 78.669503][ T6231] RDX: 000000000000000f RSI: 00007f6b49c270a0 RDI: 0000000000000005 [ 78.677556][ T6231] RBP: 00007f6b49c27090 R08: 0000000000000000 R09: 0000000000000000 [ 78.685546][ T6231] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 78.693565][ T6231] R13: 0000000000000000 R14: 00007f6b4b165f80 R15: 00007ffe8c78d458 [ 78.702142][ T6231] [ 78.731843][ T29] audit: type=1400 audit(1728775752.555:1360): avc: denied { unmount } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.791256][ T6233] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 78.873320][ T6242] loop1: detected capacity change from 0 to 512 [ 78.897816][ T6241] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 78.918098][ T6242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.955557][ T6242] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 78.979620][ T6242] EXT4-fs (loop1): 1 truncate cleaned up [ 78.991509][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.008866][ T6252] vhci_hcd: invalid port number 61 [ 79.014060][ T6252] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 79.032822][ T3603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.068882][ T6256] vhci_hcd: invalid port number 61 [ 79.074246][ T6256] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 79.083230][ T6258] FAULT_INJECTION: forcing a failure. [ 79.083230][ T6258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.096595][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: syz.1.930 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 79.107186][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.117380][ T6258] Call Trace: [ 79.120679][ T6258] [ 79.123636][ T6258] dump_stack_lvl+0xf2/0x150 [ 79.128328][ T6258] dump_stack+0x15/0x20 [ 79.132487][ T6258] should_fail_ex+0x223/0x230 [ 79.137377][ T6258] should_fail_alloc_page+0xfd/0x110 [ 79.142713][ T6258] __alloc_pages_noprof+0x109/0x340 [ 79.147990][ T6258] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 79.153925][ T6258] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 79.159315][ T6258] handle_mm_fault+0xdbe/0x2a80 [ 79.164346][ T6258] ? __rcu_read_lock+0x36/0x50 [ 79.169167][ T6258] __get_user_pages+0xf2c/0x2670 [ 79.174131][ T6258] __mm_populate+0x25b/0x3b0 [ 79.178803][ T6258] vm_mmap_pgoff+0x1d6/0x290 [ 79.183527][ T6258] ksys_mmap_pgoff+0xd0/0x330 [ 79.188619][ T6258] ? fpregs_assert_state_consistent+0x83/0xa0 [ 79.194851][ T6258] x64_sys_call+0x1884/0x2d60 [ 79.199764][ T6258] do_syscall_64+0xc9/0x1c0 [ 79.204465][ T6258] ? clear_bhb_loop+0x55/0xb0 [ 79.209152][ T6258] ? clear_bhb_loop+0x55/0xb0 [ 79.213851][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.219751][ T6258] RIP: 0033:0x7f6b4afadff9 [ 79.224175][ T6258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.244711][ T6258] RSP: 002b:00007f6b49c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 79.253346][ T6258] RAX: ffffffffffffffda RBX: 00007f6b4b165f80 RCX: 00007f6b4afadff9 [ 79.261316][ T6258] RDX: 0000000001000007 RSI: 000000000000a000 RDI: 0000000020000000 [ 79.269577][ T6258] RBP: 00007f6b49c27090 R08: ffffffffffffffff R09: 0000000000000000 [ 79.277617][ T6258] R10: 0000000000002172 R11: 0000000000000246 R12: 0000000000000002 [ 79.285708][ T6258] R13: 0000000000000000 R14: 00007f6b4b165f80 R15: 00007ffe8c78d458 [ 79.293707][ T6258] [ 79.329137][ T6262] vhci_hcd: invalid port number 61 [ 79.334417][ T6262] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 79.365684][ T6264] FAULT_INJECTION: forcing a failure. [ 79.365684][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 79.378546][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.4.933 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 79.389146][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.399351][ T6264] Call Trace: [ 79.402628][ T6264] [ 79.405568][ T6264] dump_stack_lvl+0xf2/0x150 [ 79.410275][ T6264] dump_stack+0x15/0x20 [ 79.414528][ T6264] should_fail_ex+0x223/0x230 [ 79.419359][ T6264] ? dup_task_struct+0x6c/0x710 [ 79.424340][ T6264] should_failslab+0x8f/0xb0 [ 79.429064][ T6264] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 79.434964][ T6264] dup_task_struct+0x6c/0x710 [ 79.439659][ T6264] ? path_openat+0x1a5a/0x1fa0 [ 79.444632][ T6264] copy_process+0x3a9/0x1f90 [ 79.449243][ T6264] ? _copy_from_user+0x9a/0xd0 [ 79.454033][ T6264] kernel_clone+0x167/0x5e0 [ 79.458557][ T6264] __se_sys_clone3+0x1b5/0x1f0 [ 79.463465][ T6264] __x64_sys_clone3+0x31/0x40 [ 79.468169][ T6264] x64_sys_call+0x287d/0x2d60 [ 79.472873][ T6264] do_syscall_64+0xc9/0x1c0 [ 79.477462][ T6264] ? clear_bhb_loop+0x55/0xb0 [ 79.482162][ T6264] ? clear_bhb_loop+0x55/0xb0 [ 79.486948][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.492979][ T6264] RIP: 0033:0x7fa94813dff9 [ 79.497410][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.517125][ T6264] RSP: 002b:00007fa946db0f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 79.525689][ T6264] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa94813dff9 [ 79.533717][ T6264] RDX: 00007fa946db0f20 RSI: 0000000000000058 RDI: 00007fa946db0f20 [ 79.541783][ T6264] RBP: 00007fa946db1090 R08: 0000000000000000 R09: 0000000000000058 [ 79.550532][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.558518][ T6264] R13: 0000000000000000 R14: 00007fa9482f5f80 R15: 00007ffe2aa3d528 [ 79.566674][ T6264] [ 79.690795][ T6275] loop4: detected capacity change from 0 to 128 [ 79.904143][ T29] audit: type=1400 audit(1728775753.725:1361): avc: denied { mount } for pid=6274 comm="syz.4.937" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 79.932805][ T3344] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/2 [ 79.984574][ T3344] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 79.996328][ T29] audit: type=1400 audit(1728775753.755:1362): avc: denied { remount } for pid=6274 comm="syz.4.937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 80.030432][ T6283] loop3: detected capacity change from 0 to 512 [ 80.039048][ T6279] syz.2.938[6279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.039102][ T6279] syz.2.938[6279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.051254][ T6279] syz.2.938[6279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.063871][ T6283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.095210][ T6279] loop2: detected capacity change from 0 to 512 [ 80.103485][ T6279] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 80.105947][ T6283] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 80.139424][ T6283] EXT4-fs (loop3): 1 truncate cleaned up [ 80.145700][ T6283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.170467][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.225098][ T6292] loop0: detected capacity change from 0 to 512 [ 80.260340][ T6292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.278037][ T6296] vhci_hcd: invalid port number 61 [ 80.283303][ T6296] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 80.316803][ T6292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.388615][ T6302] FAULT_INJECTION: forcing a failure. [ 80.388615][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 80.401468][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.1.946 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 80.412469][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.422538][ T6302] Call Trace: [ 80.425821][ T6302] [ 80.428802][ T6302] dump_stack_lvl+0xf2/0x150 [ 80.433413][ T6302] dump_stack+0x15/0x20 [ 80.437618][ T6302] should_fail_ex+0x223/0x230 [ 80.442315][ T6302] ? __se_sys_mount+0xf7/0x2d0 [ 80.447097][ T6302] should_failslab+0x8f/0xb0 [ 80.451779][ T6302] __kmalloc_cache_noprof+0x4b/0x2a0 [ 80.457069][ T6292] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.457075][ T6302] __se_sys_mount+0xf7/0x2d0 [ 80.472090][ T6302] ? fput+0x14e/0x190 [ 80.476091][ T6302] ? ksys_write+0x17a/0x1b0 [ 80.480619][ T6302] __x64_sys_mount+0x67/0x80 [ 80.485257][ T6302] x64_sys_call+0x203e/0x2d60 [ 80.489999][ T6302] do_syscall_64+0xc9/0x1c0 [ 80.494505][ T6302] ? clear_bhb_loop+0x55/0xb0 [ 80.499199][ T6302] ? clear_bhb_loop+0x55/0xb0 [ 80.503917][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.509991][ T6302] RIP: 0033:0x7f6b4afadff9 [ 80.514409][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.534536][ T6302] RSP: 002b:00007f6b49c27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.543018][ T6302] RAX: ffffffffffffffda RBX: 00007f6b4b165f80 RCX: 00007f6b4afadff9 [ 80.551048][ T6302] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000000000000 [ 80.559237][ T6302] RBP: 00007f6b49c27090 R08: 0000000020000300 R09: 0000000000000000 [ 80.567202][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.575381][ T6302] R13: 0000000000000000 R14: 00007f6b4b165f80 R15: 00007ffe8c78d458 [ 80.583418][ T6302] [ 80.606764][ T29] audit: type=1400 audit(1728775754.415:1363): avc: denied { unmount } for pid=3274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 80.659323][ T6305] FAULT_INJECTION: forcing a failure. [ 80.659323][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 80.672187][ T6305] CPU: 1 UID: 0 PID: 6305 Comm: syz.3.947 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 80.682896][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.692954][ T6305] Call Trace: [ 80.696241][ T6305] [ 80.699175][ T6305] dump_stack_lvl+0xf2/0x150 [ 80.703778][ T6305] dump_stack+0x15/0x20 [ 80.708011][ T6305] should_fail_ex+0x223/0x230 [ 80.712709][ T6305] ? alloc_empty_file+0xd0/0x2f0 [ 80.717661][ T6305] should_failslab+0x8f/0xb0 [ 80.722263][ T6305] kmem_cache_alloc_noprof+0x4c/0x290 [ 80.730098][ T6305] alloc_empty_file+0xd0/0x2f0 [ 80.734871][ T6305] alloc_file_pseudo+0xc3/0x140 [ 80.739721][ T6305] sock_alloc_file+0x9b/0x1c0 [ 80.744404][ T6305] __sys_socketpair+0x23e/0x430 [ 80.749267][ T6305] __x64_sys_socketpair+0x52/0x60 [ 80.754330][ T6305] x64_sys_call+0x1c1e/0x2d60 [ 80.759007][ T6305] do_syscall_64+0xc9/0x1c0 [ 80.763506][ T6305] ? clear_bhb_loop+0x55/0xb0 [ 80.768388][ T6305] ? clear_bhb_loop+0x55/0xb0 [ 80.773128][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.779154][ T6305] RIP: 0033:0x7f2b7448ff4a [ 80.783559][ T6305] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.803442][ T6305] RSP: 002b:00007f2b73100f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 80.811946][ T6305] RAX: ffffffffffffffda RBX: 00007f2b74645f00 RCX: 00007f2b7448ff4a [ 80.819925][ T6305] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 80.827926][ T6305] RBP: 00007f2b73101090 R08: 0000000000000000 R09: 0000000000000000 [ 80.835895][ T6305] R10: 00007f2b73100f98 R11: 0000000000000246 R12: 0000000000000004 [ 80.843895][ T6305] R13: 0000000000000000 R14: 00007f2b74645f80 R15: 00007ffee5017da8 [ 80.851885][ T6305] [ 81.200870][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.220957][ T6322] loop0: detected capacity change from 0 to 512 [ 81.227878][ T6322] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.238723][ T6322] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 81.253978][ T6322] EXT4-fs (loop0): 1 truncate cleaned up [ 81.259824][ T6322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.281282][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.478479][ T6335] loop3: detected capacity change from 0 to 512 [ 81.489950][ T6335] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.955: corrupted xattr block 255: invalid header [ 81.504979][ T6335] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 81.514839][ T6335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.527696][ T6335] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.955: corrupted xattr block 255: invalid header [ 81.544837][ T6335] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 81.559807][ T6335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.604022][ T6342] FAULT_INJECTION: forcing a failure. [ 81.604022][ T6342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.607499][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 81.617279][ T6342] CPU: 0 UID: 0 PID: 6342 Comm: syz.4.958 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 81.636986][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.647058][ T6342] Call Trace: [ 81.650370][ T6342] [ 81.653378][ T6342] dump_stack_lvl+0xf2/0x150 [ 81.657984][ T6342] dump_stack+0x15/0x20 [ 81.662149][ T6342] should_fail_ex+0x223/0x230 [ 81.666844][ T6342] should_fail+0xb/0x10 [ 81.671376][ T6342] should_fail_usercopy+0x1a/0x20 [ 81.676463][ T6342] _copy_from_user+0x1e/0xd0 [ 81.681059][ T6342] copy_from_sockptr_offset+0x6b/0xb0 [ 81.686480][ T6342] do_ip6t_set_ctl+0x6a4/0x8c0 [ 81.691342][ T6342] ? __rcu_read_unlock+0x4e/0x70 [ 81.696486][ T6342] nf_setsockopt+0x195/0x1b0 [ 81.701194][ T6342] ipv6_setsockopt+0x10f/0x130 [ 81.705970][ T6342] udpv6_setsockopt+0x95/0xb0 [ 81.710759][ T6342] sock_common_setsockopt+0x64/0x80 [ 81.715964][ T6342] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 81.721878][ T6342] __sys_setsockopt+0x1cc/0x240 [ 81.726752][ T6342] __x64_sys_setsockopt+0x66/0x80 [ 81.731845][ T6342] x64_sys_call+0x278d/0x2d60 [ 81.736610][ T6342] do_syscall_64+0xc9/0x1c0 [ 81.741266][ T6342] ? clear_bhb_loop+0x55/0xb0 [ 81.745991][ T6342] ? clear_bhb_loop+0x55/0xb0 [ 81.750758][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.756833][ T6342] RIP: 0033:0x7fa94813dff9 [ 81.761265][ T6342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.781022][ T6342] RSP: 002b:00007fa946db1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.789502][ T6342] RAX: ffffffffffffffda RBX: 00007fa9482f5f80 RCX: 00007fa94813dff9 [ 81.797489][ T6342] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 81.805628][ T6342] RBP: 00007fa946db1090 R08: 0000000000000060 R09: 0000000000000000 [ 81.813611][ T6342] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 81.821641][ T6342] R13: 0000000000000000 R14: 00007fa9482f5f80 R15: 00007ffe2aa3d528 [ 81.829725][ T6342] [ 81.852170][ T6345] vhci_hcd: invalid port number 61 [ 81.857417][ T6345] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 81.866007][ T6335] hsr_slave_1 (unregistering): left promiscuous mode [ 81.960270][ T6354] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 82.069882][ T29] audit: type=1326 audit(1728775755.895:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7448dff9 code=0x7ffc0000 [ 82.093367][ T29] audit: type=1326 audit(1728775755.895:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7448dff9 code=0x7ffc0000 [ 82.126370][ T29] audit: type=1326 audit(1728775755.895:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7448dff9 code=0x7ffc0000 [ 82.150117][ T29] audit: type=1326 audit(1728775755.895:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7448dff9 code=0x7ffc0000 [ 82.173913][ T29] audit: type=1326 audit(1728775755.895:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7448dff9 code=0x7ffc0000 [ 82.207780][ T6374] vhci_hcd: invalid port number 61 [ 82.213117][ T6374] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 82.243077][ T6378] vhci_hcd: invalid port number 61 [ 82.248252][ T6378] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 82.337679][ T6390] FAULT_INJECTION: forcing a failure. [ 82.337679][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 82.350523][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.2.975 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 82.361647][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.371881][ T6390] Call Trace: [ 82.375199][ T6390] [ 82.378139][ T6390] dump_stack_lvl+0xf2/0x150 [ 82.382825][ T6390] dump_stack+0x15/0x20 [ 82.387004][ T6390] should_fail_ex+0x223/0x230 [ 82.391703][ T6390] ? p9_client_stat+0x5b/0x220 [ 82.396483][ T6390] should_failslab+0x8f/0xb0 [ 82.401101][ T6390] __kmalloc_cache_noprof+0x4b/0x2a0 [ 82.406483][ T6390] p9_client_stat+0x5b/0x220 [ 82.411111][ T6390] v9fs_fid_iget+0x141/0x300 [ 82.415815][ T6390] v9fs_vfs_lookup+0x1b7/0x320 [ 82.420597][ T6390] lookup_one_qstr_excl+0xc7/0x1a0 [ 82.425731][ T6390] filename_create+0x14d/0x2b0 [ 82.430610][ T6390] do_mkdirat+0x63/0x2a0 [ 82.434869][ T6390] __x64_sys_mkdirat+0x4e/0x60 [ 82.439827][ T6390] x64_sys_call+0x2cd3/0x2d60 [ 82.444531][ T6390] do_syscall_64+0xc9/0x1c0 [ 82.449039][ T6390] ? clear_bhb_loop+0x55/0xb0 [ 82.453871][ T6390] ? clear_bhb_loop+0x55/0xb0 [ 82.458699][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.464626][ T6390] RIP: 0033:0x7f1cba24c897 [ 82.469221][ T6390] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.488823][ T6390] RSP: 002b:00007f1cb8ec6e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 82.497317][ T6390] RAX: ffffffffffffffda RBX: 00007f1cb8ec6ef0 RCX: 00007f1cba24c897 [ 82.505285][ T6390] RDX: 00000000000001ff RSI: 0000000020000280 RDI: 00000000ffffff9c [ 82.513347][ T6390] RBP: 00000000200002c0 R08: 0000000020000080 R09: 0000000000000000 [ 82.521618][ T6390] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000020000280 [ 82.529586][ T6390] R13: 00007f1cb8ec6eb0 R14: 0000000000000000 R15: 0000000000000000 [ 82.537717][ T6390] [ 82.703275][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 82.712420][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 82.721397][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 82.742219][ T6402] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 82.824422][ T6414] vhci_hcd: invalid port number 61 [ 82.829598][ T6414] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 82.850561][ T6421] syz.0.986[6421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.852308][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.870956][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.890606][ T6421] bridge_slave_1: left allmulticast mode [ 82.896438][ T6421] bridge_slave_1: left promiscuous mode [ 82.902205][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.911089][ T6421] bridge_slave_0: left allmulticast mode [ 82.916803][ T6421] bridge_slave_0: left promiscuous mode [ 82.922516][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.928456][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 82.928472][ T29] audit: type=1400 audit(1728775756.735:1419): avc: denied { getopt } for pid=6424 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.932621][ T6428] FAULT_INJECTION: forcing a failure. [ 82.932621][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 82.968734][ T6428] CPU: 1 UID: 0 PID: 6428 Comm: syz.4.990 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 82.979344][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.989407][ T6428] Call Trace: [ 82.992686][ T6428] [ 82.995666][ T6428] dump_stack_lvl+0xf2/0x150 [ 83.000262][ T6428] dump_stack+0x15/0x20 [ 83.004606][ T6428] should_fail_ex+0x223/0x230 [ 83.009313][ T6428] ? skb_clone+0x154/0x1f0 [ 83.013914][ T6428] should_failslab+0x8f/0xb0 [ 83.018518][ T6428] kmem_cache_alloc_noprof+0x4c/0x290 [ 83.023919][ T6428] skb_clone+0x154/0x1f0 [ 83.028237][ T6428] pfkey_sendmsg+0x2de/0x970 [ 83.032873][ T6428] ? selinux_socket_sendmsg+0x19c/0x1d0 [ 83.038512][ T6428] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 83.043626][ T6428] __sock_sendmsg+0x140/0x180 [ 83.048391][ T6428] ____sys_sendmsg+0x312/0x410 [ 83.053168][ T6428] __sys_sendmsg+0x1d9/0x270 [ 83.057813][ T6428] __x64_sys_sendmsg+0x46/0x50 [ 83.062630][ T6428] x64_sys_call+0x2689/0x2d60 [ 83.067390][ T6428] do_syscall_64+0xc9/0x1c0 [ 83.071891][ T6428] ? clear_bhb_loop+0x55/0xb0 [ 83.076666][ T6428] ? clear_bhb_loop+0x55/0xb0 [ 83.081507][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.083383][ T6430] loop0: detected capacity change from 0 to 164 [ 83.087435][ T6428] RIP: 0033:0x7fa94813dff9 [ 83.087458][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.118004][ T6428] RSP: 002b:00007fa946db1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.126419][ T6428] RAX: ffffffffffffffda RBX: 00007fa9482f5f80 RCX: 00007fa94813dff9 [ 83.134389][ T6428] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 83.142422][ T6428] RBP: 00007fa946db1090 R08: 0000000000000000 R09: 0000000000000000 [ 83.150480][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.158463][ T6428] R13: 0000000000000000 R14: 00007fa9482f5f80 R15: 00007ffe2aa3d528 [ 83.166579][ T6428] [ 83.173912][ T6430] Unable to read rock-ridge attributes [ 83.174495][ T6432] loop3: detected capacity change from 0 to 512 [ 83.187326][ T29] audit: type=1400 audit(1728775757.005:1420): avc: denied { mount } for pid=6419 comm="syz.0.986" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 83.213742][ T6432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.223736][ T6421] bridge0 (unregistering): left promiscuous mode [ 83.226421][ T6432] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 83.244988][ T6432] EXT4-fs (loop3): 1 truncate cleaned up [ 83.251065][ T6432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.291996][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.421148][ T6471] vhci_hcd: invalid port number 61 [ 83.426484][ T6471] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 83.455754][ T6474] loop2: detected capacity change from 0 to 512 [ 83.487004][ T6466] mmap: syz.3.993 (6466): VmData 29196288 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 83.494756][ T6480] netlink: 'syz.0.1001': attribute type 1 has an invalid length. [ 83.547690][ T6474] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.576391][ T29] audit: type=1400 audit(1728775757.395:1421): avc: denied { setattr } for pid=6473 comm="syz.2.1000" path="/105/bus/freezer.self_freezing" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.622776][ T29] audit: type=1400 audit(1728775757.445:1422): avc: denied { ioctl } for pid=6473 comm="syz.2.1000" path="/105/bus/file1" dev="loop2" ino=15 ioctlcmd=0x551d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.656620][ T6474] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.1000: corrupted inode contents [ 83.670164][ T6474] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #19: comm syz.2.1000: mark_inode_dirty error [ 83.686993][ T6491] loop0: detected capacity change from 0 to 1024 [ 83.701504][ T6491] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.706355][ T29] audit: type=1400 audit(1728775757.475:1423): avc: denied { ioctl } for pid=6473 comm="syz.2.1000" path="/105/bus/freezer.self_freezing" dev="loop2" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.716615][ T6474] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.1000: corrupted inode contents [ 83.750902][ T6491] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 83.760199][ T6491] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.767221][ T6491] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.1002: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.781375][ T6474] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.1000: mark_inode_dirty error [ 83.794275][ T6491] EXT4-fs (loop0): 1 orphan inode deleted [ 83.800730][ T6474] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.1000: mark inode dirty (error -117) [ 83.802418][ T6491] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.1002: path /183/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 83.814622][ T6495] vhci_hcd: invalid port number 61 [ 83.838504][ T6495] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 83.846287][ T6491] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz.0.1002: path /183/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.853027][ T6474] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 83.878893][ T6491] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 18: comm syz.0.1002: path /183/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.924771][ T6501] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 83.935219][ T6498] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 16: comm syz.0.1002: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 83.949388][ T6503] loop2: detected capacity change from 0 to 512 [ 83.954564][ T6491] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 19: comm syz.0.1002: path /183/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.989273][ T6491] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 20: comm syz.0.1002: path /183/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.010068][ T6498] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 16: comm syz.0.1002: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 84.036056][ T6498] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 16: comm syz.0.1002: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 84.056071][ T6503] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.1004: corrupted xattr block 255: invalid header [ 84.069986][ T6503] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 84.078718][ T6503] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.1004: corrupted xattr block 255: invalid header [ 84.093163][ T6503] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 84.109926][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 84.119851][ T6491] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 21: comm syz.0.1002: path /183/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.157909][ T6503] hsr_slave_1 (unregistering): left promiscuous mode [ 84.165388][ T6491] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 22: comm syz.0.1002: path /183/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.282688][ T6519] vhci_hcd: invalid port number 61 [ 84.287868][ T6519] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 84.295011][ T29] audit: type=1400 audit(1728775758.095:1424): avc: denied { mount } for pid=6516 comm="syz.4.1009" name="/" dev="ramfs" ino=13768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.355895][ T6526] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 84.454579][ T29] audit: type=1326 audit(1728775758.275:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94813dff9 code=0x7ffc0000 [ 84.473132][ T6532] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 84.478073][ T29] audit: type=1326 audit(1728775758.275:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94813dff9 code=0x7ffc0000 [ 84.509467][ T29] audit: type=1326 audit(1728775758.275:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa94813dff9 code=0x7ffc0000 [ 84.532912][ T29] audit: type=1326 audit(1728775758.275:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6520 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94813dff9 code=0x7ffc0000 [ 84.565719][ T6537] FAULT_INJECTION: forcing a failure. [ 84.565719][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 84.578424][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.1.1016 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 84.589110][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.599179][ T6537] Call Trace: [ 84.602461][ T6537] [ 84.605406][ T6537] dump_stack_lvl+0xf2/0x150 [ 84.610079][ T6537] dump_stack+0x15/0x20 [ 84.614250][ T6537] should_fail_ex+0x223/0x230 [ 84.618957][ T6537] ? ip_ra_control+0xd0/0x2c0 [ 84.623646][ T6537] should_failslab+0x8f/0xb0 [ 84.628260][ T6537] __kmalloc_cache_noprof+0x4b/0x2a0 [ 84.633749][ T6537] ? __pfx_mrtsock_destruct+0x10/0x10 [ 84.639224][ T6537] ip_ra_control+0xd0/0x2c0 [ 84.643742][ T6537] ? __pfx_mrtsock_destruct+0x10/0x10 [ 84.649170][ T6537] ip_mroute_setsockopt+0x32e/0x950 [ 84.654395][ T6537] do_ip_setsockopt+0xd4b/0x2340 [ 84.659562][ T6537] ip_setsockopt+0x63/0x100 [ 84.664118][ T6537] raw_setsockopt+0x101/0x150 [ 84.668823][ T6537] sock_common_setsockopt+0x64/0x80 [ 84.674121][ T6537] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 84.680042][ T6537] __sys_setsockopt+0x1cc/0x240 [ 84.684922][ T6537] __x64_sys_setsockopt+0x66/0x80 [ 84.690028][ T6537] x64_sys_call+0x278d/0x2d60 [ 84.694727][ T6537] do_syscall_64+0xc9/0x1c0 [ 84.699414][ T6537] ? clear_bhb_loop+0x55/0xb0 [ 84.704209][ T6537] ? clear_bhb_loop+0x55/0xb0 [ 84.708929][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.709761][ T6541] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 84.714879][ T6537] RIP: 0033:0x7f6b4afadff9 [ 84.714900][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.746743][ T6537] RSP: 002b:00007f6b49c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.746973][ T6542] vhci_hcd: invalid port number 61 [ 84.755162][ T6537] RAX: ffffffffffffffda RBX: 00007f6b4b165f80 RCX: 00007f6b4afadff9 [ 84.755180][ T6537] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 84.755192][ T6537] RBP: 00007f6b49c27090 R08: 0000000000000004 R09: 0000000000000000 [ 84.755204][ T6537] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 84.760345][ T6542] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 84.768257][ T6537] R13: 0000000000000000 R14: 00007f6b4b165f80 R15: 00007ffe8c78d458 [ 84.807196][ T6537] [ 84.848943][ T6544] loop4: detected capacity change from 0 to 512 [ 84.885563][ T6551] loop0: detected capacity change from 0 to 512 [ 84.893508][ T6544] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.906696][ T6559] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.925677][ T6551] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.1021: corrupted xattr block 255: invalid header [ 84.939937][ T6551] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 84.948676][ T6551] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.1021: corrupted xattr block 255: invalid header [ 84.970245][ T6551] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 84.993018][ T6569] loop2: detected capacity change from 0 to 512 [ 85.000990][ T6566] bond1: entered promiscuous mode [ 85.006069][ T6566] bond1: entered allmulticast mode [ 85.026099][ T6566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.037619][ T6569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.050551][ T6566] bond1 (unregistering): Released all slaves [ 85.074409][ T6569] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 85.088995][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 85.099208][ T6569] EXT4-fs (loop2): 1 truncate cleaned up [ 85.114786][ T6551] hsr_slave_1 (unregistering): left promiscuous mode [ 85.210092][ T6584] vhci_hcd: invalid port number 61 [ 85.215317][ T6584] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 85.248353][ T6586] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 85.322171][ T6595] netlink: 'syz.2.1033': attribute type 21 has an invalid length. [ 85.381258][ T6595] kernel profiling enabled (shift: 17) [ 85.398307][ T6597] loop0: detected capacity change from 0 to 256 [ 85.416995][ T6597] FAT-fs (loop0): bogus number of FAT sectors [ 85.423345][ T6597] FAT-fs (loop0): Can't find a valid FAT filesystem [ 85.436591][ T6599] FAULT_INJECTION: forcing a failure. [ 85.436591][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 85.449305][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.2.1035 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 85.460054][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.470116][ T6599] Call Trace: [ 85.473493][ T6599] [ 85.476426][ T6599] dump_stack_lvl+0xf2/0x150 [ 85.481020][ T6599] dump_stack+0x15/0x20 [ 85.485326][ T6599] should_fail_ex+0x223/0x230 [ 85.490007][ T6599] ? __alloc_skb+0x10b/0x310 [ 85.494816][ T6599] should_failslab+0x8f/0xb0 [ 85.499409][ T6599] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 85.505307][ T6599] __alloc_skb+0x10b/0x310 [ 85.510431][ T6599] audit_log_start+0x368/0x6b0 [ 85.515200][ T6599] audit_seccomp+0x4b/0x130 [ 85.519709][ T6599] __seccomp_filter+0x6fa/0x1180 [ 85.524672][ T6599] ? proc_fail_nth_write+0x12a/0x150 [ 85.530042][ T6599] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.535821][ T6599] ? vfs_write+0x580/0x910 [ 85.540260][ T6599] ? __fget_files+0x1d4/0x210 [ 85.545285][ T6599] __secure_computing+0x9f/0x1c0 [ 85.550264][ T6599] syscall_trace_enter+0xd1/0x1f0 [ 85.555669][ T6599] ? fpregs_assert_state_consistent+0x83/0xa0 [ 85.561811][ T6599] do_syscall_64+0xaa/0x1c0 [ 85.566581][ T6599] ? clear_bhb_loop+0x55/0xb0 [ 85.571266][ T6599] ? clear_bhb_loop+0x55/0xb0 [ 85.576028][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.581936][ T6599] RIP: 0033:0x7f1cba24dff9 [ 85.586345][ T6599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.605950][ T6599] RSP: 002b:00007f1cb8ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000091 [ 85.614538][ T6599] RAX: ffffffffffffffda RBX: 00007f1cba405f80 RCX: 00007f1cba24dff9 [ 85.622596][ T6599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.630658][ T6599] RBP: 00007f1cb8ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.638630][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.646768][ T6599] R13: 0000000000000000 R14: 00007f1cba405f80 R15: 00007fff1a2dd008 [ 85.654744][ T6599] [ 85.678201][ T6601] vhci_hcd: invalid port number 61 [ 85.683361][ T6601] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 85.726509][ T6604] vhci_hcd: invalid port number 61 [ 85.731712][ T6604] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 85.764775][ T6608] syz.2.1039[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.764836][ T6608] syz.2.1039[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.790806][ T6608] syz.2.1039[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.820072][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.839007][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.877523][ T6610] bridge_slave_1: left allmulticast mode [ 85.883246][ T6610] bridge_slave_1: left promiscuous mode [ 85.889006][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.920758][ T6610] bridge_slave_0: left allmulticast mode [ 85.926557][ T6610] bridge_slave_0: left promiscuous mode [ 85.932241][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.947166][ T6615] loop4: detected capacity change from 0 to 512 [ 85.955125][ T6615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.969199][ T6608] loop2: detected capacity change from 0 to 164 [ 85.978867][ T6615] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.101484][ T6622] vhci_hcd: invalid port number 61 [ 86.106668][ T6622] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 86.211900][ T6628] loop2: detected capacity change from 0 to 1024 [ 86.247194][ T6628] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.267313][ T6632] FAULT_INJECTION: forcing a failure. [ 86.267313][ T6632] name failslab, interval 1, probability 0, space 0, times 0 [ 86.280014][ T6632] CPU: 1 UID: 0 PID: 6632 Comm: syz.0.1047 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 86.290762][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.300905][ T6632] Call Trace: [ 86.304193][ T6632] [ 86.307145][ T6632] dump_stack_lvl+0xf2/0x150 [ 86.311748][ T6632] dump_stack+0x15/0x20 [ 86.315925][ T6632] should_fail_ex+0x223/0x230 [ 86.320633][ T6632] ? getname_flags+0x81/0x3b0 [ 86.325380][ T6632] should_failslab+0x8f/0xb0 [ 86.329985][ T6632] kmem_cache_alloc_noprof+0x4c/0x290 [ 86.335374][ T6632] getname_flags+0x81/0x3b0 [ 86.339894][ T6632] __x64_sys_unlinkat+0x75/0xb0 [ 86.344940][ T6632] x64_sys_call+0x25fd/0x2d60 [ 86.349722][ T6632] do_syscall_64+0xc9/0x1c0 [ 86.354291][ T6632] ? clear_bhb_loop+0x55/0xb0 [ 86.359020][ T6632] ? clear_bhb_loop+0x55/0xb0 [ 86.363927][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.369919][ T6632] RIP: 0033:0x7f2d8630dff9 [ 86.374348][ T6632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.393964][ T6632] RSP: 002b:00007f2d84f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 86.402429][ T6632] RAX: ffffffffffffffda RBX: 00007f2d864c5f80 RCX: 00007f2d8630dff9 [ 86.410593][ T6632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 86.418662][ T6632] RBP: 00007f2d84f87090 R08: 0000000000000000 R09: 0000000000000000 [ 86.426655][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.434639][ T6632] R13: 0000000000000000 R14: 00007f2d864c5f80 R15: 00007fffedfc2598 [ 86.436462][ T6628] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 86.442698][ T6632] [ 86.451115][ T6628] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.462643][ T6628] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.1045: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.476904][ T6628] EXT4-fs (loop2): 1 orphan inode deleted [ 86.510132][ T6628] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz.2.1045: path /120/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 86.558444][ T6628] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 17: comm syz.2.1045: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.620177][ T6641] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.1045: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 86.674814][ T6653] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.1045: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 86.722947][ T6628] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 18: comm syz.2.1045: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.758275][ T6628] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 19: comm syz.2.1045: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.778998][ T6641] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.1045: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 86.798351][ T6628] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 20: comm syz.2.1045: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.821660][ T6628] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 21: comm syz.2.1045: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.843859][ T6628] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 22: comm syz.2.1045: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.934368][ T6667] loop1: detected capacity change from 0 to 512 [ 86.950318][ T6667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.992244][ T6667] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 86.993727][ T6672] vhci_hcd: invalid port number 61 [ 87.012104][ T6672] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 87.020862][ T6667] EXT4-fs (loop1): 1 truncate cleaned up [ 87.095092][ T6695] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 87.127954][ T6699] vhci_hcd: invalid port number 61 [ 87.133134][ T6699] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 87.176867][ T6701] bond1: entered promiscuous mode [ 87.180727][ T6707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.182023][ T6701] bond1: entered allmulticast mode [ 87.182335][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.194660][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 87.233913][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 87.275519][ T6701] bond1 (unregistering): Released all slaves [ 87.306682][ T6705] netlink: 'syz.0.1066': attribute type 21 has an invalid length. [ 87.331250][ T6717] loop4: detected capacity change from 0 to 512 [ 87.362603][ T6717] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.394192][ T6717] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.418781][ T6717] EXT4-fs (loop4): 1 truncate cleaned up [ 87.519672][ T6729] vhci_hcd: invalid port number 61 [ 87.524830][ T6729] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 87.578342][ T6733] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 87.660456][ T6741] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.765671][ T6748] FAULT_INJECTION: forcing a failure. [ 87.765671][ T6748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.773349][ T6745] bond1: entered promiscuous mode [ 87.779056][ T6748] CPU: 1 UID: 0 PID: 6748 Comm: syz.3.1081 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 87.784070][ T6745] bond1: entered allmulticast mode [ 87.794728][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.794741][ T6748] Call Trace: [ 87.794748][ T6748] [ 87.794756][ T6748] dump_stack_lvl+0xf2/0x150 [ 87.820706][ T6748] dump_stack+0x15/0x20 [ 87.824883][ T6748] should_fail_ex+0x223/0x230 [ 87.829677][ T6748] should_fail+0xb/0x10 [ 87.833901][ T6748] should_fail_usercopy+0x1a/0x20 [ 87.838952][ T6748] _copy_from_iter+0xd3/0xd20 [ 87.843651][ T6748] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 87.849228][ T6748] copy_page_from_iter+0x14f/0x280 [ 87.854372][ T6748] tun_get_user+0x686/0x24e0 [ 87.855201][ T6745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.859058][ T6748] ? ref_tracker_alloc+0x1f5/0x2f0 [ 87.870977][ T6748] tun_chr_write_iter+0x188/0x240 [ 87.876053][ T6748] vfs_write+0x76a/0x910 [ 87.880304][ T6748] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 87.885935][ T6748] ksys_write+0xeb/0x1b0 [ 87.890201][ T6748] __x64_sys_write+0x42/0x50 [ 87.894870][ T6748] x64_sys_call+0x27dd/0x2d60 [ 87.899559][ T6748] do_syscall_64+0xc9/0x1c0 [ 87.904202][ T6748] ? clear_bhb_loop+0x55/0xb0 [ 87.908992][ T6748] ? clear_bhb_loop+0x55/0xb0 [ 87.913714][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.919639][ T6748] RIP: 0033:0x7f2b7448cadf [ 87.924049][ T6748] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 87.943762][ T6748] RSP: 002b:00007f2b73101000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 87.952278][ T6748] RAX: ffffffffffffffda RBX: 00007f2b74645f80 RCX: 00007f2b7448cadf [ 87.960541][ T6748] RDX: 00000000000000d2 RSI: 0000000020000080 RDI: 00000000000000c8 [ 87.968692][ T6748] RBP: 00007f2b73101090 R08: 0000000000000000 R09: 0000000000000000 [ 87.976698][ T6748] R10: 00000000000000d2 R11: 0000000000000293 R12: 0000000000000001 [ 87.984688][ T6748] R13: 0000000000000000 R14: 00007f2b74645f80 R15: 00007ffee5017da8 [ 87.989383][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 87.989395][ T29] audit: type=1400 audit(1728775761.805:1805): avc: denied { ioctl } for pid=6740 comm="syz.0.1079" path="socket:[14127]" dev="sockfs" ino=14127 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.993003][ T6748] [ 88.048369][ T6745] bond1 (unregistering): Released all slaves [ 88.118325][ T29] audit: type=1400 audit(1728775761.945:1806): avc: denied { name_bind } for pid=6754 comm="syz.2.1084" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.140437][ T29] audit: type=1400 audit(1728775761.945:1807): avc: denied { node_bind } for pid=6754 comm="syz.2.1084" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.166659][ T29] audit: type=1400 audit(1728775761.945:1808): avc: denied { read } for pid=6738 comm="syz.4.1078" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.189943][ T29] audit: type=1400 audit(1728775761.945:1809): avc: denied { open } for pid=6738 comm="syz.4.1078" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.215212][ T29] audit: type=1400 audit(1728775762.025:1810): avc: denied { ioctl } for pid=6738 comm="syz.4.1078" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.242061][ T29] audit: type=1400 audit(1728775762.065:1811): avc: denied { write } for pid=6761 comm="syz.3.1086" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.283156][ T29] audit: type=1400 audit(1728775762.105:1812): avc: denied { bind } for pid=6738 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.398029][ T29] audit: type=1326 audit(1728775762.205:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7448dff9 code=0x7ffc0000 [ 88.421798][ T29] audit: type=1326 audit(1728775762.205:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7448dff9 code=0x7ffc0000 [ 88.455099][ T6769] vhci_hcd: invalid port number 61 [ 88.460390][ T6769] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 88.482217][ T6777] vhci_hcd: invalid port number 61 [ 88.487425][ T6777] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 88.545148][ T6781] netlink: 'syz.1.1094': attribute type 21 has an invalid length. [ 88.577510][ T6786] loop1: detected capacity change from 0 to 1024 [ 88.584472][ T6786] EXT4-fs: Ignoring removed oldalloc option [ 88.747752][ T6795] loop3: detected capacity change from 0 to 512 [ 88.766922][ T6795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.818466][ T6795] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.845663][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.856986][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.038541][ T6803] bond1: entered promiscuous mode [ 89.043628][ T6803] bond1: entered allmulticast mode [ 89.071224][ T6803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.108340][ T6803] bond1 (unregistering): Released all slaves [ 89.376321][ T6810] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 89.407546][ T6812] vhci_hcd: invalid port number 61 [ 89.412829][ T6812] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 89.482270][ T6818] netlink: 'syz.0.1107': attribute type 21 has an invalid length. [ 89.565908][ T6829] FAULT_INJECTION: forcing a failure. [ 89.565908][ T6829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.579036][ T6829] CPU: 1 UID: 0 PID: 6829 Comm: syz.0.1111 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 89.590204][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.600279][ T6829] Call Trace: [ 89.603623][ T6829] [ 89.606556][ T6829] dump_stack_lvl+0xf2/0x150 [ 89.611143][ T6829] dump_stack+0x15/0x20 [ 89.615381][ T6829] should_fail_ex+0x223/0x230 [ 89.620107][ T6829] should_fail+0xb/0x10 [ 89.624270][ T6829] should_fail_usercopy+0x1a/0x20 [ 89.629337][ T6829] _copy_from_user+0x1e/0xd0 [ 89.633929][ T6829] scsi_ioctl+0x34e/0x1540 [ 89.638365][ T6829] sg_ioctl+0xd00/0x1870 [ 89.642653][ T6829] ? __pfx_sg_ioctl+0x10/0x10 [ 89.647345][ T6829] __se_sys_ioctl+0xcd/0x140 [ 89.652048][ T6829] __x64_sys_ioctl+0x43/0x50 [ 89.656745][ T6829] x64_sys_call+0x15cc/0x2d60 [ 89.661434][ T6829] do_syscall_64+0xc9/0x1c0 [ 89.665938][ T6829] ? clear_bhb_loop+0x55/0xb0 [ 89.670716][ T6829] ? clear_bhb_loop+0x55/0xb0 [ 89.675502][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.681439][ T6829] RIP: 0033:0x7f2d8630dff9 [ 89.685863][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.705877][ T6829] RSP: 002b:00007f2d84f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.714471][ T6829] RAX: ffffffffffffffda RBX: 00007f2d864c5f80 RCX: 00007f2d8630dff9 [ 89.722876][ T6829] RDX: 0000000020000000 RSI: 0000000000005393 RDI: 0000000000000004 [ 89.730942][ T6829] RBP: 00007f2d84f87090 R08: 0000000000000000 R09: 0000000000000000 [ 89.739132][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.747302][ T6829] R13: 0000000000000000 R14: 00007f2d864c5f80 R15: 00007fffedfc2598 [ 89.755368][ T6829] [ 89.796284][ T6834] mmap: syz.0.1113 (6834) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.830207][ T6834] loop0: detected capacity change from 0 to 2048 [ 89.891852][ T6840] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 89.929777][ T6842] vhci_hcd: invalid port number 61 [ 89.935042][ T6842] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 89.947268][ T6844] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 89.979287][ T6846] bond1: entered promiscuous mode [ 89.983739][ T6851] syz.0.1118[6851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.984360][ T6846] bond1: entered allmulticast mode [ 89.984395][ T6851] syz.0.1118[6851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.003740][ T6852] syz.4.1117[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.015522][ T6846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.034346][ T6852] syz.4.1117[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.034414][ T6852] syz.4.1117[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.046201][ T6851] syz.0.1118[6851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.069792][ T6846] bond1 (unregistering): Released all slaves [ 90.100498][ T6850] netlink: 'syz.3.1119': attribute type 21 has an invalid length. [ 90.152288][ T6857] loop4: detected capacity change from 0 to 1024 [ 90.168446][ T6862] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1122'. [ 90.180435][ T6857] EXT4-fs: Ignoring removed oldalloc option [ 90.187384][ T6862] 0ªX¹¦À: renamed from caif0 [ 90.201524][ T6862] FAULT_INJECTION: forcing a failure. [ 90.201524][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 90.214383][ T6862] CPU: 0 UID: 0 PID: 6862 Comm: syz.0.1122 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 90.225064][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.235184][ T6862] Call Trace: [ 90.238459][ T6862] [ 90.241391][ T6862] dump_stack_lvl+0xf2/0x150 [ 90.245991][ T6862] dump_stack+0x15/0x20 [ 90.250146][ T6862] should_fail_ex+0x223/0x230 [ 90.254903][ T6862] ? device_rename+0x85/0x1a0 [ 90.259604][ T6862] should_failslab+0x8f/0xb0 [ 90.264230][ T6862] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 90.270679][ T6862] kstrdup+0x3a/0x80 [ 90.274641][ T6862] device_rename+0x85/0x1a0 [ 90.279158][ T6862] dev_change_name+0x1ed/0x610 [ 90.283977][ T6862] ? vprintk+0x75/0x80 [ 90.288116][ T6862] ? nla_strscpy+0xed/0x120 [ 90.292624][ T6862] do_setlink+0x670/0x2490 [ 90.297109][ T6862] ? __nla_validate_parse+0x1736/0x1e30 [ 90.302722][ T6862] ? do_trace_netlink_extack+0x17/0xf0 [ 90.308255][ T6862] ? __nla_validate_parse+0x1838/0x1e30 [ 90.313899][ T6862] ? __nla_parse+0x40/0x60 [ 90.318445][ T6862] ? validate_linkmsg+0x526/0x5a0 [ 90.323543][ T6862] rtnl_setlink+0x255/0x300 [ 90.328115][ T6862] ? __mutex_lock+0x55/0x8e0 [ 90.332808][ T6862] ? security_capable+0x81/0x90 [ 90.337697][ T6862] ? __pfx_rtnl_setlink+0x10/0x10 [ 90.342739][ T6862] rtnetlink_rcv_msg+0x6aa/0x710 [ 90.347674][ T6862] ? ref_tracker_free+0x3a5/0x410 [ 90.352722][ T6862] ? __dev_queue_xmit+0x161/0x2040 [ 90.357849][ T6862] ? ref_tracker_alloc+0x1f5/0x2f0 [ 90.363215][ T6862] netlink_rcv_skb+0x12c/0x230 [ 90.368058][ T6862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.373613][ T6862] rtnetlink_rcv+0x1c/0x30 [ 90.378036][ T6862] netlink_unicast+0x599/0x670 [ 90.382941][ T6862] netlink_sendmsg+0x5cc/0x6e0 [ 90.387735][ T6862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.393016][ T6862] __sock_sendmsg+0x140/0x180 [ 90.397693][ T6862] sock_write_iter+0x15e/0x1a0 [ 90.402509][ T6862] do_iter_readv_writev+0x394/0x450 [ 90.407850][ T6862] vfs_writev+0x2d4/0x880 [ 90.412201][ T6862] do_writev+0xf8/0x220 [ 90.416389][ T6862] __x64_sys_writev+0x45/0x50 [ 90.421258][ T6862] x64_sys_call+0x1f18/0x2d60 [ 90.426063][ T6862] do_syscall_64+0xc9/0x1c0 [ 90.430649][ T6862] ? clear_bhb_loop+0x55/0xb0 [ 90.435348][ T6862] ? clear_bhb_loop+0x55/0xb0 [ 90.440072][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.445980][ T6862] RIP: 0033:0x7f2d8630dff9 [ 90.450547][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.470156][ T6862] RSP: 002b:00007f2d84f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 90.478635][ T6862] RAX: ffffffffffffffda RBX: 00007f2d864c5f80 RCX: 00007f2d8630dff9 [ 90.486635][ T6862] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 90.494645][ T6862] RBP: 00007f2d84f87090 R08: 0000000000000000 R09: 0000000000000000 [ 90.502637][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.510686][ T6862] R13: 0000000000000000 R14: 00007f2d864c5f80 R15: 00007fffedfc2598 [ 90.518669][ T6862] [ 90.730645][ T6857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.740566][ T6857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.763662][ T6878] loop1: detected capacity change from 0 to 512 [ 90.781659][ T6878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.809158][ T6878] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.081834][ T6891] syz.2.1131[6891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.081885][ T6891] syz.2.1131[6891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.094106][ T6891] syz.2.1131[6891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.167205][ T6900] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 91.230674][ T6906] vhci_hcd: invalid port number 61 [ 91.235931][ T6906] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 91.261046][ T6908] vhci_hcd: invalid port number 61 [ 91.266225][ T6908] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 91.343136][ T6916] FAULT_INJECTION: forcing a failure. [ 91.343136][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 91.355822][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.4.1143 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 91.366513][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.376576][ T6916] Call Trace: [ 91.379861][ T6916] [ 91.382841][ T6916] dump_stack_lvl+0xf2/0x150 [ 91.387437][ T6916] dump_stack+0x15/0x20 [ 91.391596][ T6916] should_fail_ex+0x223/0x230 [ 91.396293][ T6916] ? audit_log_start+0x34c/0x6b0 [ 91.401246][ T6916] should_failslab+0x8f/0xb0 [ 91.405883][ T6916] kmem_cache_alloc_noprof+0x4c/0x290 [ 91.411330][ T6916] audit_log_start+0x34c/0x6b0 [ 91.416099][ T6916] audit_seccomp+0x4b/0x130 [ 91.420784][ T6916] __seccomp_filter+0x6fa/0x1180 [ 91.425736][ T6916] ? proc_fail_nth_write+0x12a/0x150 [ 91.431174][ T6916] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.436857][ T6916] ? vfs_write+0x580/0x910 [ 91.441391][ T6916] ? kmem_cache_free+0xdc/0x2d0 [ 91.446371][ T6916] __secure_computing+0x9f/0x1c0 [ 91.451321][ T6916] syscall_trace_enter+0xd1/0x1f0 [ 91.456353][ T6916] ? fpregs_assert_state_consistent+0x83/0xa0 [ 91.462571][ T6916] do_syscall_64+0xaa/0x1c0 [ 91.467085][ T6916] ? clear_bhb_loop+0x55/0xb0 [ 91.471917][ T6916] ? clear_bhb_loop+0x55/0xb0 [ 91.476673][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.482650][ T6916] RIP: 0033:0x7fa94813dff9 [ 91.487059][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.506735][ T6916] RSP: 002b:00007fa946db1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 91.515172][ T6916] RAX: ffffffffffffffda RBX: 00007fa9482f5f80 RCX: 00007fa94813dff9 [ 91.523143][ T6916] RDX: 00000000200031c0 RSI: 0000000000000026 RDI: 000000000000000b [ 91.531139][ T6916] RBP: 00007fa946db1090 R08: 0000000000000000 R09: 0000000000000000 [ 91.539194][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.547162][ T6916] R13: 0000000000000000 R14: 00007fa9482f5f80 R15: 00007ffe2aa3d528 [ 91.555142][ T6916] [ 91.578244][ T6922] geneve2: entered promiscuous mode [ 91.583481][ T6922] geneve2: entered allmulticast mode [ 91.589420][ T6921] loop2: detected capacity change from 0 to 1024 [ 91.622884][ T6921] 9pnet: Could not find request transport: tcp n n n n n n y y n n [ 91.622884][ T6921] TIPC 1024 0 -1 NI 0 yes kernel n n n n n n n n n n n n n n n n n n [ 91.622884][ T6921] RDS 1096 0 -1 NI 0 yes kernel n n n n n n n n n n n n n n n n n n [ 91.622884][ T6921] SCTPv6 1560 1 0 no 0 yes kernel y n y y y y y y y y y y y y y y n y [ 91.622884][ T6921] SCTP 1400 0 0 no 0 yes kernel y [ 91.785353][ T6932] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 91.809454][ T6934] vhci_hcd: invalid port number 61 [ 91.814687][ T6934] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 91.877288][ T6943] vhci_hcd: invalid port number 61 [ 91.882632][ T6943] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 91.930350][ T6949] loop1: detected capacity change from 0 to 1024 [ 91.939108][ T6949] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.953047][ T6949] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.961443][ T6949] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.969194][ T6949] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.1157: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.975113][ T6954] loop3: detected capacity change from 0 to 512 [ 91.983190][ T6949] EXT4-fs (loop1): 1 orphan inode deleted [ 91.996080][ T6954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.006148][ T6949] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz.1.1157: path /195/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 92.027380][ T6949] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 17: comm syz.1.1157: path /195/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.037286][ T6954] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.048867][ T6949] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 18: comm syz.1.1157: path /195/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.079783][ T6949] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 19: comm syz.1.1157: path /195/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.100862][ T6964] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.1157: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 92.119917][ T6949] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 20: comm syz.1.1157: path /195/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.141410][ T6966] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.1157: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 92.161021][ T6949] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 21: comm syz.1.1157: path /195/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.199126][ T6964] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.1157: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 92.217836][ T6949] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 22: comm syz.1.1157: path /195/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.239273][ T6969] vhci_hcd: invalid port number 61 [ 92.244411][ T6969] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 92.287135][ T6973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.303706][ T6979] vhci_hcd: invalid port number 61 [ 92.316995][ T6979] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 92.365502][ T6988] syz.1.1170[6988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.365571][ T6988] syz.1.1170[6988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.377143][ T6988] syz.1.1170[6988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.397613][ T6988] futex_wake_op: syz.1.1170 tries to shift op by -1; fix this program [ 92.625704][ T6993] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1172'. [ 92.635388][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.643970][ T996] hid (null): report_id 0 is invalid [ 92.650190][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: unknown main item tag 0x4 [ 92.657995][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: unknown main item tag 0x0 [ 92.665814][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: unknown main item tag 0x0 [ 92.673582][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: unknown main item tag 0x0 [ 92.681353][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: unknown main item tag 0x0 [ 92.689354][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: unknown main item tag 0x0 [ 92.697119][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: report_id 0 is invalid [ 92.704574][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: item 0 0 1 8 parsing failed [ 92.713228][ T996] hid-generic FFFC:FFFFFFFF:0006.0002: probe with driver hid-generic failed with error -22 [ 92.713639][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.869919][ T6995] validate_nla: 1 callbacks suppressed [ 92.869932][ T6995] netlink: 'syz.0.1173': attribute type 4 has an invalid length. [ 92.938474][ T7000] vhci_hcd: invalid port number 61 [ 92.943747][ T7000] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 92.970354][ T7004] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1176'. [ 92.979616][ T7004] 0ªX¹¦À: renamed from caif0 [ 92.985996][ T7004] 0ªX¹¦À: entered allmulticast mode [ 92.991440][ T7004] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 93.031818][ T7007] loop0: detected capacity change from 0 to 1024 [ 93.039385][ T7007] EXT4-fs: Ignoring removed oldalloc option [ 93.077898][ T7011] vhci_hcd: invalid port number 61 [ 93.083107][ T7011] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 93.133325][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 93.133339][ T29] audit: type=1326 audit(1728775766.955:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.164242][ T29] audit: type=1326 audit(1728775766.955:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.187948][ T29] audit: type=1326 audit(1728775766.955:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.212050][ T29] audit: type=1326 audit(1728775766.955:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.236450][ T29] audit: type=1326 audit(1728775766.955:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.238998][ T7021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.259962][ T29] audit: type=1326 audit(1728775766.955:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.291758][ T29] audit: type=1326 audit(1728775766.955:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.315332][ T29] audit: type=1326 audit(1728775766.955:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.339220][ T29] audit: type=1326 audit(1728775766.955:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.362844][ T29] audit: type=1326 audit(1728775766.955:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2d8630dff9 code=0x7ffc0000 [ 93.558533][ T7041] loop4: detected capacity change from 0 to 1024 [ 93.565543][ T7041] EXT4-fs: Ignoring removed oldalloc option [ 93.624052][ T7045] vhci_hcd: invalid port number 61 [ 93.629316][ T7045] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 93.887883][ T7059] vhci_hcd: invalid port number 61 [ 93.893292][ T7059] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 93.916467][ T7061] loop4: detected capacity change from 0 to 512 [ 93.924089][ T7061] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 93.932122][ T7061] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 93.940580][ T7061] EXT4-fs (loop4): 1 truncate cleaned up [ 93.952178][ T7061] EXT4-fs: Ignoring removed orlov option [ 93.958255][ T7061] EXT4-fs (loop4): can't enable nombcache during remount [ 94.000456][ T7070] syz.3.1200[7070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.000569][ T7070] syz.3.1200[7070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.012923][ T7070] syz.3.1200[7070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.019976][ T7068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.059003][ T7074] vhci_hcd: invalid port number 61 [ 94.072290][ T7074] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 94.082452][ T7076] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 94.141603][ T7080] loop4: detected capacity change from 0 to 2048 [ 94.158973][ T7080] EXT4-fs (loop4): #clusters per group too big: 16384 [ 94.169237][ T7084] bond1: entered promiscuous mode [ 94.174308][ T7084] bond1: entered allmulticast mode [ 94.179671][ T7084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.196011][ T7084] bond1 (unregistering): Released all slaves [ 94.234861][ T7093] netlink: 'syz.4.1208': attribute type 2 has an invalid length. [ 94.242770][ T7093] netlink: 209848 bytes leftover after parsing attributes in process `syz.4.1208'. [ 94.287950][ T7098] loop2: detected capacity change from 0 to 512 [ 94.310893][ T7098] EXT4-fs (loop2): inodes count not valid: 23 vs 32 [ 94.341326][ T7098] loop2: detected capacity change from 0 to 512 [ 94.356969][ T7098] EXT4-fs: Ignoring removed orlov option [ 94.376107][ T7098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.401759][ T7098] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.421878][ T7106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.423258][ T7098] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1209: bg 0: block 248: padding at end of block bitmap is not set [ 94.472272][ T7098] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1209: Failed to acquire dquot type 1 [ 94.487853][ T7109] vhci_hcd: invalid port number 61 [ 94.493005][ T7109] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 94.502275][ T7098] EXT4-fs (loop2): 1 truncate cleaned up [ 94.535291][ T7098] EXT4-fs: Ignoring removed orlov option [ 94.572812][ T7098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.596921][ T7098] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.1209: Abort forced by user [ 94.621209][ T7117] loop1: detected capacity change from 0 to 2048 [ 94.629762][ T7098] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 94.658430][ T7117] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 94.666743][ T7117] System zones: 0-7 [ 94.676228][ T7098] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 94.695602][ T7130] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0 [ 94.706854][ T7098] ext4 filesystem being remounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.708909][ T7131] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 1 [ 94.734554][ T7098] syz.2.1209 (7098) used greatest stack depth: 9360 bytes left [ 94.743381][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 94.757238][ T7133] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 2 [ 94.779699][ T7136] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 3 [ 94.854662][ T7148] vhci_hcd: invalid port number 61 [ 94.859880][ T7148] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 94.917656][ T7156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.941770][ T7160] FAULT_INJECTION: forcing a failure. [ 94.941770][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 94.962768][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.4.1233 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 94.973615][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.983808][ T7160] Call Trace: [ 94.987237][ T7160] [ 94.990233][ T7160] dump_stack_lvl+0xf2/0x150 [ 94.994836][ T7160] dump_stack+0x15/0x20 [ 94.999012][ T7160] should_fail_ex+0x223/0x230 [ 95.003702][ T7160] ? getname_flags+0x81/0x3b0 [ 95.008518][ T7160] should_failslab+0x8f/0xb0 [ 95.013178][ T7160] kmem_cache_alloc_noprof+0x4c/0x290 [ 95.018630][ T7160] getname_flags+0x81/0x3b0 [ 95.023146][ T7160] __x64_sys_unlinkat+0x75/0xb0 [ 95.028038][ T7160] x64_sys_call+0x25fd/0x2d60 [ 95.032811][ T7160] do_syscall_64+0xc9/0x1c0 [ 95.037408][ T7160] ? clear_bhb_loop+0x55/0xb0 [ 95.042120][ T7160] ? clear_bhb_loop+0x55/0xb0 [ 95.046815][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.057010][ T7160] RIP: 0033:0x7fa94813dff9 [ 95.061425][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.081489][ T7160] RSP: 002b:00007fa946db1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 95.089991][ T7160] RAX: ffffffffffffffda RBX: 00007fa9482f5f80 RCX: 00007fa94813dff9 [ 95.098035][ T7160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 95.106106][ T7160] RBP: 00007fa946db1090 R08: 0000000000000000 R09: 0000000000000000 [ 95.114149][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.122130][ T7160] R13: 0000000000000000 R14: 00007fa9482f5f80 R15: 00007ffe2aa3d528 [ 95.130743][ T7160] [ 95.179526][ T7166] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 95.240534][ T7173] 9pnet_fd: Insufficient options for proto=fd [ 95.249217][ T7172] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1238'. [ 95.263061][ T7172] 0ªX¹¦À: renamed from caif0 [ 95.275790][ T7172] 0ªX¹¦À: entered allmulticast mode [ 95.281179][ T7172] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 95.451298][ T7181] vhci_hcd: invalid port number 61 [ 95.456464][ T7181] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 95.620072][ T7177] loop4: detected capacity change from 0 to 1024 [ 95.630588][ T7177] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.636654][ T7172] loop1: detected capacity change from 0 to 512 [ 95.641687][ T7177] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 95.656275][ T7177] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.664157][ T7177] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.1239: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.678240][ T7177] EXT4-fs (loop4): 1 orphan inode deleted [ 95.696341][ T7177] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz.4.1239: path /273/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 95.729972][ T7199] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 95.744977][ T7197] vhci_hcd: invalid port number 61 [ 95.750304][ T7197] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 95.770633][ T7201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.779923][ T7177] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 17: comm syz.4.1239: path /273/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 95.808644][ T7177] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 18: comm syz.4.1239: path /273/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 95.845504][ T7203] loop0: detected capacity change from 0 to 512 [ 95.860624][ T7203] EXT4-fs: Ignoring removed bh option [ 95.871808][ T7212] vhci_hcd: invalid port number 61 [ 95.876982][ T7212] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 95.882270][ T7204] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.1239: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 95.893173][ T7203] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 95.942400][ T7232] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.1239: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 95.966058][ T7209] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.1239: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 95.970486][ T7234] pim6reg1: entered promiscuous mode [ 95.987842][ T7177] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 19: comm syz.4.1239: path /273/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 95.989947][ T7234] pim6reg1: entered allmulticast mode [ 96.011277][ T7218] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.1239: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 96.034238][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 96.043211][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 96.052931][ T7177] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 20: comm syz.4.1239: path /273/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.076321][ T7177] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 21: comm syz.4.1239: path /273/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.076870][ T7236] geneve2: entered promiscuous mode [ 96.101878][ T7236] geneve2: entered allmulticast mode [ 96.137095][ T7242] FAULT_INJECTION: forcing a failure. [ 96.137095][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.150242][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.0.1262 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 96.160995][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.171410][ T7242] Call Trace: [ 96.174694][ T7242] [ 96.177654][ T7242] dump_stack_lvl+0xf2/0x150 [ 96.182254][ T7242] dump_stack+0x15/0x20 [ 96.186404][ T7242] should_fail_ex+0x223/0x230 [ 96.189142][ T7246] vhci_hcd: invalid port number 61 [ 96.191083][ T7242] should_fail+0xb/0x10 [ 96.191116][ T7242] should_fail_usercopy+0x1a/0x20 [ 96.196255][ T7246] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.200405][ T7242] _copy_from_user+0x1e/0xd0 [ 96.217088][ T7242] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 96.222347][ T7242] map_update_elem+0x195/0x470 [ 96.227206][ T7242] __sys_bpf+0x713/0x7a0 [ 96.231439][ T7242] __x64_sys_bpf+0x43/0x50 [ 96.235906][ T7242] x64_sys_call+0x2625/0x2d60 [ 96.240660][ T7242] do_syscall_64+0xc9/0x1c0 [ 96.245225][ T7242] ? clear_bhb_loop+0x55/0xb0 [ 96.250008][ T7242] ? clear_bhb_loop+0x55/0xb0 [ 96.254781][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.260676][ T7242] RIP: 0033:0x7f2d8630dff9 [ 96.265125][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.284786][ T7242] RSP: 002b:00007f2d84f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.293229][ T7242] RAX: ffffffffffffffda RBX: 00007f2d864c5f80 RCX: 00007f2d8630dff9 [ 96.301197][ T7242] RDX: 0000000000000020 RSI: 0000000020000600 RDI: 0000000000000002 [ 96.309166][ T7242] RBP: 00007f2d84f87090 R08: 0000000000000000 R09: 0000000000000000 [ 96.317199][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.325196][ T7242] R13: 0000000000000000 R14: 00007f2d864c5f80 R15: 00007fffedfc2598 [ 96.333162][ T7242] [ 96.377303][ T7256] vhci_hcd: invalid port number 61 [ 96.382465][ T7256] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.403541][ T7260] vhci_hcd: invalid port number 61 [ 96.408783][ T7260] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.409646][ T7262] loop0: detected capacity change from 0 to 1024 [ 96.422619][ T7262] EXT4-fs: Ignoring removed oldalloc option [ 96.458705][ T7262] EXT4-fs mount: 46 callbacks suppressed [ 96.458719][ T7262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.487319][ T3271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.550185][ T7283] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 96.559340][ T7284] vhci_hcd: invalid port number 61 [ 96.564503][ T7284] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.574006][ T7286] vhci_hcd: invalid port number 61 [ 96.579225][ T7286] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.631736][ T7294] vhci_hcd: invalid port number 61 [ 96.636927][ T7294] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.657886][ T7296] vhci_hcd: invalid port number 61 [ 96.663170][ T7296] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.720596][ T7309] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 96.780511][ T7315] vhci_hcd: invalid port number 61 [ 96.785659][ T7315] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.819128][ T7323] vhci_hcd: default hub control req: 4008 v0000 i0000 l0 [ 96.827533][ T7325] vhci_hcd: invalid port number 61 [ 96.832689][ T7325] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.840682][ T7327] vhci_hcd: invalid port number 61 [ 96.845821][ T7327] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.903297][ T7344] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 96.925042][ T7348] rdma_op ffff888119d01580 conn xmit_rdma 0000000000000000 [ 96.957695][ T7352] vhci_hcd: invalid port number 61 [ 96.962838][ T7352] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 96.991473][ T7358] loop0: detected capacity change from 0 to 256 [ 97.004616][ T7358] FAT-fs (loop0): Directory bread(block 64) failed [ 97.011733][ T7358] FAT-fs (loop0): Directory bread(block 65) failed [ 97.018867][ T7358] FAT-fs (loop0): Directory bread(block 66) failed [ 97.020096][ T7362] vhci_hcd: invalid port number 61 [ 97.025484][ T7358] FAT-fs (loop0): Directory bread(block 67) failed [ 97.030559][ T7362] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 97.038077][ T7358] FAT-fs (loop0): Directory bread(block 68) failed [ 97.050862][ T7358] FAT-fs (loop0): Directory bread(block 69) failed [ 97.057657][ T7358] FAT-fs (loop0): Directory bread(block 70) failed [ 97.064303][ T7358] FAT-fs (loop0): Directory bread(block 71) failed [ 97.071480][ T7358] FAT-fs (loop0): Directory bread(block 72) failed [ 97.078323][ T7358] FAT-fs (loop0): Directory bread(block 73) failed [ 97.078793][ T7365] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 97.200300][ T7372] bond1: entered promiscuous mode [ 97.205363][ T7372] bond1: entered allmulticast mode [ 97.222858][ T7378] binfmt_misc: register: failed to install interpreter file ./file0 [ 97.233657][ T7380] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 97.246136][ T7372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.313524][ T7372] bond1 (unregistering): Released all slaves [ 97.404543][ T7358] ================================================================== [ 97.412677][ T7358] BUG: KCSAN: data-race in xas_find_marked / xas_init_marks [ 97.419981][ T7358] [ 97.422299][ T7358] read-write to 0xffff8881068ba480 of 8 bytes by task 7376 on cpu 0: [ 97.430442][ T7358] xas_init_marks+0x17e/0x320 [ 97.435211][ T7358] xas_store+0x213/0xc90 [ 97.439469][ T7358] delete_from_page_cache_batch+0x31c/0x700 [ 97.445369][ T7358] truncate_inode_pages_range+0x1c5/0x6b0 [ 97.451138][ T7358] truncate_setsize+0x9b/0xc0 [ 97.455810][ T7358] fat_setattr+0x720/0x840 [ 97.460227][ T7358] notify_change+0x85c/0x8e0 [ 97.464846][ T7358] do_truncate+0x116/0x160 [ 97.469317][ T7358] path_openat+0x1c03/0x1fa0 [ 97.473998][ T7358] do_filp_open+0xf7/0x200 [ 97.478420][ T7358] do_sys_openat2+0xab/0x120 [ 97.483020][ T7358] __x64_sys_openat+0xf3/0x120 [ 97.487799][ T7358] x64_sys_call+0x1025/0x2d60 [ 97.492477][ T7358] do_syscall_64+0xc9/0x1c0 [ 97.496979][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.502882][ T7358] [ 97.505205][ T7358] read to 0xffff8881068ba480 of 8 bytes by task 7358 on cpu 1: [ 97.512753][ T7358] xas_find_marked+0x216/0x660 [ 97.517537][ T7358] find_get_entry+0x54/0x390 [ 97.522147][ T7358] filemap_get_folios_tag+0x136/0x210 [ 97.527525][ T7358] writeback_iter+0x4b0/0x830 [ 97.532207][ T7358] write_cache_pages+0xad/0x100 [ 97.537051][ T7358] mpage_writepages+0x72/0xf0 [ 97.541735][ T7358] fat_writepages+0x24/0x30 [ 97.546263][ T7358] do_writepages+0x1d8/0x480 [ 97.550870][ T7358] filemap_fdatawrite_wbc+0xdb/0x100 [ 97.556252][ T7358] file_write_and_wait_range+0xc4/0x250 [ 97.561806][ T7358] __generic_file_fsync+0x46/0x140 [ 97.566930][ T7358] fat_file_fsync+0x46/0x100 [ 97.571526][ T7358] vfs_fsync_range+0x116/0x130 [ 97.576304][ T7358] generic_file_write_iter+0x185/0x1c0 [ 97.581762][ T7358] vfs_write+0x76a/0x910 [ 97.586057][ T7358] ksys_write+0xeb/0x1b0 [ 97.590313][ T7358] __x64_sys_write+0x42/0x50 [ 97.594903][ T7358] x64_sys_call+0x27dd/0x2d60 [ 97.599582][ T7358] do_syscall_64+0xc9/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 97.604097][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.610008][ T7358] [ 97.612336][ T7358] value changed: 0xffffffffffffffff -> 0xfffffffffff00000 [ 97.619550][ T7358] [ 97.621863][ T7358] Reported by Kernel Concurrency Sanitizer on: [ 97.628004][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.0.1306 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 97.638765][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.649184][ T7358] ================================================================== [ 97.963712][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.050380][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.109797][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.169724][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.274866][ T11] ip6gretap0 (unregistering): left promiscuous mode [ 98.310163][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.320464][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.332549][ T11] bond0 (unregistering): Released all slaves [ 98.388148][ T11] tipc: Left network mode [ 98.394653][ T11] hsr_slave_0: left promiscuous mode [ 98.401571][ T11] veth1_macvtap: left promiscuous mode [ 98.407088][ T11] veth0_macvtap: left promiscuous mode [ 98.412652][ T11] veth1_vlan: left promiscuous mode [ 98.417918][ T11] veth0_vlan: left promiscuous mode [ 98.502737][ T11] team0 (unregistering): Port device team_slave_1 removed [ 98.514719][ T11] team0 (unregistering): Port device team_slave_0 removed [ 98.821778][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.888928][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.938846][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.979212][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.056828][ T11] bridge_slave_1: left allmulticast mode [ 99.062569][ T11] bridge_slave_1: left promiscuous mode [ 99.068218][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.075772][ T11] bridge_slave_0: left allmulticast mode [ 99.081515][ T11] bridge_slave_0: left promiscuous mode [ 99.087215][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.160283][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.170806][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.180787][ T11] bond0 (unregistering): Released all slaves [ 99.218989][ T11] hsr_slave_0: left promiscuous mode [ 99.224617][ T11] hsr_slave_1: left promiscuous mode [ 99.230210][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.237648][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.245038][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.252450][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.261151][ T11] veth1_macvtap: left promiscuous mode [ 99.266676][ T11] veth0_macvtap: left promiscuous mode [ 99.272148][ T11] veth1_vlan: left promiscuous mode [ 99.277376][ T11] veth0_vlan: left promiscuous mode [ 99.342825][ T11] team0 (unregistering): Port device team_slave_1 removed [ 99.352733][ T11] team0 (unregistering): Port device team_slave_0 removed [ 99.669982][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.738258][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.809350][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.848516][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.907535][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.958999][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.999107][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.058677][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.146844][ T11] bridge_slave_1: left allmulticast mode [ 100.152485][ T11] bridge_slave_1: left promiscuous mode [ 100.158196][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.166045][ T11] bridge_slave_0: left allmulticast mode [ 100.171838][ T11] bridge_slave_0: left promiscuous mode [ 100.177650][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.185619][ T11] bridge_slave_1: left allmulticast mode [ 100.191305][ T11] bridge_slave_1: left promiscuous mode [ 100.197000][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.204585][ T11] bridge_slave_0: left allmulticast mode [ 100.210773][ T11] bridge_slave_0: left promiscuous mode [ 100.216576][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.398121][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.408360][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.418197][ T11] bond0 (unregistering): Released all slaves [ 100.426802][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.436830][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.446671][ T11] bond0 (unregistering): Released all slaves [ 100.508797][ T11] IPVS: stopping master sync thread 7136 ... [ 100.514842][ T11] IPVS: stopping master sync thread 7133 ... [ 100.520935][ T11] IPVS: stopping master sync thread 7131 ... [ 100.526988][ T11] IPVS: stopping master sync thread 7130 ... [ 100.567935][ T11] hsr_slave_0: left promiscuous mode [ 100.574348][ T11] hsr_slave_0: left promiscuous mode [ 100.580035][ T11] hsr_slave_1: left promiscuous mode [ 100.585733][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.593126][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.600685][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.608115][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.617306][ T11] veth1_vlan: left promiscuous mode [ 100.622601][ T11] veth0_vlan: left promiscuous mode [ 100.628092][ T11] veth1_vlan: left promiscuous mode [ 100.633358][ T11] veth0_vlan: left promiscuous mode [ 100.708068][ T11] team0 (unregistering): Port device team_slave_1 removed [ 100.718234][ T11] team0 (unregistering): Port device team_slave_0 removed [ 100.767252][ T11] team0 (unregistering): Port device team_slave_1 removed [ 100.777384][ T11] team0 (unregistering): Port device team_slave_0 removed [ 101.289391][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.369062][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.438654][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.478832][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.571756][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.581667][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.592226][ T11] bond0 (unregistering): Released all slaves [ 101.658879][ T11] hsr_slave_0: left promiscuous mode [ 101.664515][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.672003][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.679546][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.687111][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.695809][ T11] veth1_macvtap: left promiscuous mode [ 101.701334][ T11] veth0_macvtap: left promiscuous mode [ 101.706911][ T11] veth1_vlan: left promiscuous mode [ 101.712228][ T11] veth0_vlan: left promiscuous mode [ 101.771018][ T11] team0 (unregistering): Port device team_slave_1 removed [ 101.780553][ T11] team0 (unregistering): Port device team_slave_0 removed