last executing test programs: 5m21.143576458s ago: executing program 1 (id=1338): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) close(0x3) 5m21.141028788s ago: executing program 1 (id=1339): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) set_robust_list(&(0x7f00000002c0), 0x18) 5m21.094416191s ago: executing program 1 (id=1340): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) recvmmsg$unix(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 5m20.131873598s ago: executing program 1 (id=1379): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x37]}}]}) 5m19.863410593s ago: executing program 1 (id=1385): r0 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x8, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5m19.399177281s ago: executing program 1 (id=1391): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 5m19.398471822s ago: executing program 32 (id=1391): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 5m16.506807883s ago: executing program 5 (id=1392): io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) 5m16.443780126s ago: executing program 5 (id=1426): r0 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x541e, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x4, 0x7ff, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x70, 0x7, 0x10, 0x7fffffff}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 5m16.294400495s ago: executing program 5 (id=1432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) timer_delete(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r3, 0x40047457, &(0x7f0000000000)=0x10000) 5m14.918549507s ago: executing program 5 (id=1458): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000002, 0x0, 0x0) 5m14.899133018s ago: executing program 33 (id=1458): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000002, 0x0, 0x0) 1m22.557938367s ago: executing program 6 (id=3252): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m22.51742076s ago: executing program 6 (id=3253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1m22.347051699s ago: executing program 6 (id=3254): open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 1m21.49923387s ago: executing program 6 (id=3261): ioperm(0x9, 0x499, 0x101) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0xff, 0xfa, 0x7, 0x0, 0xea, 0x9800, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0xc001, 0x10040, 0xfd84, 0x1, 0x10001, 0x1, 0xa33, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x19) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff88) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff88) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r1 = mq_open(&(0x7f0000000cc0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x9c\x00\xde\vh\x97=m\x82.\xac\v\xe57w\x12h\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00', 0x40, 0x1c5, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r2, 0x0, 0x9}, 0x18) syz_clone(0x160000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x160000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.149769731s ago: executing program 6 (id=3265): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1abfdfffffd000000003200020000006e000000a042e5cddfc1fb10126798ccfe3fc30b3f26d331c2531533cac90137dda28cf51743562a0821df34984d05f95e2de9e23d59370ea65bf640cc856106209dad7b1305e76c02c4ac9d1abf04a2f0e37841c158a4bdcf765183fd802423c6f7de2cae20733a0038ae9e8d87ced6862f4e028b9eb610d928aee7b2f431e8f24b1d25f89996944f4405171ad44b430000000000000000000000000000ec5c5d0d8bbf3be7"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x64, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "b462eed4"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x81) r4 = socket(0x2a, 0x80000, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0), 0x3007080, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="50f1"]) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="a5b50000000000000100410008060040000000bb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e2ffffffffffffff0000000000000000000000000024ae2a3b8a5c41c5e13bdbd366237f6bd2ebbbc051bdad709995ce40c4de2df3201bbd9768d444108654910959a2b596092eb0a8683564972b75"], 0x50) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r8, 0x0) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x2000, &(0x7f00000000c0)=ANY=[], 0x1, 0x220, &(0x7f00000004c0)="$eJzs28FqE2EQAODZmtaNBe3Bkygu9OKpVJ/AIBXEQKESRE8GqpdWhPQSBbFXX8Wz4Cv4Ml56kNwim13bJiTQmm4S4vfB8g+dDjv7kzB7+PPm7vuD/Q9H71Y/n0SaZLES8Th6ERt5VErKNR3EazEkiWn8nqoaAPgne3vtRsSPebdBhTqdRvv25vqYTOvbHNoBAAAAAAAAAADgClzm/P9KxJfR8//HM+4XAJhecf6fZVQv106n0b5XvL+NcP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmJ9ev3+rn19puZbX9YhII6IeETciohYR+d/n3S8AML1ef3juT5r/EZFEhPkPAEvgxavXzxvN5s5elqURv467rW6rWIv802fNne1sYOOs6qTbbV2LiPxq7jws8tlwfnXw3pDXPzqXr53m1+LBZpHPc092myP167E/q00AgP/MVnbq3Hz/O9sjtrbG5fP5nK9fd/P5vz12/tfiTm3sLVcqexgA4EKOPn46aB8evu1ceZBcrqpeNjT5f77Xqmp12qBe+WYuRPAzWYQ2IhZjN6oLXt4sPk6V3SK92D4Dy+3sSz+aSSeVbFTeFAAAAAAAAAAAAAAAMGQWv2qKiPvzfk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJbLnwAAAP//CuZK0Q==") r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r11, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) fspick(r9, &(0x7f0000000000)='.\x00', 0x0) socket(0x10, 0x3, 0x0) 1m20.31189622s ago: executing program 6 (id=3271): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) sendto$inet(r0, &(0x7f0000000240)="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", 0x1000, 0x20000044, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14"], 0x18, 0x4040005}}], 0x1, 0x4000) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) shutdown(r0, 0x1) 1m20.311713861s ago: executing program 34 (id=3271): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) sendto$inet(r0, &(0x7f0000000240)="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", 0x1000, 0x20000044, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14"], 0x18, 0x4040005}}], 0x1, 0x4000) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) shutdown(r0, 0x1) 9.348491474s ago: executing program 0 (id=3910): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.287225928s ago: executing program 0 (id=3915): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1000}) socketpair(0x1, 0x6, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @local, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "38d7ca6593339d4a"}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone3(&(0x7f0000007480)={0x60040080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00'}, 0x10) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 7.778793198s ago: executing program 0 (id=3921): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 6.89294234s ago: executing program 0 (id=3932): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x83f, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6.656174425s ago: executing program 0 (id=3935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a00002"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) mq_open(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) sendto$inet6(r0, &(0x7f0000000780)="27eb4a0abf7977d2073ed22ac792a8e4730b45d3ef648569a34d391cad3f086782255e7f2c9753059d13bf80bb91e004274ea465e010c527b22c1caee0e7ffdb9b880a9c2b7a73a5bf83aa1f5cf7874ae6149e82bf5cd17ea2ffed539cee47f559401d83d3973409a829aefde3b1ef41b687e25137da6fb69701bf2a88b09d087945bdcd960b7f02e77026b29af8b1c3239314b68ab3ef9b215bd3b2d103964f534ec0810823aabe8a1a4f760bfa971663c7f6939d53265b61473b8232f2801b3dcbd07954d17faf173f416b4b8f08b10aa07510541d7d083cdcf6118d744249d434449fb02344506c69", 0xea, 0x1, &(0x7f0000000340)={0xa, 0x4e20, 0x40, @mcast2, 0xfffffff9}, 0x1c) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x8, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.399987799s ago: executing program 0 (id=3938): syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001540)) 5.657024014s ago: executing program 2 (id=3943): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@minixdf}, {@orlov}, {@abort}, {@delalloc}, {@data_journal}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5.425225168s ago: executing program 2 (id=3944): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="6d74c294628914e404d3d49bf132c19bcaaa82454d27b61714aeec7e25ea4bb6196de5239b2b34e4b7a38a6b7290688628121b718eb39103a92f857be8801ce4846b9dc7f4b082d4361d641448a0226230fddcbf8d9bb7286cc6c095918669d514cacbb521559f086e5d24857eb8f76219b09a15a693b177b18140790aa9fc651856098eb23c7f93cca9ad1324691ac6718ac40fd22a91af684c27c1fb1c12afdea23c96842365335e88ba1c6d4f34e15518217fc765a5a9", 0xb8}, {&(0x7f0000000b40)="83f2f54c80331065ddfc2d6189afccdf8c6ed683ecbc21bc606cc58d79c272663ad9b8058eff826a569cfab69092c5ba9116d529c212d74262a5b3d6e846e247676e4d5e4d55b5bd43804a2d3003ecb04555369a1f118b1d51e76cd5c22239b00f9743c8865949d8fee4505b956a3ac5272efd1a18db452f759cf1912b338fa7e04f8ed144d63dc4e1feee96e863be835d059049f91928e6888d5396", 0x9c}], 0x2}, 0x20000044) 5.371093951s ago: executing program 2 (id=3945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 5.328743074s ago: executing program 2 (id=3946): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 5.180362172s ago: executing program 7 (id=3948): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1000}) socketpair(0x1, 0x6, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @local, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "38d7ca6593339d4a"}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone3(&(0x7f0000007480)={0x60040080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = fsmount(r1, 0x0, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r8}, 0x10) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 5.179267972s ago: executing program 3 (id=3949): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2040008, &(0x7f0000000640), 0xfc, 0x7c7, &(0x7f0000001100)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 4.049826569s ago: executing program 3 (id=3951): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) flock(r5, 0x6) 2.939777255s ago: executing program 3 (id=3952): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x600}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.303676483s ago: executing program 3 (id=3953): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000008000000005000000001000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 1.984485542s ago: executing program 2 (id=3954): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_clone(0x200, &(0x7f0000000180)="ef956b2bf5835851d4bc3e1f423015d8668fd9e9bc0ad0", 0x17, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)="700edf04d3176aadd5f73de299cf83bd1e483fd0e456eaaac35c2cb085bfe8f9ee43eb5fcb67ecd7") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 1.807471343s ago: executing program 4 (id=3957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.782417884s ago: executing program 7 (id=3958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a00002"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) mq_open(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) sendto$inet6(r0, &(0x7f0000000780)="27eb4a0abf7977d2073ed22ac792a8e4730b45d3ef648569a34d391cad3f086782255e7f2c9753059d13bf80bb91e004274ea465e010c527b22c1caee0e7ffdb9b880a9c2b7a73a5bf83aa1f5cf7874ae6149e82bf5cd17ea2ffed539cee47f559401d83d3973409a829aefde3b1ef41b687e25137da6fb69701bf2a88b09d087945bdcd960b7f02e77026b29af8b1c3239314b68ab3ef9b215bd3b2d103964f534ec0810823aabe8a1a4f760bfa971663c7f6939d53265b61473b8232f2801b3dcbd07954d17faf173f416b4b8f08b10aa07510541d7d083cdcf6118d744249d434449fb02344506c69", 0xea, 0x1, &(0x7f0000000340)={0xa, 0x4e20, 0x40, @mcast2, 0xfffffff9}, 0x1c) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x8, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.767479035s ago: executing program 4 (id=3959): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 1.719582348s ago: executing program 4 (id=3960): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x25a, &(0x7f0000000e00)="$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") sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.528824009s ago: executing program 7 (id=3961): setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80048, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 1.391970027s ago: executing program 2 (id=3962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000018001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.390427107s ago: executing program 4 (id=3963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 1.353368669s ago: executing program 7 (id=3964): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) listen(r0, 0x82) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x1000848, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x385, &(0x7f0000006400)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) 1.311630522s ago: executing program 4 (id=3965): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="6d74c294628914e404d3d49bf132c19bcaaa82454d27b61714aeec7e25ea4bb6196de5239b2b34e4b7a38a6b7290688628121b718eb39103a92f857be8801ce4846b9dc7f4b082d4361d641448a0226230fddcbf8d9bb7286cc6c095918669d514cacbb521559f086e5d24857eb8f76219b09a15a693b177b18140790aa9fc651856098eb23c7f93cca9ad1324691ac6718ac40fd22a91af684c27c1fb1c12afdea23c96842365335e88ba1c6d4f34e15518217fc765a5a9", 0xb8}, {&(0x7f0000000b40)="83f2f54c80331065ddfc2d6189afccdf8c6ed683ecbc21bc606cc58d79c272663ad9b8058eff826a569cfab69092c5ba9116d529c212d74262a5b3d6e846e247676e4d5e4d55b5bd43804a2d3003ecb04555369a1f118b1d51e76cd5c22239b00f9743c8865949d8fee4505b956a3ac5272efd1a18db452f759cf1912b338fa7e04f8ed144d63dc4e1feee96e863be835d059049f91928e6888d5396", 0x9c}], 0x2}, 0x20000044) 1.297606872s ago: executing program 3 (id=3966): socket$inet(0x2, 0x3, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.281339304s ago: executing program 4 (id=3967): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x20004000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r3, 0x4, 0x7c00) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000008c0)={[{@errors_remount}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x53}}, {@noload}, {@usrjquota}, {@usrjquota}]}, 0xfe, 0x453, &(0x7f0000000e00)="$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") ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) close(0xffffffffffffffff) 1.244208836s ago: executing program 3 (id=3968): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 338.28403ms ago: executing program 7 (id=3969): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1000}) socketpair(0x1, 0x6, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @local, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "38d7ca6593339d4a"}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone3(&(0x7f0000007480)={0x60040080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = fsmount(r1, 0x0, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r8}, 0x10) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 0s ago: executing program 7 (id=3970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): sim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.224896][T12707] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.475857][T12866] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 383.740102][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 383.740123][ T29] audit: type=1400 audit(2000000334.700:2019): avc: denied { create } for pid=12898 comm="syz.2.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 383.766126][ T29] audit: type=1400 audit(2000000334.700:2020): avc: denied { write } for pid=12898 comm="syz.2.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 383.845187][ T29] audit: type=1326 audit(2000000335.070:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 383.872461][ T29] audit: type=1326 audit(2000000335.070:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 383.896080][ T29] audit: type=1326 audit(2000000335.070:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 383.919691][ T29] audit: type=1326 audit(2000000335.070:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 383.943208][ T29] audit: type=1326 audit(2000000335.070:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 383.966853][ T29] audit: type=1326 audit(2000000335.070:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 383.991059][ T29] audit: type=1326 audit(2000000335.070:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 384.015598][ T29] audit: type=1326 audit(2000000335.070:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 384.979898][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 384.987366][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 384.994852][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.026995][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.034549][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.041989][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.049385][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.056824][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.064280][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.071701][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.079092][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.086561][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.094073][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.101500][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.109504][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.116903][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.124454][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.131927][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.139549][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.146957][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.154433][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.161857][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.169247][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.176700][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.184127][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.191545][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.199037][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.206560][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.213995][ T3374] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 385.326237][ T3374] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 387.132442][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.139992][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.147408][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.219054][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.226529][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.234090][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.241524][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.248927][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.256446][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.263936][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.271400][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.278805][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.286287][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.293768][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.708871][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.716376][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.723814][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.731217][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.738671][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.746172][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.753582][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.761066][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.768498][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.775914][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.783322][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.790829][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.798214][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.805668][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.813103][ T3374] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 387.883665][ T3374] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 388.058883][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.066501][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.074012][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.095788][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.103326][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.110893][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.118361][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.125842][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.133265][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.137197][T12985] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1946 [ 388.140775][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.158074][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.165633][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.173179][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.180616][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.188603][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.196090][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.203563][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.211056][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.218470][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.225893][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.233327][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.240754][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.248171][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.255616][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.263048][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.270484][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.277931][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.285435][ T3374] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.295701][ T3374] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 390.170899][T13018] netlink: 'syz.4.3201': attribute type 4 has an invalid length. [ 390.212864][T13018] netlink: 'syz.4.3201': attribute type 4 has an invalid length. [ 390.448758][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 390.448773][ T29] audit: type=1326 audit(2000000341.670:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.501176][ T29] audit: type=1326 audit(2000000341.710:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.525245][ T29] audit: type=1326 audit(2000000341.710:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.548892][ T29] audit: type=1326 audit(2000000341.710:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.572640][ T29] audit: type=1326 audit(2000000341.710:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.596186][ T29] audit: type=1326 audit(2000000341.710:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.620352][ T29] audit: type=1326 audit(2000000341.710:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.645006][ T29] audit: type=1326 audit(2000000341.710:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.668517][ T29] audit: type=1326 audit(2000000341.710:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.692049][ T29] audit: type=1326 audit(2000000341.720:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 390.789308][T13040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3210'. [ 390.810760][T13041] loop6: detected capacity change from 0 to 512 [ 390.819951][T13041] EXT4-fs (loop6): blocks per group (71) and clusters per group (20800) inconsistent [ 391.843771][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3222'. [ 391.945073][T13083] netlink: 'syz.2.3223': attribute type 196 has an invalid length. [ 392.824910][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 392.903420][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 393.300344][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3243'. [ 394.232003][T13167] hugetlbfs: syz.4.3258 (13167): Using mlock ulimits for SHM_HUGETLB is obsolete [ 394.467054][T13172] netlink: 'syz.4.3260': attribute type 4 has an invalid length. [ 394.540267][T13174] netlink: 35347 bytes leftover after parsing attributes in process `syz.6.3261'. [ 394.585490][T13174] loop6: detected capacity change from 0 to 512 [ 394.608744][T13174] EXT4-fs: Ignoring removed i_version option [ 394.614848][T13174] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.656368][T13174] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 394.691587][T13174] EXT4-fs (loop6): 1 truncate cleaned up [ 394.698168][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'. [ 394.698995][T13174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.707471][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'. [ 394.731424][T13174] ref_ctr_offset mismatch. inode: 0x12 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 394.869143][ T7474] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /348/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 394.915225][ T7474] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 394.958191][ T7474] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /348/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 395.006619][ T7474] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 395.079337][ T7474] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /348/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 395.129376][ T7474] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 395.173298][ T7474] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /348/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 395.220436][ T7474] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 395.262973][ T7474] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /348/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 395.294295][ T7474] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 395.476103][ T8464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.561557][T13195] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 395.561586][T13193] IPVS: stopping master sync thread 13195 ... [ 395.586120][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 395.586137][ T29] audit: type=1400 audit(2000000346.810:2175): avc: denied { tracepoint } for pid=13192 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 395.671664][ T1884] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.722665][ T1884] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.782163][ T1884] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.870628][ T29] audit: type=1400 audit(2000000347.100:2176): avc: denied { read write } for pid=13207 comm="syz.2.3275" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.894547][ T29] audit: type=1400 audit(2000000347.100:2177): avc: denied { open } for pid=13207 comm="syz.2.3275" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.918266][ T29] audit: type=1400 audit(2000000347.100:2178): avc: denied { ioctl } for pid=13207 comm="syz.2.3275" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 395.945932][ T1884] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.993367][ T29] audit: type=1326 audit(2000000347.210:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.4.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86313d169 code=0x7ffc0000 [ 396.017036][ T29] audit: type=1326 audit(2000000347.220:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.4.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fa86313d169 code=0x7ffc0000 [ 396.036636][T13206] chnl_net:caif_netlink_parms(): no params data found [ 396.040632][ T29] audit: type=1326 audit(2000000347.220:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.4.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86313d169 code=0x7ffc0000 [ 396.071187][ T29] audit: type=1326 audit(2000000347.220:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.4.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa86313d169 code=0x7ffc0000 [ 396.094793][ T29] audit: type=1326 audit(2000000347.220:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.4.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86313d169 code=0x7ffc0000 [ 396.118493][ T29] audit: type=1326 audit(2000000347.220:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.4.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa86313d169 code=0x7ffc0000 [ 396.146478][T13227] netem: change failed [ 396.209377][ T1884] bridge_slave_1: left allmulticast mode [ 396.215265][ T1884] bridge_slave_1: left promiscuous mode [ 396.221176][ T1884] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.230528][ T1884] bridge_slave_0: left allmulticast mode [ 396.236298][ T1884] bridge_slave_0: left promiscuous mode [ 396.242062][ T1884] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.352744][ T1884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.363916][ T1884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.373656][ T1884] bond0 (unregistering): Released all slaves [ 396.407525][T13206] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.414719][T13206] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.422435][T13206] bridge_slave_0: entered allmulticast mode [ 396.429235][T13206] bridge_slave_0: entered promiscuous mode [ 396.436914][T13206] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.444086][T13206] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.453304][T13206] bridge_slave_1: entered allmulticast mode [ 396.460104][T13206] bridge_slave_1: entered promiscuous mode [ 396.476733][ T1884] veth1_macvtap: left promiscuous mode [ 396.483576][ T1884] veth0_macvtap: left promiscuous mode [ 396.489176][ T1884] veth1_vlan: left promiscuous mode [ 396.494612][ T1884] veth0_vlan: left promiscuous mode [ 396.578980][ T1884] team0 (unregistering): Port device team_slave_1 removed [ 396.590951][ T1884] team0 (unregistering): Port device team_slave_0 removed [ 396.680929][T13206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.695181][T13206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.716364][T13206] team0: Port device team_slave_0 added [ 396.724000][T13206] team0: Port device team_slave_1 added [ 396.743053][T13206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.750108][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.776056][T13206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.788534][T13206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.795599][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.821640][T13206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.868925][T13206] hsr_slave_0: entered promiscuous mode [ 396.878412][T13206] hsr_slave_1: entered promiscuous mode [ 396.888879][T13206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.936509][T13206] Cannot create hsr debugfs directory [ 396.967577][ T1884] IPVS: stop unused estimator thread 0... [ 397.105911][T13206] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.129116][T13206] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 397.143920][T13206] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 397.153856][T13206] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 397.353843][T13206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.372888][T13206] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.386950][ T1884] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.394188][ T1884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.418222][T13206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.428695][T13206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.446127][ T1884] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.453240][ T1884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.524873][T13206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.797803][T13206] veth0_vlan: entered promiscuous mode [ 397.806576][T13206] veth1_vlan: entered promiscuous mode [ 397.834873][T13206] veth0_macvtap: entered promiscuous mode [ 397.851781][T13206] veth1_macvtap: entered promiscuous mode [ 397.870927][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.881484][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.891344][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.901792][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.911685][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.922203][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.980088][T13206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.001501][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.012011][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.021892][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.032397][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.042234][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.052696][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.130419][T13206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.151661][T13206] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.160499][T13206] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.169275][T13206] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.178377][T13206] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.516257][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 398.636910][T13378] FAULT_INJECTION: forcing a failure. [ 398.636910][T13378] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 398.650052][T13378] CPU: 0 UID: 0 PID: 13378 Comm: syz.3.3293 Not tainted 6.14.0-rc4-syzkaller #0 [ 398.650076][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 398.650091][T13378] Call Trace: [ 398.650144][T13378] [ 398.650151][T13378] dump_stack_lvl+0xf2/0x150 [ 398.650179][T13378] dump_stack+0x15/0x1a [ 398.650202][T13378] should_fail_ex+0x24a/0x260 [ 398.650241][T13378] should_fail+0xb/0x10 [ 398.650273][T13378] should_fail_usercopy+0x1a/0x20 [ 398.650364][T13378] _copy_to_user+0x20/0xa0 [ 398.650407][T13378] simple_read_from_buffer+0xa0/0x110 [ 398.650504][T13378] proc_fail_nth_read+0xf9/0x140 [ 398.650537][T13378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.650573][T13378] vfs_read+0x19b/0x6f0 [ 398.650659][T13378] ? __rcu_read_unlock+0x4e/0x70 [ 398.650682][T13378] ? __fget_files+0x17c/0x1c0 [ 398.650715][T13378] ksys_read+0xe8/0x1b0 [ 398.650754][T13378] __x64_sys_read+0x42/0x50 [ 398.650786][T13378] x64_sys_call+0x2874/0x2dc0 [ 398.650817][T13378] do_syscall_64+0xc9/0x1c0 [ 398.650914][T13378] ? clear_bhb_loop+0x55/0xb0 [ 398.650981][T13378] ? clear_bhb_loop+0x55/0xb0 [ 398.651014][T13378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.651093][T13378] RIP: 0033:0x7f118d11bb7c [ 398.651119][T13378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.651141][T13378] RSP: 002b:00007f118b787030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.651163][T13378] RAX: ffffffffffffffda RBX: 00007f118d335fa0 RCX: 00007f118d11bb7c [ 398.651177][T13378] RDX: 000000000000000f RSI: 00007f118b7870a0 RDI: 0000000000000006 [ 398.651188][T13378] RBP: 00007f118b787090 R08: 0000000000000000 R09: 0000000000000000 [ 398.651202][T13378] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000002 [ 398.651216][T13378] R13: 0000000000000000 R14: 00007f118d335fa0 R15: 00007ffd3ed6b468 [ 398.651307][T13378] [ 399.122882][T13410] loop7: detected capacity change from 0 to 4096 [ 399.149420][ C0] hrtimer: interrupt took 34536 ns [ 399.164442][T13410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.617890][T13206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.759838][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.767583][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.775089][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.802876][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.810394][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.817817][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.825247][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.832692][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.840127][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.847543][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.855052][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.862493][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.869911][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.877378][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.929523][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.937034][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.944512][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.951982][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.959433][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.966833][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.974350][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.981841][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.989258][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 399.996733][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 400.004208][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 400.011711][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 400.019225][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 400.026781][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 400.034276][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 400.180725][ T8] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 400.258781][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 400.288010][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 400.425648][T13569] FAULT_INJECTION: forcing a failure. [ 400.425648][T13569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.438824][T13569] CPU: 0 UID: 0 PID: 13569 Comm: syz.7.3326 Not tainted 6.14.0-rc4-syzkaller #0 [ 400.438852][T13569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 400.438864][T13569] Call Trace: [ 400.438871][T13569] [ 400.438879][T13569] dump_stack_lvl+0xf2/0x150 [ 400.438919][T13569] dump_stack+0x15/0x1a [ 400.438941][T13569] should_fail_ex+0x24a/0x260 [ 400.438971][T13569] should_fail+0xb/0x10 [ 400.439054][T13569] should_fail_usercopy+0x1a/0x20 [ 400.439093][T13569] _copy_from_iter+0xd5/0xd00 [ 400.439166][T13569] ? kmalloc_reserve+0x16e/0x190 [ 400.439190][T13569] ? __build_skb_around+0x196/0x1f0 [ 400.439209][T13569] ? __alloc_skb+0x21f/0x310 [ 400.439246][T13569] ? __virt_addr_valid+0x1ed/0x250 [ 400.439276][T13569] ? __check_object_size+0x364/0x520 [ 400.439307][T13569] netlink_sendmsg+0x460/0x6e0 [ 400.439349][T13569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.439400][T13569] __sock_sendmsg+0x140/0x180 [ 400.439452][T13569] ____sys_sendmsg+0x326/0x4b0 [ 400.439486][T13569] __sys_sendmsg+0x19d/0x230 [ 400.439543][T13569] __x64_sys_sendmsg+0x46/0x50 [ 400.439644][T13569] x64_sys_call+0x2734/0x2dc0 [ 400.439746][T13569] do_syscall_64+0xc9/0x1c0 [ 400.439780][T13569] ? clear_bhb_loop+0x55/0xb0 [ 400.439880][T13569] ? clear_bhb_loop+0x55/0xb0 [ 400.439911][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.439981][T13569] RIP: 0033:0x7f6a6f1dd169 [ 400.440000][T13569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.440086][T13569] RSP: 002b:00007f6a6d847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.440109][T13569] RAX: ffffffffffffffda RBX: 00007f6a6f3f5fa0 RCX: 00007f6a6f1dd169 [ 400.440123][T13569] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 400.440138][T13569] RBP: 00007f6a6d847090 R08: 0000000000000000 R09: 0000000000000000 [ 400.440152][T13569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.440166][T13569] R13: 0000000000000000 R14: 00007f6a6f3f5fa0 R15: 00007ffdb8187d68 [ 400.440187][T13569] [ 400.843660][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 400.862138][T13590] binfmt_misc: register: failed to install interpreter file ./file0 [ 401.830885][T13598] loop7: detected capacity change from 0 to 256 [ 403.211206][T13598] FAT-fs (loop7): IO charset macgaelic not found [ 403.279366][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 403.285621][ T29] audit: type=1400 audit(2000000354.500:2274): avc: denied { create } for pid=13606 comm="syz.2.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 403.552236][T13607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3337'. [ 403.577798][ T29] audit: type=1400 audit(2000000354.780:2275): avc: denied { write } for pid=13606 comm="syz.2.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 404.462715][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.576322][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.685347][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.774983][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.032837][ T36] bridge_slave_1: left allmulticast mode [ 405.038527][ T36] bridge_slave_1: left promiscuous mode [ 405.044200][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.628947][T13649] loop7: detected capacity change from 0 to 256 [ 405.724822][T13649] FAT-fs (loop7): IO charset macgaelic not found [ 405.746822][ T36] bridge_slave_0: left allmulticast mode [ 405.752562][ T36] bridge_slave_0: left promiscuous mode [ 405.758332][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.214592][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.254522][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.294552][ T36] bond0 (unregistering): Released all slaves [ 406.343851][T13659] batadv_slave_1: entered promiscuous mode [ 406.402833][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.410448][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.459140][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.466713][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.528678][ T36] veth1_macvtap: left promiscuous mode [ 406.547611][ T36] veth0_macvtap: left promiscuous mode [ 406.786869][ T36] team0 (unregistering): Port device team_slave_1 removed [ 406.820628][ T36] team0 (unregistering): Port device team_slave_0 removed [ 406.927845][T13665] loop7: detected capacity change from 0 to 764 [ 406.980685][T13665] iso9660: Unknown parameter '¿¤' [ 407.024122][T13656] batadv_slave_1: left promiscuous mode [ 407.142503][T13624] chnl_net:caif_netlink_parms(): no params data found [ 407.217946][T13683] FAULT_INJECTION: forcing a failure. [ 407.217946][T13683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.231182][T13683] CPU: 0 UID: 0 PID: 13683 Comm: syz.7.3354 Not tainted 6.14.0-rc4-syzkaller #0 [ 407.231247][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 407.231314][T13683] Call Trace: [ 407.231321][T13683] [ 407.231356][T13683] dump_stack_lvl+0xf2/0x150 [ 407.231387][T13683] dump_stack+0x15/0x1a [ 407.231426][T13683] should_fail_ex+0x24a/0x260 [ 407.231455][T13683] should_fail+0xb/0x10 [ 407.231538][T13683] should_fail_usercopy+0x1a/0x20 [ 407.231575][T13683] _copy_from_user+0x1c/0xa0 [ 407.231656][T13683] do_ipv6_setsockopt+0x1ef/0x2250 [ 407.231688][T13683] ? _parse_integer+0x27/0x30 [ 407.231720][T13683] ? kstrtouint+0x77/0xc0 [ 407.231747][T13683] ? avc_has_perm_noaudit+0x1cc/0x210 [ 407.231850][T13683] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 407.231885][T13683] ipv6_setsockopt+0x57/0x130 [ 407.231923][T13683] tcp_setsockopt+0x93/0xb0 [ 407.232077][T13683] sock_common_setsockopt+0x64/0x80 [ 407.232151][T13683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 407.232192][T13683] __sys_setsockopt+0x187/0x200 [ 407.232277][T13683] __x64_sys_setsockopt+0x66/0x80 [ 407.232299][T13683] x64_sys_call+0x282e/0x2dc0 [ 407.232332][T13683] do_syscall_64+0xc9/0x1c0 [ 407.232482][T13683] ? clear_bhb_loop+0x55/0xb0 [ 407.232562][T13683] ? clear_bhb_loop+0x55/0xb0 [ 407.232595][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.232626][T13683] RIP: 0033:0x7f6a6f1dd169 [ 407.232641][T13683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.232733][T13683] RSP: 002b:00007f6a6d826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 407.232755][T13683] RAX: ffffffffffffffda RBX: 00007f6a6f3f6080 RCX: 00007f6a6f1dd169 [ 407.232771][T13683] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c [ 407.232783][T13683] RBP: 00007f6a6d826090 R08: 00000000000003d0 R09: 0000000000000000 [ 407.232835][T13683] R10: 00004000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 407.232846][T13683] R13: 0000000000000000 R14: 00007f6a6f3f6080 R15: 00007ffdb8187d68 [ 407.232868][T13683] [ 407.586908][ T36] IPVS: stop unused estimator thread 0... [ 407.609086][T13624] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.616274][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.633488][ T29] audit: type=1326 audit(2000000358.860:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 407.657128][ T29] audit: type=1326 audit(2000000358.860:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 407.680723][ T29] audit: type=1326 audit(2000000358.860:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 407.704236][ T29] audit: type=1326 audit(2000000358.860:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 407.704629][T13624] bridge_slave_0: entered allmulticast mode [ 407.728276][ T29] audit: type=1326 audit(2000000358.870:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 407.757393][ T29] audit: type=1326 audit(2000000358.870:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 407.759000][T13624] bridge_slave_0: entered promiscuous mode [ 407.780994][ T29] audit: type=1326 audit(2000000358.870:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 407.810254][ T29] audit: type=1326 audit(2000000358.870:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 407.823455][T13624] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.840928][T13624] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.861320][T13624] bridge_slave_1: entered allmulticast mode [ 407.879839][T13624] bridge_slave_1: entered promiscuous mode [ 408.018022][T13708] capability: warning: `syz.7.3359' uses deprecated v2 capabilities in a way that may be insecure [ 408.043677][T13624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.053427][T13708] loop7: detected capacity change from 0 to 128 [ 408.075202][T13624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.092957][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3360'. [ 408.133100][T13624] team0: Port device team_slave_0 added [ 408.146627][T13624] team0: Port device team_slave_1 added [ 408.184451][T13624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.191485][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.217443][T13624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.238387][T13624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.245495][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.271740][T13624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.292155][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 408.292173][ T29] audit: type=1326 audit(2000000359.520:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1f1c54127 code=0x7ffc0000 [ 408.322011][ T29] audit: type=1326 audit(2000000359.520:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1f1bf9359 code=0x7ffc0000 [ 408.345783][ T29] audit: type=1326 audit(2000000359.520:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1f1c5bad0 code=0x7ffc0000 [ 408.369670][ T29] audit: type=1326 audit(2000000359.530:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1f1c54127 code=0x7ffc0000 [ 408.393142][ T29] audit: type=1326 audit(2000000359.530:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1f1bf9359 code=0x7ffc0000 [ 408.416587][ T29] audit: type=1326 audit(2000000359.530:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1f1c5bad0 code=0x7ffc0000 [ 408.440172][ T29] audit: type=1326 audit(2000000359.530:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1f1c54127 code=0x7ffc0000 [ 408.463725][ T29] audit: type=1326 audit(2000000359.530:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1f1bf9359 code=0x7ffc0000 [ 408.487615][ T29] audit: type=1326 audit(2000000359.530:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1f1c5bad0 code=0x7ffc0000 [ 408.511173][ T29] audit: type=1326 audit(2000000359.540:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13687 comm="syz.2.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1f1c54127 code=0x7ffc0000 [ 408.543343][T13624] hsr_slave_0: entered promiscuous mode [ 408.554294][T13624] hsr_slave_1: entered promiscuous mode [ 408.568251][T13624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.584864][T13624] Cannot create hsr debugfs directory [ 409.010250][T13624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.030118][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 409.049612][T13771] IPVS: Error joining to the multicast group [ 409.056800][T13624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.087362][T13771] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3368'. [ 409.104633][T13624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.126567][T13624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.204902][T13624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.240034][T13624] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.252834][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.260321][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.267791][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.269233][T13624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.285895][T13624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.304689][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3370'. [ 409.320086][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.327273][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.337118][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.344601][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.352031][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.359623][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.367028][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.374504][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.381941][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.389464][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.396878][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.404399][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.411904][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.420740][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.427811][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.448041][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.455612][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.463090][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.470630][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.478040][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.485490][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.493195][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.500643][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.508054][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.515575][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.523106][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.530593][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.537991][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.545427][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.552878][ T35] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 409.569535][ T35] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 409.643914][T13814] loop7: detected capacity change from 0 to 128 [ 409.672359][T13814] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.722031][T13823] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3376'. [ 409.734556][T13624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.745365][T13814] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 410.028642][T13852] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a)¡ËtG¯ëò,üŸ‘ÙðümÅÝu4W¨ [ 410.065427][T13624] veth0_vlan: entered promiscuous mode [ 410.110241][T13624] veth1_vlan: entered promiscuous mode [ 410.143082][T13624] veth0_macvtap: entered promiscuous mode [ 410.150951][T13624] veth1_macvtap: entered promiscuous mode [ 410.166176][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.173744][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.181214][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.197294][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.207853][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.217746][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.228231][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.238130][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.248617][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.263376][T13206] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.267308][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.280046][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.287460][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.295159][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.302616][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.310094][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.317565][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.318564][T13624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.325009][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.339652][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.347055][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.348983][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.354540][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.372412][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.382310][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.392763][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.402627][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.413117][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.435628][T13624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.444661][T13880] batadv_slave_1: entered promiscuous mode [ 410.457976][T13877] FAULT_INJECTION: forcing a failure. [ 410.457976][T13877] name failslab, interval 1, probability 0, space 0, times 1 [ 410.470697][T13877] CPU: 1 UID: 0 PID: 13877 Comm: syz.7.3383 Not tainted 6.14.0-rc4-syzkaller #0 [ 410.470726][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 410.470741][T13877] Call Trace: [ 410.470756][T13877] [ 410.470762][T13877] dump_stack_lvl+0xf2/0x150 [ 410.470790][T13877] dump_stack+0x15/0x1a [ 410.470813][T13877] should_fail_ex+0x24a/0x260 [ 410.470849][T13877] should_failslab+0x8f/0xb0 [ 410.470942][T13877] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 410.471000][T13877] ? sidtab_sid2str_get+0xb8/0x140 [ 410.471060][T13877] kmemdup_noprof+0x2b/0x70 [ 410.471180][T13877] sidtab_sid2str_get+0xb8/0x140 [ 410.471218][T13877] security_sid_to_context_core+0x1eb/0x2f0 [ 410.471367][T13877] security_sid_to_context+0x27/0x30 [ 410.471401][T13877] avc_audit_post_callback+0x9d/0x530 [ 410.471482][T13877] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 410.471585][T13877] common_lsm_audit+0x90e/0x10c0 [ 410.471610][T13877] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 410.471686][T13877] slow_avc_audit+0xf9/0x140 [ 410.471797][T13877] avc_has_perm+0x129/0x160 [ 410.471832][T13877] selinux_socket_sendmsg+0x185/0x1c0 [ 410.471923][T13877] security_socket_sendmsg+0x47/0x80 [ 410.471946][T13877] __sock_sendmsg+0x2d/0x180 [ 410.471977][T13877] __sys_sendto+0x1a8/0x230 [ 410.472026][T13877] __x64_sys_sendto+0x78/0x90 [ 410.472124][T13877] x64_sys_call+0x29fa/0x2dc0 [ 410.472150][T13877] do_syscall_64+0xc9/0x1c0 [ 410.472179][T13877] ? clear_bhb_loop+0x55/0xb0 [ 410.472204][T13877] ? clear_bhb_loop+0x55/0xb0 [ 410.472298][T13877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.472324][T13877] RIP: 0033:0x7f6a6f1dd169 [ 410.472339][T13877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.472429][T13877] RSP: 002b:00007f6a6d847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 410.472448][T13877] RAX: ffffffffffffffda RBX: 00007f6a6f3f5fa0 RCX: 00007f6a6f1dd169 [ 410.472460][T13877] RDX: 0000000000000001 RSI: 0000400000000040 RDI: 0000000000000003 [ 410.472471][T13877] RBP: 00007f6a6d847090 R08: 0000400000000100 R09: 000000000000001c [ 410.472483][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.472495][T13877] R13: 0000000000000000 R14: 00007f6a6f3f5fa0 R15: 00007ffdb8187d68 [ 410.472512][T13877] [ 410.472929][T13879] batadv_slave_1: left promiscuous mode [ 410.509492][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.514784][T13624] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.516656][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.522996][T13624] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.528179][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.532664][T13624] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.532700][T13624] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.537635][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.777675][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.785124][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.792582][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.800039][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.807567][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.815015][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.822539][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.830109][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.837595][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.845054][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.852540][ T3375] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 410.870613][ T3375] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 410.916286][T13912] 9pnet_fd: Insufficient options for proto=fd [ 411.035805][T13930] netlink: 'syz.3.3393': attribute type 4 has an invalid length. [ 411.325970][T13962] loop7: detected capacity change from 0 to 2048 [ 411.336073][T13962] 9pnet_fd: Insufficient options for proto=fd [ 411.712538][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.720014][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.727484][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.759907][T13975] 9pnet_fd: Insufficient options for proto=fd [ 411.789312][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.796781][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.804212][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.811742][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.819249][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.826718][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.834280][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.841899][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.849354][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.856906][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.864388][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.941137][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.948631][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.956193][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.963745][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.971227][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.978632][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.986060][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 411.993525][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 412.001047][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 412.008461][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 412.015976][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 412.023489][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 412.030931][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 412.038338][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 412.045849][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 412.054593][ T8] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 412.084903][T13987] netlink: 'syz.3.3405': attribute type 4 has an invalid length. [ 412.882907][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.890459][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.897861][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.918351][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.925850][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.933302][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.940758][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.948194][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.955694][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.963212][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.970647][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.978115][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.985560][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 412.993026][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.079453][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.086903][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.094372][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.101909][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.109339][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.116891][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.124547][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.132249][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.139721][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.147145][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.154585][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.162123][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.169581][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.177058][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.184544][T13868] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.193165][T13868] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 413.252045][T14080] loop0: detected capacity change from 0 to 128 [ 413.270083][T14080] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.288406][T14080] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 414.062887][T14133] netlink: 'syz.4.3424': attribute type 4 has an invalid length. [ 414.293532][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.301139][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.308781][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.320475][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.327911][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.335388][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.342868][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.350443][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.357864][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.365385][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.372848][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.380330][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.387896][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.395354][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.444348][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.451984][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.459442][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.466945][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.474470][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.482119][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.489586][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.497125][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.504666][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.512185][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.519706][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.527113][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.534650][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.542075][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.549521][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 414.665126][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 414.665144][ T29] audit: type=1326 audit(2000000365.890:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.717775][ T3375] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 414.727750][ T29] audit: type=1326 audit(2000000365.890:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.751290][ T29] audit: type=1326 audit(2000000365.890:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.774935][ T29] audit: type=1326 audit(2000000365.890:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.798605][ T29] audit: type=1326 audit(2000000365.890:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.822355][ T29] audit: type=1326 audit(2000000365.890:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.845863][ T29] audit: type=1326 audit(2000000365.890:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.869412][ T29] audit: type=1326 audit(2000000365.890:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.892930][ T29] audit: type=1326 audit(2000000365.890:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 414.916657][ T29] audit: type=1326 audit(2000000365.890:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 415.054709][T14164] SELinux: Context Ü is not valid (left unmapped). [ 415.225681][T12335] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.371723][T14183] loop0: detected capacity change from 0 to 256 [ 415.512214][T14183] FAT-fs (loop0): IO charset macgaelic not found [ 416.723630][T14205] loop7: detected capacity change from 0 to 512 [ 416.802548][T14205] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 417.088061][T14209] loop0: detected capacity change from 0 to 164 [ 417.458032][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.467041][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.193653][T14217] loop0: detected capacity change from 0 to 512 [ 418.229829][T14217] EXT4-fs: Ignoring removed oldalloc option [ 418.364156][T14217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.3451: Parent and EA inode have the same ino 15 [ 418.504441][T14217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.3451: Parent and EA inode have the same ino 15 [ 418.538832][T14217] EXT4-fs (loop0): 1 orphan inode deleted [ 418.559888][T14217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.820708][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 419.820776][ T29] audit: type=1400 audit(2000000371.050:2771): avc: denied { write } for pid=14242 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.026552][ T29] audit: type=1400 audit(2000000371.250:2772): avc: denied { getopt } for pid=14254 comm="syz.3.3464" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 420.047088][ T29] audit: type=1326 audit(2000000371.250:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 420.070799][ T29] audit: type=1326 audit(2000000371.250:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 420.094508][ T29] audit: type=1326 audit(2000000371.250:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 420.118096][ T29] audit: type=1326 audit(2000000371.250:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 420.141634][ T29] audit: type=1326 audit(2000000371.250:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 420.166123][ T29] audit: type=1326 audit(2000000371.250:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 420.190074][ T29] audit: type=1326 audit(2000000371.250:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 420.213670][ T29] audit: type=1326 audit(2000000371.250:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 420.308651][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3465'. [ 420.345051][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3465'. [ 420.358134][T14258] bond0: (slave bond_slave_0): Releasing backup interface [ 420.473073][T14267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3469'. [ 420.482270][T14268] xt_CT: No such helper "snmp_trap" [ 420.931505][T14286] loop7: detected capacity change from 0 to 2048 [ 420.941563][T14286] 9pnet_fd: Insufficient options for proto=fd [ 421.496254][T12335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.076964][T14302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3483'. [ 422.518515][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 422.521940][T14326] xt_CT: No such helper "snmp_trap" [ 422.540199][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 423.123605][T14352] FAULT_INJECTION: forcing a failure. [ 423.123605][T14352] name failslab, interval 1, probability 0, space 0, times 0 [ 423.136337][T14352] CPU: 0 UID: 0 PID: 14352 Comm: syz.7.3503 Not tainted 6.14.0-rc4-syzkaller #0 [ 423.136366][T14352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 423.136380][T14352] Call Trace: [ 423.136386][T14352] [ 423.136393][T14352] dump_stack_lvl+0xf2/0x150 [ 423.136422][T14352] dump_stack+0x15/0x1a [ 423.136530][T14352] should_fail_ex+0x24a/0x260 [ 423.136599][T14352] should_failslab+0x8f/0xb0 [ 423.136636][T14352] kmem_cache_alloc_noprof+0x52/0x320 [ 423.136660][T14352] ? getname_flags+0x81/0x3b0 [ 423.136692][T14352] getname_flags+0x81/0x3b0 [ 423.136805][T14352] user_path_at+0x26/0x120 [ 423.136828][T14352] __se_sys_quotactl+0xb2/0x660 [ 423.136848][T14352] ? fput+0x1c4/0x200 [ 423.136924][T14352] __x64_sys_quotactl+0x55/0x70 [ 423.136952][T14352] x64_sys_call+0x826/0x2dc0 [ 423.136978][T14352] do_syscall_64+0xc9/0x1c0 [ 423.137008][T14352] ? clear_bhb_loop+0x55/0xb0 [ 423.137054][T14352] ? clear_bhb_loop+0x55/0xb0 [ 423.137087][T14352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.137205][T14352] RIP: 0033:0x7f6a6f1dd169 [ 423.137219][T14352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.137236][T14352] RSP: 002b:00007f6a6d847038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 423.137256][T14352] RAX: ffffffffffffffda RBX: 00007f6a6f3f5fa0 RCX: 00007f6a6f1dd169 [ 423.137271][T14352] RDX: 0000000000000000 RSI: 00004000000006c0 RDI: ffffffff80000200 [ 423.137285][T14352] RBP: 00007f6a6d847090 R08: 0000000000000000 R09: 0000000000000000 [ 423.137300][T14352] R10: 00004000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 423.137314][T14352] R13: 0000000000000000 R14: 00007f6a6f3f5fa0 R15: 00007ffdb8187d68 [ 423.137345][T14352] [ 423.410181][T14360] loop0: detected capacity change from 0 to 1024 [ 423.417187][T14360] EXT4-fs: Ignoring removed orlov option [ 423.422897][T14360] EXT4-fs: Ignoring removed orlov option [ 423.428563][T14360] EXT4-fs: Ignoring removed oldalloc option [ 423.495620][T14360] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 423.506767][T14360] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 423.550917][T14360] EXT4-fs (loop0): invalid journal inode [ 423.557369][T14360] EXT4-fs (loop0): can't get journal size [ 423.582475][T14360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.825307][T12335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.171740][T14377] 9pnet: Could not find request transport: f [ 424.181821][T14379] loop7: detected capacity change from 0 to 164 [ 425.086113][T14393] netlink: 'syz.0.3517': attribute type 4 has an invalid length. [ 425.290374][T14391] loop7: detected capacity change from 0 to 512 [ 425.307627][T14391] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 425.494623][T14398] xt_CT: No such helper "snmp_trap" [ 425.573210][T14398] loop0: detected capacity change from 0 to 512 [ 425.612306][T14398] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 425.747609][T14398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.812712][T14398] EXT4-fs: Ignoring removed orlov option [ 425.815043][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 425.815113][ T29] audit: type=1400 audit(2000000377.040:3055): avc: denied { remount } for pid=14397 comm="syz.0.3519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 425.842017][T14398] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 425.853745][T14398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.911367][ T29] audit: type=1326 audit(2000000377.140:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 425.988926][ T29] audit: type=1326 audit(2000000377.170:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 426.012560][ T29] audit: type=1326 audit(2000000377.170:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 426.036149][ T29] audit: type=1326 audit(2000000377.170:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 426.059750][ T29] audit: type=1326 audit(2000000377.170:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 426.083356][ T29] audit: type=1326 audit(2000000377.170:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 426.107105][ T29] audit: type=1326 audit(2000000377.170:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 426.130697][ T29] audit: type=1326 audit(2000000377.170:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 426.154275][ T29] audit: type=1326 audit(2000000377.170:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14417 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 426.204028][T14421] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 426.223798][T14421] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 426.289475][T14398] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.3519: Abort forced by user [ 426.308079][T14398] EXT4-fs (loop0): Remounting filesystem read-only [ 426.314716][T14398] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 426.389874][T14429] xt_CT: No such helper "snmp_trap" [ 426.403408][T14429] loop7: detected capacity change from 0 to 512 [ 426.448096][T14429] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 426.458170][T12335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.493004][T14429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.781146][T14429] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 426.928395][T13206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.574299][T14451] loop0: detected capacity change from 0 to 164 [ 428.595283][T14460] loop7: detected capacity change from 0 to 512 [ 428.676427][T14460] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 428.988337][T14471] loop0: detected capacity change from 0 to 8192 [ 429.114794][T14477] vlan2: entered allmulticast mode [ 429.271642][T14490] xt_CT: No such helper "snmp_trap" [ 429.377618][T14506] SELinux: syz.2.3556 (14506) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 429.683188][T14518] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 429.690646][T14518] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 429.770826][T14529] loop7: detected capacity change from 0 to 512 [ 429.872908][T14529] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 429.906049][T14534] 9p: Unknown access argument c: -22 [ 430.221513][T14539] xt_CT: No such helper "snmp_trap" [ 430.277179][T14539] loop0: detected capacity change from 0 to 512 [ 430.304103][T14539] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 430.352732][T14539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.392109][T14539] EXT4-fs: Ignoring removed orlov option [ 430.409164][T14539] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 430.418741][T14539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.452961][T14539] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.3565: Abort forced by user [ 430.479305][T14539] EXT4-fs (loop0): Remounting filesystem read-only [ 430.486051][T14539] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 430.544960][T12335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.717407][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 430.744410][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 430.831919][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 430.831934][ T29] audit: type=1326 audit(2000000382.060:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd4e6a4127 code=0x7ffc0000 [ 430.861688][ T29] audit: type=1326 audit(2000000382.060:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd4e649359 code=0x7ffc0000 [ 430.885249][ T29] audit: type=1326 audit(2000000382.060:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd4e6abad0 code=0x7ffc0000 [ 431.044023][ T29] audit: type=1326 audit(2000000382.140:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd4e6a4127 code=0x7ffc0000 [ 431.067648][ T29] audit: type=1326 audit(2000000382.140:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd4e649359 code=0x7ffc0000 [ 431.091216][ T29] audit: type=1326 audit(2000000382.140:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 431.114789][ T29] audit: type=1326 audit(2000000382.140:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 431.138419][ T29] audit: type=1326 audit(2000000382.150:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd4e6a4127 code=0x7ffc0000 [ 431.161930][ T29] audit: type=1326 audit(2000000382.150:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd4e649359 code=0x7ffc0000 [ 431.185421][ T29] audit: type=1326 audit(2000000382.150:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14536 comm="syz.4.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 431.377445][T14558] xt_CT: No such helper "snmp_trap" [ 431.383492][T14565] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3570'. [ 431.715404][T14578] netlink: 'syz.7.3577': attribute type 4 has an invalid length. [ 431.989405][T14576] loop0: detected capacity change from 0 to 2048 [ 432.521416][T14600] xt_CT: No such helper "snmp_trap" [ 433.165374][T14613] loop0: detected capacity change from 0 to 256 [ 433.340460][T14612] netlink: 'syz.7.3588': attribute type 4 has an invalid length. [ 433.403072][T14613] FAT-fs (loop0): IO charset macgaelic not found [ 433.671017][T14621] loop7: detected capacity change from 0 to 1024 [ 433.694512][T14621] ext2: Unknown parameter 'subj_user' [ 433.789965][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3591'. [ 434.459227][T14634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3596'. [ 434.564025][T14642] netlink: 'syz.4.3599': attribute type 4 has an invalid length. [ 434.694202][T14651] loop7: detected capacity change from 0 to 512 [ 434.701386][T14651] journal_path: Non-blockdev passed as './bus' [ 434.707592][T14651] EXT4-fs: error: could not find journal device path [ 435.806900][T14672] loop7: detected capacity change from 0 to 1024 [ 435.839683][T14672] ext2: Unknown parameter 'subj_user' [ 435.909013][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3608'. [ 436.087933][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 436.087951][ T29] audit: type=1326 audit(2000000387.310:3898): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.140640][ T29] audit: type=1326 audit(2000000387.310:3899): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.164697][ T29] audit: type=1326 audit(2000000387.360:3900): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.188658][ T29] audit: type=1326 audit(2000000387.360:3901): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.212514][ T29] audit: type=1326 audit(2000000387.360:3902): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.236375][ T29] audit: type=1326 audit(2000000387.360:3903): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.260300][ T29] audit: type=1326 audit(2000000387.360:3904): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.284270][ T29] audit: type=1326 audit(2000000387.360:3905): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.308024][ T29] audit: type=1326 audit(2000000387.360:3906): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.331912][ T29] audit: type=1326 audit(2000000387.360:3907): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.3.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 436.385655][T14682] netlink: 'syz.4.3612': attribute type 4 has an invalid length. [ 436.395074][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 436.410263][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 436.866440][T14704] loop7: detected capacity change from 0 to 2048 [ 436.878375][T14704] 9pnet_fd: Insufficient options for proto=fd [ 437.746150][T14716] netlink: 'syz.3.3624': attribute type 4 has an invalid length. [ 438.388809][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3629'. [ 438.511662][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 438.539976][T14736] binfmt_misc: register: failed to install interpreter file ./file0 [ 438.583304][T14740] netlink: 'syz.3.3635': attribute type 4 has an invalid length. [ 439.614075][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3643'. [ 439.623171][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'. [ 439.856944][T14773] netlink: 'syz.3.3646': attribute type 4 has an invalid length. [ 439.987992][T14779] loop0: detected capacity change from 0 to 128 [ 440.530564][ T6053] bio_check_eod: 8 callbacks suppressed [ 440.530580][ T6053] kworker/u8:12: attempt to access beyond end of device [ 440.530580][ T6053] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 440.591133][T14792] IPv4: Oversized IP packet from 127.202.26.0 [ 440.671252][T14797] 9pnet_fd: Insufficient options for proto=fd [ 440.922079][T14822] loop0: detected capacity change from 0 to 512 [ 440.929939][T14822] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.3658: inode #1: comm syz.0.3658: iget: illegal inode # [ 440.943468][T14822] EXT4-fs (loop0): Remounting filesystem read-only [ 440.950078][T14822] EXT4-fs (loop0): no journal found [ 440.955302][T14822] EXT4-fs (loop0): can't get journal size [ 440.963167][T14822] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 440.974024][T14822] EXT4-fs (loop0): failed to initialize system zone (-22) [ 440.981473][T14822] EXT4-fs (loop0): mount failed [ 441.210198][T14831] loop7: detected capacity change from 0 to 2048 [ 441.221755][T14831] 9pnet_fd: Insufficient options for proto=fd [ 441.361395][T14836] loop0: detected capacity change from 0 to 512 [ 441.371595][T14836] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.3664: inode #1: comm syz.0.3664: iget: illegal inode # [ 441.440076][T14836] EXT4-fs (loop0): Remounting filesystem read-only [ 441.446649][T14836] EXT4-fs (loop0): no journal found [ 441.451942][T14836] EXT4-fs (loop0): can't get journal size [ 441.458099][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 441.458113][ T29] audit: type=1326 audit(2000000392.680:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14793 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 441.592522][T14836] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 441.614988][T14842] SELinux: syz.2.3667 (14842) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 441.646983][T14836] EXT4-fs (loop0): failed to initialize system zone (-22) [ 441.664804][ T29] audit: type=1326 audit(2000000392.710:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14793 comm="syz.2.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1c5d169 code=0x7ffc0000 [ 441.688570][ T29] audit: type=1400 audit(2000000392.810:4091): avc: denied { create } for pid=14841 comm="syz.2.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 441.708114][ T29] audit: type=1400 audit(2000000392.810:4092): avc: denied { getopt } for pid=14841 comm="syz.2.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 441.738112][T14836] EXT4-fs (loop0): mount failed [ 442.159112][ T29] audit: type=1326 audit(2000000393.380:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 442.236531][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.268661][ T29] audit: type=1326 audit(2000000393.410:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 442.292556][ T29] audit: type=1326 audit(2000000393.410:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 442.316265][ T29] audit: type=1326 audit(2000000393.410:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 442.339873][ T29] audit: type=1326 audit(2000000393.420:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 442.363408][ T29] audit: type=1326 audit(2000000393.420:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 442.388158][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.251202][T14901] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3688'. [ 443.382978][T14918] loop0: detected capacity change from 0 to 256 [ 443.509706][T14918] FAT-fs (loop0): IO charset macgaelic not found [ 443.908867][T14935] FAULT_INJECTION: forcing a failure. [ 443.908867][T14935] name failslab, interval 1, probability 0, space 0, times 0 [ 443.921798][T14935] CPU: 1 UID: 0 PID: 14935 Comm: syz.3.3700 Not tainted 6.14.0-rc4-syzkaller #0 [ 443.921862][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 443.921875][T14935] Call Trace: [ 443.921882][T14935] [ 443.921889][T14935] dump_stack_lvl+0xf2/0x150 [ 443.921924][T14935] dump_stack+0x15/0x1a [ 443.922021][T14935] should_fail_ex+0x24a/0x260 [ 443.922056][T14935] should_failslab+0x8f/0xb0 [ 443.922092][T14935] kmem_cache_alloc_node_noprof+0x59/0x320 [ 443.922121][T14935] ? __alloc_skb+0x10b/0x310 [ 443.922146][T14935] __alloc_skb+0x10b/0x310 [ 443.922244][T14935] ? audit_log_start+0x34c/0x6b0 [ 443.922285][T14935] audit_log_start+0x368/0x6b0 [ 443.922322][T14935] audit_seccomp+0x4b/0x130 [ 443.922355][T14935] __seccomp_filter+0x6fa/0x1180 [ 443.922457][T14935] ? __perf_event_task_sched_out+0x138/0x1010 [ 443.922494][T14935] __secure_computing+0x9f/0x1c0 [ 443.922525][T14935] syscall_trace_enter+0xd1/0x1f0 [ 443.922580][T14935] do_syscall_64+0xaa/0x1c0 [ 443.922615][T14935] ? clear_bhb_loop+0x55/0xb0 [ 443.922648][T14935] ? clear_bhb_loop+0x55/0xb0 [ 443.922781][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.922814][T14935] RIP: 0033:0x7f118d11d169 [ 443.922832][T14935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.922915][T14935] RSP: 002b:00007f118b787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 443.922933][T14935] RAX: ffffffffffffffda RBX: 00007f118d335fa0 RCX: 00007f118d11d169 [ 443.922948][T14935] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 443.922968][T14935] RBP: 00007f118b787090 R08: 0000000000000000 R09: 0000000000000000 [ 443.922982][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.922996][T14935] R13: 0000000000000000 R14: 00007f118d335fa0 R15: 00007ffd3ed6b468 [ 443.923018][T14935] [ 444.631746][T14944] loop7: detected capacity change from 0 to 512 [ 444.666770][T14944] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.3703: inode #1: comm syz.7.3703: iget: illegal inode # [ 444.731350][T14944] EXT4-fs (loop7): Remounting filesystem read-only [ 444.738003][T14944] EXT4-fs (loop7): no journal found [ 444.743350][T14944] EXT4-fs (loop7): can't get journal size [ 444.782319][T14944] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 444.815235][T14944] EXT4-fs (loop7): failed to initialize system zone (-22) [ 444.845440][T14944] EXT4-fs (loop7): mount failed [ 445.424015][T14965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.449653][T14965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.457650][T14968] loop7: detected capacity change from 0 to 512 [ 445.486585][T14968] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.3707: inode #1: comm syz.7.3707: iget: illegal inode # [ 445.565562][T14968] EXT4-fs (loop7): Remounting filesystem read-only [ 445.572136][T14968] EXT4-fs (loop7): no journal found [ 445.577370][T14968] EXT4-fs (loop7): can't get journal size [ 445.613904][T14968] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 445.660983][T14968] EXT4-fs (loop7): failed to initialize system zone (-22) [ 445.693139][T14968] EXT4-fs (loop7): mount failed [ 446.036572][T14980] loop7: detected capacity change from 0 to 2048 [ 446.047709][T14980] 9pnet_fd: Insufficient options for proto=fd [ 447.417252][T15002] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.3723'. [ 447.469501][T15002] netlink: zone id is out of range [ 447.474658][T15002] netlink: zone id is out of range [ 447.479930][T15002] netlink: zone id is out of range [ 447.485053][T15002] netlink: zone id is out of range [ 447.512598][T15002] netlink: zone id is out of range [ 447.517816][T15002] netlink: zone id is out of range [ 447.528949][T15008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.549742][T15002] netlink: zone id is out of range [ 447.554922][T15002] netlink: zone id is out of range [ 447.560099][T15002] netlink: zone id is out of range [ 447.565217][T15002] netlink: zone id is out of range [ 447.569572][T15008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.464946][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 448.464962][ T29] audit: type=1400 audit(2000000399.690:4296): avc: denied { getopt } for pid=15038 comm="syz.7.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.554460][T15041] 9pnet_fd: Insufficient options for proto=fd [ 448.580935][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3740'. [ 448.613514][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3740'. [ 448.691209][T15049] loop7: detected capacity change from 0 to 512 [ 448.698093][T15049] EXT4-fs: Ignoring removed oldalloc option [ 448.711589][T15049] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.3739: Parent and EA inode have the same ino 15 [ 448.737061][T15049] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.3739: Parent and EA inode have the same ino 15 [ 448.750410][T15049] EXT4-fs (loop7): 1 orphan inode deleted [ 448.757254][T15049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.869167][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.972822][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.612535][ T29] audit: type=1326 audit(2000000400.840:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 449.673900][ T29] audit: type=1326 audit(2000000400.870:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 449.697582][ T29] audit: type=1326 audit(2000000400.870:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 449.721094][ T29] audit: type=1326 audit(2000000400.870:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 449.744592][ T29] audit: type=1326 audit(2000000400.870:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 449.768208][ T29] audit: type=1326 audit(2000000400.870:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 449.791767][ T29] audit: type=1326 audit(2000000400.870:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 449.815268][ T29] audit: type=1326 audit(2000000400.870:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 449.838853][ T29] audit: type=1326 audit(2000000400.870:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb536cd169 code=0x7ffc0000 [ 450.614818][T13206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.699773][T15082] 9pnet_fd: Insufficient options for proto=fd [ 450.716726][T15080] FAULT_INJECTION: forcing a failure. [ 450.716726][T15080] name failslab, interval 1, probability 0, space 0, times 0 [ 450.729482][T15080] CPU: 0 UID: 0 PID: 15080 Comm: syz.0.3752 Not tainted 6.14.0-rc4-syzkaller #0 [ 450.729509][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 450.729524][T15080] Call Trace: [ 450.729532][T15080] [ 450.729541][T15080] dump_stack_lvl+0xf2/0x150 [ 450.729574][T15080] dump_stack+0x15/0x1a [ 450.729629][T15080] should_fail_ex+0x24a/0x260 [ 450.729663][T15080] should_failslab+0x8f/0xb0 [ 450.729775][T15080] kmem_cache_alloc_noprof+0x52/0x320 [ 450.729802][T15080] ? flock_lock_inode+0x236/0xf50 [ 450.729840][T15080] flock_lock_inode+0x236/0xf50 [ 450.729925][T15080] ? file_has_perm+0x329/0x370 [ 450.729966][T15080] locks_lock_inode_wait+0x6e/0x2c0 [ 450.729995][T15080] __se_sys_flock+0x2ed/0x3b0 [ 450.730033][T15080] __x64_sys_flock+0x31/0x40 [ 450.730066][T15080] x64_sys_call+0x293c/0x2dc0 [ 450.730097][T15080] do_syscall_64+0xc9/0x1c0 [ 450.730162][T15080] ? clear_bhb_loop+0x55/0xb0 [ 450.730246][T15080] ? clear_bhb_loop+0x55/0xb0 [ 450.730279][T15080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.730308][T15080] RIP: 0033:0x7fcb536cd169 [ 450.730326][T15080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.730428][T15080] RSP: 002b:00007fcb51d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 450.730450][T15080] RAX: ffffffffffffffda RBX: 00007fcb538e5fa0 RCX: 00007fcb536cd169 [ 450.730465][T15080] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 450.730479][T15080] RBP: 00007fcb51d31090 R08: 0000000000000000 R09: 0000000000000000 [ 450.730493][T15080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.730508][T15080] R13: 0000000000000000 R14: 00007fcb538e5fa0 R15: 00007ffe69bf9ea8 [ 450.730524][T15080] [ 451.057475][T15090] loop7: detected capacity change from 0 to 256 [ 451.065151][T15090] msdos: Unknown parameter '' [ 451.090407][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 451.227951][T15109] loop0: detected capacity change from 0 to 2048 [ 451.253482][T15109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.405637][T12335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.543944][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3769'. [ 451.892724][T15149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.911732][T15147] loop7: detected capacity change from 0 to 2048 [ 451.970055][T15147] loop7: p4 < > [ 451.977901][T15151] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3778'. [ 451.988039][ T2999] loop7: p4 < > [ 452.026740][T15149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.047612][ T9084] udevd[9084]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 452.074197][ T9084] udevd[9084]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 452.116105][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 452.181119][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 452.652946][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3798'. [ 452.680128][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3798'. [ 453.233514][T15229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.250014][T15229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.387867][T15237] veth0_to_bond: entered promiscuous mode [ 453.409826][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3812'. [ 453.444162][T15237] veth0_to_bond (unregistering): left promiscuous mode [ 453.471962][T15239] 9pnet_fd: Insufficient options for proto=fd [ 453.479838][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 453.479855][ T29] audit: type=1400 audit(2000000404.710:4448): avc: denied { create } for pid=15236 comm="syz.2.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 453.507478][T15237] bond0: (slave bond_slave_0): Releasing backup interface [ 453.530066][T15240] loop7: detected capacity change from 0 to 256 [ 453.588491][T15240] FAT-fs (loop7): IO charset macgaelic not found [ 453.735746][T15245] xt_CT: No such helper "snmp_trap" [ 453.962691][T15258] capability: warning: `syz.4.3820' uses 32-bit capabilities (legacy support in use) [ 453.977784][T15259] loop0: detected capacity change from 0 to 256 [ 453.979644][ T29] audit: type=1400 audit(2000000405.190:4449): avc: denied { append } for pid=15256 comm="syz.4.3820" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.158780][T15259] FAT-fs (loop0): IO charset macgaelic not found [ 454.921286][ T29] audit: type=1326 audit(2000000406.150:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 454.998955][ T29] audit: type=1326 audit(2000000406.190:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 455.022438][ T29] audit: type=1326 audit(2000000406.190:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 455.046131][ T29] audit: type=1326 audit(2000000406.190:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 455.069730][ T29] audit: type=1326 audit(2000000406.190:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 455.093364][ T29] audit: type=1326 audit(2000000406.190:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 455.116980][ T29] audit: type=1326 audit(2000000406.190:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 455.140506][ T29] audit: type=1326 audit(2000000406.190:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15276 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fbd4e6ad169 code=0x7ffc0000 [ 455.223464][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3825'. [ 456.008322][T15285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.072768][T15285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.203222][T15294] xt_CT: No such helper "snmp_trap" [ 457.498117][T15304] xt_hashlimit: max too large, truncated to 1048576 [ 458.054317][T15315] netem: change failed [ 459.132074][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 459.132093][ T29] audit: type=1400 audit(2000000410.360:4486): avc: denied { setopt } for pid=15318 comm="syz.0.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 459.140110][T15319] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 459.180755][ T29] audit: type=1400 audit(2000000410.360:4487): avc: denied { create } for pid=15318 comm="syz.0.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 459.190816][T15319] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 459.324421][T15328] loop7: detected capacity change from 0 to 512 [ 459.355628][T15328] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.3839: inode #1: comm syz.7.3839: iget: illegal inode # [ 459.369072][T15332] xt_CT: No such helper "snmp_trap" [ 459.378667][T15332] loop0: detected capacity change from 0 to 512 [ 459.389990][T15332] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 459.409869][T15328] EXT4-fs (loop7): Remounting filesystem read-only [ 459.416420][T15328] EXT4-fs (loop7): no journal found [ 459.421837][T15328] EXT4-fs (loop7): can't get journal size [ 459.438263][T15332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.451052][T15328] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 459.470476][T15332] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 459.481036][T15328] EXT4-fs (loop7): failed to initialize system zone (-22) [ 459.488283][T15328] EXT4-fs (loop7): mount failed [ 459.529168][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3843'. [ 459.539182][T12335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.558103][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3843'. [ 459.733249][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3844'. [ 459.781072][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3844'. [ 460.126472][T15352] loop0: detected capacity change from 0 to 128 [ 460.138978][T15352] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 460.151722][T15352] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 460.242596][T15355] loop7: detected capacity change from 0 to 512 [ 460.249563][T15355] EXT4-fs: Ignoring removed oldalloc option [ 460.404737][T15355] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.3847: Parent and EA inode have the same ino 15 [ 460.424200][T15355] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.3847: Parent and EA inode have the same ino 15 [ 460.438003][T15355] EXT4-fs (loop7): 1 orphan inode deleted [ 460.444575][T15355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.700887][T15362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.758538][T15362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.074908][T12335] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 461.241868][T15372] loop0: detected capacity change from 0 to 512 [ 461.269574][T15372] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.3854: inode #1: comm syz.0.3854: iget: illegal inode # [ 461.324293][T15372] EXT4-fs (loop0): Remounting filesystem read-only [ 461.330908][T15372] EXT4-fs (loop0): no journal found [ 461.336134][T15372] EXT4-fs (loop0): can't get journal size [ 461.381734][T15372] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 461.429762][T15372] EXT4-fs (loop0): failed to initialize system zone (-22) [ 461.455825][T15372] EXT4-fs (loop0): mount failed [ 461.492784][ T29] audit: type=1326 audit(2000000412.720:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 461.609199][ T29] audit: type=1326 audit(2000000412.750:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 461.632821][ T29] audit: type=1326 audit(2000000412.750:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 461.656453][ T29] audit: type=1326 audit(2000000412.750:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 461.680030][ T29] audit: type=1326 audit(2000000412.750:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 461.703611][ T29] audit: type=1326 audit(2000000412.750:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 461.727140][ T29] audit: type=1326 audit(2000000412.750:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 461.750701][ T29] audit: type=1326 audit(2000000412.750:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 461.866251][T13206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.937721][T15381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3858'. [ 461.976649][T15387] netlink: 'syz.0.3860': attribute type 4 has an invalid length. [ 462.036114][T15389] IPv6: NLM_F_CREATE should be specified when creating new route [ 462.064200][T15392] netem: change failed [ 462.123334][T15396] loop0: detected capacity change from 0 to 128 [ 462.142960][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3865'. [ 462.165463][T15396] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 462.203438][T15396] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 462.253095][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3865'. [ 462.597394][T15415] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 462.628522][T15417] loop7: detected capacity change from 0 to 512 [ 462.646719][T15417] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.3869: inode #1: comm syz.7.3869: iget: illegal inode # [ 462.672738][T15417] EXT4-fs (loop7): Remounting filesystem read-only [ 462.679317][T15417] EXT4-fs (loop7): no journal found [ 462.684762][T15417] EXT4-fs (loop7): can't get journal size [ 462.702639][T12335] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 462.721018][T15417] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 462.740754][T15417] EXT4-fs (loop7): failed to initialize system zone (-22) [ 462.782591][T15417] EXT4-fs (loop7): mount failed [ 462.903098][T15426] loop0: detected capacity change from 0 to 512 [ 462.921061][T15426] EXT4-fs: Ignoring removed oldalloc option [ 462.963244][T15426] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.3873: Parent and EA inode have the same ino 15 [ 463.003182][T15426] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.3873: Parent and EA inode have the same ino 15 [ 463.018005][T15426] EXT4-fs (loop0): 1 orphan inode deleted [ 463.031898][T15426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.431936][T15451] netlink: 'syz.2.3882': attribute type 4 has an invalid length. [ 464.848951][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 464.848975][ T29] audit: type=1326 audit(2000000416.070:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 464.899302][ T29] audit: type=1326 audit(2000000416.110:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 464.923199][ T29] audit: type=1326 audit(2000000416.110:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 464.946813][ T29] audit: type=1326 audit(2000000416.110:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 464.970794][ T29] audit: type=1326 audit(2000000416.110:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 464.994865][ T29] audit: type=1326 audit(2000000416.110:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 465.018626][ T29] audit: type=1326 audit(2000000416.110:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 465.042151][ T29] audit: type=1326 audit(2000000416.110:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 465.065784][ T29] audit: type=1326 audit(2000000416.110:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 465.089450][ T29] audit: type=1326 audit(2000000416.110:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118d11d169 code=0x7ffc0000 [ 465.388684][T15484] netlink: 'syz.2.3894': attribute type 4 has an invalid length. [ 465.498016][T15488] loop7: detected capacity change from 0 to 128 [ 465.556362][T15488] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 465.594459][T15488] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 465.667390][T12335] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.931198][T13206] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.368960][T15518] loop0: detected capacity change from 0 to 2048 [ 468.138169][T15552] xt_CT: No such helper "snmp_trap" [ 468.146923][T15556] loop7: detected capacity change from 0 to 512 [ 468.170815][T15556] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 468.333212][T15556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.465596][T15552] EXT4-fs: Ignoring removed orlov option [ 468.521795][T15552] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 468.531330][T15552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.811448][T15552] EXT4-fs error (device loop7): __ext4_remount:6738: comm syz.7.3918: Abort forced by user [ 468.907183][T15552] EXT4-fs (loop7): Remounting filesystem read-only [ 468.913891][T15552] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 468.998274][T13206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.467249][T15618] loop7: detected capacity change from 0 to 2048 [ 470.501745][T15620] xt_CT: No such helper "snmp_trap" [ 474.646511][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3963'. [ 474.671180][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3963'. [ 474.752126][T15684] loop7: detected capacity change from 0 to 256 [ 474.817585][T15684] FAT-fs (loop7): IO charset macgaelic not found [ 476.108216][T15699] ================================================================== [ 476.116354][T15699] BUG: KCSAN: data-race in cleanup_net / synchronize_net [ 476.123423][T15699] [ 476.125753][T15699] write to 0xffffffff88c95818 of 8 bytes by task 1884 on cpu 1: [ 476.133391][T15699] cleanup_net+0x68/0x890 [ 476.138215][T15699] process_scheduled_works+0x4db/0xa20 [ 476.143689][T15699] worker_thread+0x51d/0x6f0 [ 476.148288][T15699] kthread+0x4ae/0x520 [ 476.152375][T15699] ret_from_fork+0x4b/0x60 [ 476.156834][T15699] ret_from_fork_asm+0x1a/0x30 [ 476.161616][T15699] [ 476.163949][T15699] read to 0xffffffff88c95818 of 8 bytes by task 15699 on cpu 0: [ 476.171600][T15699] synchronize_net+0x24/0x70 [ 476.176207][T15699] packet_release+0x5b8/0x7f0 [ 476.180907][T15699] sock_close+0x68/0x150 [ 476.185163][T15699] __fput+0x2ac/0x640 [ 476.189238][T15699] ____fput+0x1c/0x30 [ 476.193227][T15699] task_work_run+0x13a/0x1a0 [ 476.197847][T15699] do_exit+0x5d8/0x17f0 [ 476.202030][T15699] __x64_sys_exit+0x1f/0x20 [ 476.206640][T15699] x64_sys_call+0x2da1/0x2dc0 [ 476.211331][T15699] do_syscall_64+0xc9/0x1c0 [ 476.215853][T15699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.221776][T15699] [ 476.224101][T15699] value changed: 0x0000000000000000 -> 0xffff888103133180 [ 476.231205][T15699] [ 476.233528][T15699] Reported by Kernel Concurrency Sanitizer on: [ 476.239700][T15699] CPU: 0 UID: 0 PID: 15699 Comm: syz.7.3969 Not tainted 6.14.0-rc4-syzkaller #0 [ 476.248732][T15699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 476.258805][T15699] ==================================================================