last executing test programs: 1m25.909700566s ago: executing program 2 (id=705): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00"}) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) sendmsg$nl_generic(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="140100004000040027bd7000fbdbdf251000000028002f800400b5800400048008003800", @ANYRES32=r0, @ANYBLOB="04001680d00012005c00000008000c00", @ANYRES32=r6, @ANYBLOB="2575f72a1309060efc8cca1a4a9ed1011677172f190f6eb789600e9dfd008825878d11b890f4ad2269b93e2cc7ea28bc34fc1c986160f224f5d612bd9f2667c9986359a77a918a0fec4ac18eb90d69a2cb1eaf3f79806b49063b949b6d35807c567c8ba66e3ab3f8408136f4315bee2eb23a1f3b6ec8973e11ae70b815a6db6db2ebb24906ee4d3a342139060eef8711c2c93db931a6b7f4638ae488933b4be0780d254e86415643ce9e225499831aed97f1340cc4ac0d9d29d075b6c60159b10aad7327ea0800db007f00000108003a000a010100000000"], 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0xa000, 0xce) close(r9) 1m25.797796127s ago: executing program 2 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) listen(r1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000042128009000100626f6e64000000000c00028008001e0001000000"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1830000009000000000000000300000095000000000000002270c37dc66ecb621916d291c955235c0cb3ba04a12c9d084e9a2dafb8e56a2966e65bc675fb092adfd757b6215535ac94a6f39f854ef2aa8c384c9593d0213f8967839b3701b9581a6d4f39fda7da3e6993eb5568d0154c9ed225cec2f3f5b0c6abdf4315de5a8a20449aeb5e68199d48a4d92a6db972282def9b02f48aa6479185ce037bbf571d3f7f3acbb85917f48a7de0f448a669d134eccaefaf35776d5364c1dd2408c757c014f415c9c5d7c188e79339905e7bbc867b8cc95d223faa2def2a99d988ced3e4a3a7e4fd"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstatfs(0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) 1m25.66634181s ago: executing program 2 (id=709): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004884}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x4}, 0x18) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r8, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x2}, 0x55) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000004c0)="0abd39bed1db2ef9b60ed0a83231024cd6899e6583dce4f957f85c5529eb9006d7497c0fdbb3e6802def3c2ea27f26572c73b72b3f234cee63159948ef1a21108dee137bdece26c4a0a7b6e068639ec0789b5f7adb3e41a05886b358f14abafa9507bf0844482030825624453277c86447f9485e74952e41586036959e1256d20fe3b8197476ce9b4c72cc85c74c8752a16a187046e044d30de9037c0e775fad10d2a3ffcb45c8063e62509e738cd3fbfa10b6411a8a4f6758800f38f458b1b22a13e79ebf1e883a7c4363ffbf8642d237b4146c6c027b592a9e640e8325976975") sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x2}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 1m25.65731708s ago: executing program 2 (id=711): gettid() socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {r5, 0x8, '\x00', "07c714a2e2fdbd717ad50ede1bf077e0ce60908ce2f186c4f14b353135146d338e9cbaa6616f30b1b000672effb439ace2cf7f438f8239034e2e6760b9c2297fc0339b5e0310971dca3d8ce749e1ee3bdcd56ecf29a0f10013db2a3eb9879a8dcc53526320b5dfdba914a0f672f07855bf8494aabdbe51dc238a54ed852cb8d0a160ddb6498a10959d4864ea7ebbe0ffe6c4f6dba3f431d34f797c10e399ddbb68a7e1831beb289e0b1c6062a47094c89c80959b0cd57d0ac374ecf8e6c883a1de901d2af44ba5821fb48bec3c47954f855cbf401c2f784444d0b53246379da3c573930257359bbcdcaa66451aa99ac0829270b492ae53a396a6a8a604191fbd"}}, 0x110) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m25.608969785s ago: executing program 2 (id=714): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00"}) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) sendmsg$nl_generic(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="140100004000040027bd7000fbdbdf251000000028002f800400b5800400048008003800", @ANYRES32=r0, @ANYBLOB="04001680d00012005c00000008000c00", @ANYRES32=r6, @ANYBLOB="2575f72a1309060efc8cca1a4a9ed1011677172f190f6eb789600e9dfd008825878d11b890f4ad2269b93e2cc7ea28bc34fc1c986160f224f5d612bd9f2667c9986359a77a918a0fec4ac18eb90d69a2cb1eaf3f79806b49063b949b6d35807c567c8ba66e3ab3f8408136f4315bee2eb23a1f3b6ec8973e11ae70b815a6db6db2ebb24906ee4d3a342139060eef8711c2c93db931a6b7f4638ae488933b4be0780d254e86415643ce9e225499831aed97f1340cc4ac0d9d29d075b6c60159b10aad7327ea0800db007f00000108003a000a010100000000"], 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) close(0xffffffffffffffff) 1m25.328099743s ago: executing program 2 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='.\x00', 0x181000, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r7 = socket(0x2, 0x80805, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000ec0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff9, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r12, @ANYBLOB="14000100fff1ffffffffffffff00"], 0x34}}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20048800) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r13, &(0x7f0000000200), 0xfffffd9d) getsockname(r13, &(0x7f0000000280)=@phonet, &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x4, 0x8, {{0xb, 0x4, 0x3, 0x1e, 0x2c, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp={0x44, 0xc, 0x72, 0x0, 0x0, [0x6, 0x1]}, @rr={0x7, 0xb, 0x46, [@remote, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xf4, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x4008044) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="4b000000020000000b"], 0x36f0516f) 1m25.306684645s ago: executing program 32 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='.\x00', 0x181000, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r7 = socket(0x2, 0x80805, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000ec0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff9, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r12, @ANYBLOB="14000100fff1ffffffffffffff00"], 0x34}}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20048800) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r13, &(0x7f0000000200), 0xfffffd9d) getsockname(r13, &(0x7f0000000280)=@phonet, &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x4, 0x8, {{0xb, 0x4, 0x3, 0x1e, 0x2c, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp={0x44, 0xc, 0x72, 0x0, 0x0, [0x6, 0x1]}, @rr={0x7, 0xb, 0x46, [@remote, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xf4, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x4008044) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="4b000000020000000b"], 0x36f0516f) 58.795778914s ago: executing program 4 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 58.128868469s ago: executing program 4 (id=1151): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 58.111617521s ago: executing program 4 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0xe, &(0x7f00000029c0)={@link_local={0xb}, @empty, @void, {@generic={0x88f7}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x9, 0x4}}, @union={0x3, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x2, 0x4, 0x81}]}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x8001}}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x61, 0x5f, 0x61, 0x0, 0x5f, 0x61, 0x0, 0x30]}}, &(0x7f0000000040)=""/97, 0x86, 0x61, 0x0, 0xe, 0x10000, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_usbip_server_init(0x2) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") 57.428132879s ago: executing program 4 (id=1161): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20040841) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', './bus'}, 0x9) writev(r7, &(0x7f0000000780)=[{&(0x7f00000003c0)="1b0247a1", 0x4}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0xff, 0x0, 0x7, 0x510, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0xffffffffffffbfff}, 0x120, 0x10000, 0x33f8, 0x1, 0xb, 0x20007, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 56.927201188s ago: executing program 4 (id=1164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0xa, 0x2, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911061000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40}, 0x94) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r2, 0x303, 0x4, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f00000008c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@jqfmt_vfsold}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") utimes(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 56.576044343s ago: executing program 4 (id=1169): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) 56.557278055s ago: executing program 33 (id=1169): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) 2.597081834s ago: executing program 6 (id=2184): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x20000000000000d5, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r10}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2.251135898s ago: executing program 6 (id=2192): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000f7009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r1, &(0x7f0000000080)="240000001e005f0214fffffffffffff807000000010000000000007bc8801ff2176e8bf2", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.176076505s ago: executing program 0 (id=2194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) unshare(0x22020400) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x3f000000, 0x0, 0x0) 2.175162395s ago: executing program 0 (id=2196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 2.138448399s ago: executing program 0 (id=2197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) 2.084509485s ago: executing program 0 (id=2198): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x2}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 2.058231567s ago: executing program 6 (id=2199): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000740)=""/208, 0xd0}], 0x2, &(0x7f0000000900)=""/191, 0xbf}, 0x7f}, {{&(0x7f0000000b40)=@pptp, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000bc0)=""/120, 0x78}, {&(0x7f0000000c40)=""/141, 0x8d}, {&(0x7f0000000d00)=""/68, 0x44}], 0x3, &(0x7f0000000d80)=""/121, 0x79}, 0x200}, {{&(0x7f0000000e00)=@tipc=@id, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/105, 0x69}], 0x2, &(0x7f0000000f80)=""/19, 0x13}, 0xffff3a0c}, {{&(0x7f0000000fc0)=@nl=@unspec, 0x80, &(0x7f0000001340)=[{&(0x7f0000001040)=""/165, 0xa5}, {&(0x7f0000001100)=""/231, 0xe7}, {&(0x7f0000001240)=""/26, 0x1a}, {&(0x7f0000001280)=""/93, 0x5d}, {&(0x7f0000001300)=""/14, 0xe}], 0x5}, 0xfffffffe}, {{&(0x7f00000013c0)=@sco, 0x80, &(0x7f0000002780)=[{&(0x7f0000001440)=""/87, 0x57}, {&(0x7f00000014c0)=""/204, 0xcc}, {&(0x7f00000015c0)=""/237, 0xed}, {&(0x7f00000016c0)=""/140, 0x8c}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x5, &(0x7f0000002800)=""/205, 0xcd}, 0xbf60}, {{&(0x7f0000002900)=@alg, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002980)=""/16, 0x10}, {&(0x7f00000029c0)=""/21, 0x15}, {&(0x7f0000002a00)=""/33, 0x21}, {&(0x7f0000002a40)=""/196, 0xc4}, {&(0x7f0000002b40)=""/240, 0xf0}], 0x5, &(0x7f0000002cc0)=""/101, 0x65}, 0x3}, {{&(0x7f0000002d40)=@phonet, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/174, 0xae}, 0x7}, {{&(0x7f0000002ec0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002f40)=""/4096, 0x1000}], 0x1, &(0x7f0000003f80)=""/188, 0xbc}, 0x6}, {{&(0x7f0000004040)=@nfc_llcp, 0x80, &(0x7f0000004300)=[{&(0x7f00000040c0)=""/25, 0x19}, {&(0x7f0000004100)=""/85, 0x55}, {&(0x7f0000004180)=""/40, 0x28}, {&(0x7f00000041c0)=""/151, 0x97}, {&(0x7f00000042c0)=""/3, 0x3}], 0x5, &(0x7f0000004380)=""/2, 0x2}}, {{&(0x7f00000043c0)=@caif, 0x80, &(0x7f0000005740)=[{&(0x7f0000004440)=""/39, 0x27}, {&(0x7f0000004480)=""/112, 0x70}, {&(0x7f0000004500)=""/40, 0x28}, {&(0x7f0000004540)=""/65, 0x41}, {&(0x7f00000045c0)=""/187, 0xbb}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/141, 0x8d}], 0x7, &(0x7f00000057c0)=""/4096, 0x1000}, 0x800}], 0xa, 0x40002120, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x600) 1.996247013s ago: executing program 0 (id=2200): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.956500427s ago: executing program 0 (id=2201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) 1.62814691s ago: executing program 1 (id=2205): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) 1.555459437s ago: executing program 1 (id=2206): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setuid(0xee01) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000004f001f0000000000ffdbdf2502000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1.432252989s ago: executing program 1 (id=2208): pipe2$9p(&(0x7f0000001900), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES8=r1], &(0x7f00000007c0)=""/199, 0xdb, 0xc7, 0x1, 0x8, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x1000000, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x2000000000}, 0x18) 1.124301409s ago: executing program 3 (id=2211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) 926.728289ms ago: executing program 1 (id=2212): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 915.19773ms ago: executing program 6 (id=2213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 864.682075ms ago: executing program 6 (id=2214): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 863.218615ms ago: executing program 3 (id=2215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpgid(0x0, 0x0) 824.456509ms ago: executing program 3 (id=2216): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r1, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r1, r1, 0x0) 710.12811ms ago: executing program 3 (id=2217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 631.298758ms ago: executing program 3 (id=2218): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setuid(0xee01) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000004f001f0000000000ffdbdf2502000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 598.675551ms ago: executing program 3 (id=2219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x401, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000300)={{r3}, 0x8, &(0x7f0000000040)=[0x4, 0x4, 0x4, 0x2, 0x97, 0x9, 0xd899, 0x545], 0x0, 0x2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) dup2(r0, r4) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) 236.947897ms ago: executing program 5 (id=2221): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 226.679348ms ago: executing program 1 (id=2222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="a46033fb894f7f6cab72c72c5e431e1c96377ba5466750bd"], 0x20}}, 0x0) 190.714712ms ago: executing program 5 (id=2223): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 150.431445ms ago: executing program 5 (id=2224): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r1, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r1, r1, 0x0) 136.402927ms ago: executing program 1 (id=2225): pipe2$9p(&(0x7f0000001900), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES8=r1], &(0x7f00000007c0)=""/199, 0xdb, 0xc7, 0x1, 0x8, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x1000000, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x2000000000}, 0x18) 55.578995ms ago: executing program 5 (id=2226): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000010000)=@sack_info={0x0, 0x3, 0x40}, &(0x7f0000010040)=0xc) 1.25665ms ago: executing program 5 (id=2227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="a46033fb894f7f6cab72c72c5e431e1c96377ba5466750bd"], 0x20}}, 0x0) 616.11µs ago: executing program 6 (id=2228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, r2, 0x0) 0s ago: executing program 5 (id=2229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): unevictable:15416 dirty:488 writeback:0 [ 142.466389][ T7859] slab_reclaimable:3443 slab_unreclaimable:19115 [ 142.466389][ T7859] mapped:30191 shmem:264 pagetables:1057 [ 142.466389][ T7859] sec_pagetables:0 bounce:0 [ 142.466389][ T7859] kernel_misc_reclaimable:0 [ 142.466389][ T7859] free:1786308 free_pcp:57402 free_cma:0 [ 142.466479][ T7859] Node 0 active_anon:16588kB inactive_anon:52kB active_file:35836kB inactive_file:42140kB unevictable:61664kB isolated(anon):0kB isolated(file):0kB mapped:120764kB dirty:1952kB writeback:0kB shmem:1056kB kernel_stack:3296kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.466610][ T7859] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.466763][ T7859] lowmem_reserve[]: 0 2883 7862 7862 [ 142.466790][ T7859] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 142.466898][ T7859] lowmem_reserve[]: 0 0 4978 4978 [ 142.466929][ T7859] Node 0 Normal free:4180716kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16588kB inactive_anon:52kB active_file:35836kB inactive_file:42140kB unevictable:61664kB writepending:1952kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:226092kB local_pcp:160280kB free_cma:0kB [ 142.467152][ T7859] lowmem_reserve[]: 0 0 0 0 [ 142.467185][ T7859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.467412][ T7859] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB [ 142.467637][ T7859] Node 0 Normal: 4550*4kB (UME) 1200*8kB (UM) 798*16kB (UME) 477*32kB (ME) 324*64kB (UM) 158*128kB (UME) 39*256kB (UME) 5*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 993*4096kB (UM) = 4180760kB [ 142.467938][ T7859] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 142.467960][ T7859] 35200 total pagecache pages [ 142.467979][ T7859] 2 pages in swap cache [ 142.467986][ T7859] Free swap = 124988kB [ 142.467994][ T7859] Total swap = 124996kB [ 142.468055][ T7859] 2097051 pages RAM [ 142.468106][ T7859] 0 pages HighMem/MovableOnly [ 142.468114][ T7859] 80479 pages reserved [ 142.522067][ T7869] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.524136][ T7895] loop5: detected capacity change from 0 to 512 [ 143.534373][ T7898] netlink: 'syz.0.1452': attribute type 7 has an invalid length. [ 143.542191][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 143.557284][ T7895] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.570650][ T7899] loop6: detected capacity change from 0 to 2048 [ 143.592664][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1451'. [ 143.615349][ T7904] syz!: rxe_newlink: already configured on team_slave_0 [ 143.740698][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 143.740715][ T29] audit: type=1326 audit(1760576538.440:14864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 143.770669][ T29] audit: type=1326 audit(1760576538.440:14865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 143.801307][ T7911] loop3: detected capacity change from 0 to 1024 [ 143.823131][ T7911] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1456: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 143.853144][ T29] audit: type=1326 audit(1760576538.550:14866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 143.876822][ T29] audit: type=1326 audit(1760576538.550:14867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 143.901386][ T29] audit: type=1326 audit(1760576538.560:14868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 143.924957][ T29] audit: type=1326 audit(1760576538.560:14869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 143.948518][ T29] audit: type=1326 audit(1760576538.560:14870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 143.950147][ T7911] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1456: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 143.972063][ T29] audit: type=1326 audit(1760576538.560:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 144.012027][ T29] audit: type=1326 audit(1760576538.560:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 144.035564][ T29] audit: type=1326 audit(1760576538.560:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.5.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373cc6eec9 code=0x7ffc0000 [ 144.134053][ T7923] FAULT_INJECTION: forcing a failure. [ 144.134053][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.147358][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.6.1461 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.147434][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.147447][ T7923] Call Trace: [ 144.147454][ T7923] [ 144.147462][ T7923] __dump_stack+0x1d/0x30 [ 144.147487][ T7923] dump_stack_lvl+0xe8/0x140 [ 144.147512][ T7923] dump_stack+0x15/0x1b [ 144.147529][ T7923] should_fail_ex+0x265/0x280 [ 144.147567][ T7923] should_fail+0xb/0x20 [ 144.147598][ T7923] should_fail_usercopy+0x1a/0x20 [ 144.147622][ T7923] _copy_from_user+0x1c/0xb0 [ 144.147671][ T7923] memdup_user+0x5e/0xd0 [ 144.147701][ T7923] sctp_getsockopt_connectx3+0x173/0x300 [ 144.147731][ T7923] sctp_getsockopt+0x910/0xaa0 [ 144.147759][ T7923] sock_common_getsockopt+0x60/0x70 [ 144.147924][ T7923] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 144.148026][ T7923] do_sock_getsockopt+0x200/0x240 [ 144.148062][ T7923] __x64_sys_getsockopt+0x11e/0x1a0 [ 144.148193][ T7923] x64_sys_call+0x2bca/0x3000 [ 144.148215][ T7923] do_syscall_64+0xd2/0x200 [ 144.148243][ T7923] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.148275][ T7923] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.148375][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.148435][ T7923] RIP: 0033:0x7f2e67a7eec9 [ 144.148454][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.148476][ T7923] RSP: 002b:00007f2e664df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 144.148499][ T7923] RAX: ffffffffffffffda RBX: 00007f2e67cd5fa0 RCX: 00007f2e67a7eec9 [ 144.148512][ T7923] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 144.148524][ T7923] RBP: 00007f2e664df090 R08: 00002000000007c0 R09: 0000000000000000 [ 144.148536][ T7923] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.148586][ T7923] R13: 00007f2e67cd6038 R14: 00007f2e67cd5fa0 R15: 00007ffc73fe6188 [ 144.148612][ T7923] [ 144.485835][ T7942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7942 comm=syz.5.1469 [ 144.688974][ T7963] loop3: detected capacity change from 0 to 512 [ 144.692719][ T7959] loop5: detected capacity change from 0 to 512 [ 144.696090][ T7963] EXT4-fs: Ignoring removed i_version option [ 144.707596][ T7963] EXT4-fs: Ignoring removed bh option [ 144.711559][ T7959] EXT4-fs: Ignoring removed i_version option [ 144.719090][ T7959] EXT4-fs: Ignoring removed bh option [ 144.732690][ T7959] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.754516][ T7963] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.833600][ T7978] loop3: detected capacity change from 0 to 512 [ 144.842392][ T7978] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.016389][ T7992] blktrace: Concurrent blktraces are not allowed on sg0 [ 145.039155][ T7992] loop3: detected capacity change from 0 to 512 [ 145.049105][ T7992] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.056921][ T7992] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1490: bad orphan inode 13 [ 145.067320][ T7992] ext4_test_bit(bit=12, block=18) = 1 [ 145.072759][ T7992] is_bad_inode(inode)=0 [ 145.076991][ T7992] NEXT_ORPHAN(inode)=2130706432 [ 145.081932][ T7992] max_ino=32 [ 145.085153][ T7992] i_nlink=1 [ 145.091829][ T7992] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 145.114653][ T8006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8006 comm=syz.0.1495 [ 145.128150][ T7992] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1490: bg 0: block 248: padding at end of block bitmap is not set [ 145.157995][ T8009] syzkaller0: entered allmulticast mode [ 145.158790][ T7992] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1490: Failed to acquire dquot type 1 [ 145.179223][ T8009] syzkaller0: entered promiscuous mode [ 145.192130][ T7992] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.223725][ T8013] loop0: detected capacity change from 0 to 512 [ 145.241181][ T8013] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.307439][ T8016] loop6: detected capacity change from 0 to 2048 [ 145.342279][ T8001] syzkaller0 (unregistering): left allmulticast mode [ 145.349276][ T8001] syzkaller0 (unregistering): left promiscuous mode [ 145.426786][ T8030] loop0: detected capacity change from 0 to 512 [ 145.436367][ T8030] EXT4-fs: Ignoring removed orlov option [ 145.442563][ T8030] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 145.453244][ T8030] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1502: corrupted in-inode xattr: e_value size too large [ 145.500423][ T8030] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1502: couldn't read orphan inode 15 (err -117) [ 145.867672][ T8045] netlink: 'syz.6.1509': attribute type 7 has an invalid length. [ 145.875520][ T8045] __nla_validate_parse: 6 callbacks suppressed [ 145.875534][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1509'. [ 146.064237][ T8054] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1512'. [ 146.544732][ T8072] blktrace: Concurrent blktraces are not allowed on sg0 [ 146.583553][ T8072] loop3: detected capacity change from 0 to 512 [ 146.612238][ T8072] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.635067][ T8072] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1520: bad orphan inode 13 [ 146.678689][ T8072] ext4_test_bit(bit=12, block=18) = 1 [ 146.684171][ T8072] is_bad_inode(inode)=0 [ 146.688391][ T8072] NEXT_ORPHAN(inode)=2130706432 [ 146.693285][ T8072] max_ino=32 [ 146.696579][ T8072] i_nlink=1 [ 146.776932][ T8072] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 146.832122][ T8072] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1520: bg 0: block 248: padding at end of block bitmap is not set [ 146.861049][ T8072] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1520: Failed to acquire dquot type 1 [ 146.898869][ T8072] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.017614][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1521'. [ 147.037829][ T8079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8079 comm=syz.0.1521 [ 147.100833][ T8082] hub 9-0:1.0: USB hub found [ 147.109800][ T8082] hub 9-0:1.0: 8 ports detected [ 147.121328][ T8084] loop3: detected capacity change from 0 to 512 [ 147.133442][ T8083] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1525'. [ 147.152775][ T8084] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1522: corrupted in-inode xattr: invalid ea_ino [ 147.188478][ T8084] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1522: couldn't read orphan inode 15 (err -117) [ 147.237084][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1528'. [ 147.247980][ T8089] loop0: detected capacity change from 0 to 512 [ 147.254499][ T8089] EXT4-fs: Ignoring removed i_version option [ 147.260608][ T8089] EXT4-fs: Ignoring removed bh option [ 147.286961][ T8098] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8098 comm=syz.6.1528 [ 147.292324][ T8089] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.353471][ T8104] blktrace: Concurrent blktraces are not allowed on sg0 [ 147.395967][ T8104] loop3: detected capacity change from 0 to 512 [ 147.416689][ T8107] blktrace: Concurrent blktraces are not allowed on sg0 [ 147.439525][ T8109] loop0: detected capacity change from 0 to 512 [ 147.447469][ T8104] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.451514][ T8107] loop6: detected capacity change from 0 to 512 [ 147.457013][ T8104] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1530: bad orphan inode 13 [ 147.470725][ T8109] EXT4-fs: Ignoring removed orlov option [ 147.482223][ T8109] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 147.492792][ T8104] ext4_test_bit(bit=12, block=18) = 1 [ 147.498201][ T8104] is_bad_inode(inode)=0 [ 147.502413][ T8104] NEXT_ORPHAN(inode)=2130706432 [ 147.507343][ T8104] max_ino=32 [ 147.510574][ T8104] i_nlink=1 [ 147.514235][ T8107] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.524208][ T8109] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1532: corrupted in-inode xattr: e_value size too large [ 147.539361][ T8107] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1533: bad orphan inode 13 [ 147.559343][ T8109] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1532: couldn't read orphan inode 15 (err -117) [ 147.571586][ T8107] ext4_test_bit(bit=12, block=18) = 1 [ 147.577063][ T8107] is_bad_inode(inode)=0 [ 147.581239][ T8107] NEXT_ORPHAN(inode)=2130706432 [ 147.586172][ T8107] max_ino=32 [ 147.589461][ T8107] i_nlink=1 [ 147.607517][ T8104] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 147.627332][ T8107] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 147.638337][ T8109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1532'. [ 147.648628][ T8104] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1530: bg 0: block 248: padding at end of block bitmap is not set [ 147.696326][ T8104] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1530: Failed to acquire dquot type 1 [ 147.696661][ T8107] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1533: bg 0: block 248: padding at end of block bitmap is not set [ 147.746821][ T8104] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.750309][ T8107] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1533: Failed to acquire dquot type 1 [ 147.775685][ T8107] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.905044][ T8118] loop6: detected capacity change from 0 to 2048 [ 148.578008][ T8127] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1537'. [ 148.712709][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 148.712728][ T29] audit: type=1326 audit(1760577311.609:15193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.796826][ T29] audit: type=1326 audit(1760577311.609:15194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.820412][ T29] audit: type=1326 audit(1760577311.609:15195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.843982][ T29] audit: type=1326 audit(1760577311.609:15196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.867595][ T29] audit: type=1326 audit(1760577311.609:15197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.891164][ T29] audit: type=1326 audit(1760577311.609:15198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.914788][ T29] audit: type=1326 audit(1760577311.609:15199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.938276][ T29] audit: type=1326 audit(1760577311.609:15200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.962006][ T29] audit: type=1326 audit(1760577311.609:15201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 148.985701][ T29] audit: type=1326 audit(1760577311.704:15202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1fa9eec9 code=0x7ffc0000 [ 149.172823][ T8138] netlink: 'syz.3.1542': attribute type 16 has an invalid length. [ 149.180708][ T8138] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1542'. [ 149.272655][ T8143] vhci_hcd: invalid port number 65 [ 149.277914][ T8143] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 149.601395][ T8147] program syz.0.1545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.661123][ T2592] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.363559][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'. [ 150.793906][ T8170] loop3: detected capacity change from 0 to 1024 [ 150.804292][ T8170] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1554: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 150.874980][ T8170] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1554: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 150.923284][ T8175] netlink: 'syz.1.1556': attribute type 7 has an invalid length. [ 150.931044][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 150.990064][ T8177] hub 9-0:1.0: USB hub found [ 150.994749][ T8177] hub 9-0:1.0: 8 ports detected [ 151.080594][ T8185] loop3: detected capacity change from 0 to 512 [ 151.088288][ T8189] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 151.094663][ T8185] EXT4-fs: Ignoring removed i_version option [ 151.100925][ T8185] EXT4-fs: Ignoring removed bh option [ 151.152306][ T8185] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.236890][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1564'. [ 151.272736][ T8196] netlink: 'syz.1.1565': attribute type 16 has an invalid length. [ 151.280610][ T8196] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1565'. [ 151.336364][ T8204] netlink: 'syz.1.1569': attribute type 7 has an invalid length. [ 151.344177][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 151.418293][ T8210] 9pnet_fd: p9_fd_create_tcp (8210): problem connecting socket to 127.0.0.1 [ 151.445915][ T8214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8214 comm=syz.3.1574 [ 151.511810][ T8220] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1577'. [ 151.556978][ T8221] syzkaller0: entered allmulticast mode [ 151.570649][ T8221] syzkaller0: entered promiscuous mode [ 151.603712][ T8223] loop3: detected capacity change from 0 to 2048 [ 151.614433][ T3503] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.618187][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 151.710483][ T8215] syzkaller0: left promiscuous mode [ 151.715888][ T8215] syzkaller0: left allmulticast mode [ 151.841587][ T8234] 9pnet: Could not find request transport: fd [ 153.908288][ T8342] __dump_stack+0x1d/0x30 [ 153.908382][ T8342] dump_stack_lvl+0xe8/0x140 [ 153.908462][ T8342] dump_stack+0x15/0x1b [ 153.908484][ T8342] should_fail_ex+0x265/0x280 [ 153.908528][ T8342] should_failslab+0x8c/0xb0 [ 153.908612][ T8342] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 153.908650][ T8342] ? __alloc_skb+0x101/0x320 [ 153.908679][ T8342] __alloc_skb+0x101/0x320 [ 153.908773][ T8342] netlink_alloc_large_skb+0xbf/0xf0 [ 153.908800][ T8342] netlink_sendmsg+0x3cf/0x6b0 [ 153.908841][ T8342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.908929][ T8342] __sock_sendmsg+0x145/0x180 [ 153.908956][ T8342] ____sys_sendmsg+0x31e/0x4e0 [ 153.909029][ T8342] ___sys_sendmsg+0x17b/0x1d0 [ 153.909078][ T8342] __x64_sys_sendmsg+0xd4/0x160 [ 153.909111][ T8342] x64_sys_call+0x191e/0x3000 [ 153.909180][ T8342] do_syscall_64+0xd2/0x200 [ 153.909211][ T8342] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.909239][ T8342] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.909262][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.909333][ T8342] RIP: 0033:0x7f2e67a7eec9 [ 153.909348][ T8342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.909371][ T8342] RSP: 002b:00007f2e664be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.909432][ T8342] RAX: ffffffffffffffda RBX: 00007f2e67cd6090 RCX: 00007f2e67a7eec9 [ 153.909445][ T8342] RDX: 0000000004000094 RSI: 0000200000000480 RDI: 0000000000000003 [ 153.909457][ T8342] RBP: 00007f2e664be090 R08: 0000000000000000 R09: 0000000000000000 [ 153.909469][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.909481][ T8342] R13: 00007f2e67cd6128 R14: 00007f2e67cd6090 R15: 00007ffc73fe6188 [ 153.909511][ T8342] [ 154.206980][ T8345] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 154.287222][ T8350] loop0: detected capacity change from 0 to 2048 [ 154.397570][ T8354] loop5: detected capacity change from 0 to 512 [ 154.454936][ T8354] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1627: corrupted in-inode xattr: invalid ea_ino [ 154.525307][ T8354] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1627: couldn't read orphan inode 15 (err -117) [ 154.787963][ T8377] loop5: detected capacity change from 0 to 512 [ 154.812561][ T8377] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.857548][ T8380] syz!: rxe_newlink: already configured on team_slave_0 [ 154.994567][ T8391] loop0: detected capacity change from 0 to 512 [ 155.007202][ T8391] EXT4-fs: Ignoring removed orlov option [ 155.018632][ T8391] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 155.037196][ T8391] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1640: corrupted in-inode xattr: e_value size too large [ 155.043923][ T8398] vhci_hcd: invalid port number 65 [ 155.056591][ T8398] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 155.073406][ T8391] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1640: couldn't read orphan inode 15 (err -117) [ 155.099108][ T8400] vhci_hcd: invalid port number 65 [ 155.104424][ T8400] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 155.113437][ T36] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec [ 155.364439][ T8412] FAULT_INJECTION: forcing a failure. [ 155.364439][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.377574][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.5.1648 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.377606][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.377634][ T8412] Call Trace: [ 155.377641][ T8412] [ 155.377648][ T8412] __dump_stack+0x1d/0x30 [ 155.377670][ T8412] dump_stack_lvl+0xe8/0x140 [ 155.377693][ T8412] dump_stack+0x15/0x1b [ 155.377708][ T8412] should_fail_ex+0x265/0x280 [ 155.377751][ T8412] should_fail+0xb/0x20 [ 155.377815][ T8412] should_fail_usercopy+0x1a/0x20 [ 155.377840][ T8412] _copy_from_iter+0xd2/0xe80 [ 155.377866][ T8412] ? __build_skb_around+0x1ab/0x200 [ 155.377960][ T8412] ? __alloc_skb+0x223/0x320 [ 155.377992][ T8412] netlink_sendmsg+0x471/0x6b0 [ 155.378029][ T8412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.378086][ T8412] __sock_sendmsg+0x145/0x180 [ 155.378169][ T8412] ____sys_sendmsg+0x31e/0x4e0 [ 155.378220][ T8412] ___sys_sendmsg+0x17b/0x1d0 [ 155.378325][ T8412] __x64_sys_sendmsg+0xd4/0x160 [ 155.378362][ T8412] x64_sys_call+0x191e/0x3000 [ 155.378384][ T8412] do_syscall_64+0xd2/0x200 [ 155.378454][ T8412] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.378504][ T8412] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 155.378532][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.378623][ T8412] RIP: 0033:0x7f373cc6eec9 [ 155.378641][ T8412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.378665][ T8412] RSP: 002b:00007f373b6d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.378689][ T8412] RAX: ffffffffffffffda RBX: 00007f373cec5fa0 RCX: 00007f373cc6eec9 [ 155.378705][ T8412] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000005 [ 155.378721][ T8412] RBP: 00007f373b6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.378733][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.378775][ T8412] R13: 00007f373cec6038 R14: 00007f373cec5fa0 R15: 00007ffe93ad4928 [ 155.378810][ T8412] [ 155.612169][ T8414] netlink: 'syz.5.1649': attribute type 16 has an invalid length. [ 155.668476][ T8418] loop5: detected capacity change from 0 to 512 [ 155.720298][ T8418] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.743775][ T8422] 9pnet: Could not find request transport: fd [ 160.286073][ T8635] __dump_stack+0x1d/0x30 [ 160.286141][ T8635] dump_stack_lvl+0xe8/0x140 [ 160.286161][ T8635] dump_stack+0x15/0x1b [ 160.286177][ T8635] should_fail_ex+0x265/0x280 [ 160.286260][ T8635] should_failslab+0x8c/0xb0 [ 160.286288][ T8635] kmem_cache_alloc_noprof+0x50/0x480 [ 160.286324][ T8635] ? security_file_alloc+0x32/0x100 [ 160.286359][ T8635] security_file_alloc+0x32/0x100 [ 160.286460][ T8635] init_file+0x5c/0x1d0 [ 160.286493][ T8635] alloc_empty_file+0x8b/0x200 [ 160.286637][ T8635] path_openat+0x68/0x2170 [ 160.286696][ T8635] ? _parse_integer_limit+0x170/0x190 [ 160.286755][ T8635] ? _parse_integer+0x27/0x40 [ 160.286847][ T8635] ? kstrtoull+0x111/0x140 [ 160.286889][ T8635] ? kstrtouint+0x76/0xc0 [ 160.286932][ T8635] do_filp_open+0x109/0x230 [ 160.287015][ T8635] do_sys_openat2+0xa6/0x110 [ 160.287056][ T8635] __x64_sys_creat+0x65/0x90 [ 160.287082][ T8635] x64_sys_call+0x2da3/0x3000 [ 160.287126][ T8635] do_syscall_64+0xd2/0x200 [ 160.287160][ T8635] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.287190][ T8635] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.287220][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.287249][ T8635] RIP: 0033:0x7f2e67a7eec9 [ 160.287269][ T8635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.287336][ T8635] RSP: 002b:00007f2e664df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 160.287359][ T8635] RAX: ffffffffffffffda RBX: 00007f2e67cd5fa0 RCX: 00007f2e67a7eec9 [ 160.287371][ T8635] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0 [ 160.287384][ T8635] RBP: 00007f2e664df090 R08: 0000000000000000 R09: 0000000000000000 [ 160.287396][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.287413][ T8635] R13: 00007f2e67cd6038 R14: 00007f2e67cd5fa0 R15: 00007ffc73fe6188 [ 160.287440][ T8635] [ 160.551387][ T8641] netlink: 'syz.0.1736': attribute type 2 has an invalid length. [ 160.602597][ T8647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8647 comm=syz.6.1738 [ 160.735293][ T8651] loop5: detected capacity change from 0 to 512 [ 160.762018][ T8651] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 160.852869][ T8659] loop3: detected capacity change from 0 to 512 [ 160.875391][ T8659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.891190][ T8666] vhci_hcd: invalid port number 65 [ 160.896341][ T8666] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 160.908356][ T8659] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.426767][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.677917][ T8682] 9pnet: Could not find request transport: fd [ 161.700844][ T8685] __dump_stack+0x1d/0x30 [ 161.700871][ T8685] dump_stack_lvl+0xe8/0x140 [ 161.700898][ T8685] dump_stack+0x15/0x1b [ 161.700979][ T8685] should_fail_ex+0x265/0x280 [ 161.701014][ T8685] should_fail+0xb/0x20 [ 161.701052][ T8685] should_fail_usercopy+0x1a/0x20 [ 161.701079][ T8685] _copy_from_user+0x1c/0xb0 [ 161.701126][ T8685] memdup_user+0x5e/0xd0 [ 161.701158][ T8685] strndup_user+0x68/0xb0 [ 161.701242][ T8685] perf_ioctl+0x58a/0x12e0 [ 161.701270][ T8685] ? ioctl_has_perm+0x289/0x2a0 [ 161.701310][ T8685] ? do_vfs_ioctl+0x866/0xe10 [ 161.701336][ T8685] ? selinux_file_ioctl+0x308/0x3a0 [ 161.701396][ T8685] ? __fget_files+0x184/0x1c0 [ 161.701438][ T8685] ? __pfx_perf_ioctl+0x10/0x10 [ 161.701508][ T8685] __se_sys_ioctl+0xce/0x140 [ 161.701533][ T8685] __x64_sys_ioctl+0x43/0x50 [ 161.701563][ T8685] x64_sys_call+0x1816/0x3000 [ 161.701591][ T8685] do_syscall_64+0xd2/0x200 [ 161.701621][ T8685] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 161.701657][ T8685] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 161.701688][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.701852][ T8685] RIP: 0033:0x7f373cc6eec9 [ 161.701871][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.701895][ T8685] RSP: 002b:00007f373b6d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.702000][ T8685] RAX: ffffffffffffffda RBX: 00007f373cec5fa0 RCX: 00007f373cc6eec9 [ 161.702017][ T8685] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000005 [ 161.702033][ T8685] RBP: 00007f373b6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.702050][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.702066][ T8685] R13: 00007f373cec6038 R14: 00007f373cec5fa0 R15: 00007ffe93ad4928 [ 161.702092][ T8685] [ 161.913725][ T8670] 9pnet_fd: p9_fd_create_tcp (8670): problem connecting socket to 127.0.0.1 [ 162.057428][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 162.078891][ T8705] hub 9-0:1.0: USB hub found [ 162.084624][ T8705] hub 9-0:1.0: 8 ports detected [ 162.155692][ T8713] vhci_hcd: invalid port number 65 [ 162.160861][ T8713] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 162.165326][ T8715] netlink: 'syz.1.1766': attribute type 16 has an invalid length. [ 162.177495][ T8715] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1766'. [ 162.287316][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 162.507263][ T8731] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 162.577993][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 162.681886][ T8725] FAULT_INJECTION: forcing a failure. [ 162.681886][ T8725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.695247][ T8725] CPU: 1 UID: 0 PID: 8725 Comm: syz.0.1769 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.695282][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.695368][ T8725] Call Trace: [ 162.695374][ T8725] [ 162.695381][ T8725] __dump_stack+0x1d/0x30 [ 162.695404][ T8725] dump_stack_lvl+0xe8/0x140 [ 162.695569][ T8725] dump_stack+0x15/0x1b [ 162.695591][ T8725] should_fail_ex+0x265/0x280 [ 162.695637][ T8725] should_fail_alloc_page+0xf2/0x100 [ 162.695676][ T8725] __alloc_frozen_pages_noprof+0xff/0x360 [ 162.695780][ T8725] alloc_pages_mpol+0xb3/0x260 [ 162.695800][ T8725] folio_alloc_mpol_noprof+0x39/0x80 [ 162.695826][ T8725] shmem_get_folio_gfp+0x3cf/0xd60 [ 162.695916][ T8725] shmem_fallocate+0x57c/0x840 [ 162.696012][ T8725] vfs_fallocate+0x3b6/0x400 [ 162.696047][ T8725] __x64_sys_fallocate+0x7a/0xd0 [ 162.696084][ T8725] x64_sys_call+0x2518/0x3000 [ 162.696114][ T8725] do_syscall_64+0xd2/0x200 [ 162.696145][ T8725] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.696172][ T8725] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.696213][ T8725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.696312][ T8725] RIP: 0033:0x7f2e3affeec9 [ 162.696331][ T8725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.696356][ T8725] RSP: 002b:00007f2e39a46038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 162.696381][ T8725] RAX: ffffffffffffffda RBX: 00007f2e3b256090 RCX: 00007f2e3affeec9 [ 162.696399][ T8725] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000003 [ 162.696415][ T8725] RBP: 00007f2e39a46090 R08: 0000000000000000 R09: 0000000000000000 [ 162.696475][ T8725] R10: 0000000000801afd R11: 0000000000000246 R12: 0000000000000001 [ 162.696492][ T8725] R13: 00007f2e3b256128 R14: 00007f2e3b256090 R15: 00007ffea76e8248 [ 162.696518][ T8725] [ 163.042957][ T8755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8755 comm=syz.0.1785 [ 163.128717][ T8759] 9pnet: Could not find request transport: fd [ 169.275540][ T9057] __dump_stack+0x1d/0x30 [ 169.275567][ T9057] dump_stack_lvl+0xe8/0x140 [ 169.275592][ T9057] dump_stack+0x15/0x1b [ 169.275614][ T9057] should_fail_ex+0x265/0x280 [ 169.275735][ T9057] should_failslab+0x8c/0xb0 [ 169.275770][ T9057] kmem_cache_alloc_noprof+0x50/0x480 [ 169.275796][ T9057] ? copy_signal+0x53/0x360 [ 169.275917][ T9057] copy_signal+0x53/0x360 [ 169.276082][ T9057] copy_process+0xcde/0x2000 [ 169.276128][ T9057] kernel_clone+0x16c/0x5c0 [ 169.276165][ T9057] ? vfs_write+0x7e8/0x960 [ 169.276197][ T9057] __x64_sys_clone+0xe6/0x120 [ 169.276352][ T9057] x64_sys_call+0x119c/0x3000 [ 169.276381][ T9057] do_syscall_64+0xd2/0x200 [ 169.276412][ T9057] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.276446][ T9057] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.276518][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.276547][ T9057] RIP: 0033:0x7f2e67a7eec9 [ 169.276565][ T9057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.276589][ T9057] RSP: 002b:00007f2e664defe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 169.276639][ T9057] RAX: ffffffffffffffda RBX: 00007f2e67cd5fa0 RCX: 00007f2e67a7eec9 [ 169.276721][ T9057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004080b000 [ 169.276737][ T9057] RBP: 00007f2e664df090 R08: 0000000000000000 R09: 0000000000000000 [ 169.276753][ T9057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 169.276809][ T9057] R13: 00007f2e67cd6038 R14: 00007f2e67cd5fa0 R15: 00007ffc73fe6188 [ 169.276830][ T9057] [ 169.537957][ T9062] loop3: detected capacity change from 0 to 512 [ 169.554793][ T9062] EXT4-fs: Ignoring removed orlov option [ 169.565819][ T9062] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 169.594028][ T9062] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1904: corrupted in-inode xattr: e_value size too large [ 169.612186][ T9062] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1904: couldn't read orphan inode 15 (err -117) [ 169.641200][ T9062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.715346][ T9067] binfmt_misc: register: failed to install interpreter file ./file0 [ 170.104685][ T10] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 60 sec [ 170.113415][ T10] page_pool_release_retry() stalled pool shutdown: id 50, 1 inflight 60 sec [ 170.336443][ T9082] loop6: detected capacity change from 0 to 512 [ 170.410464][ T9082] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1912: corrupted in-inode xattr: invalid ea_ino [ 170.426274][ T9082] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1912: couldn't read orphan inode 15 (err -117) [ 170.455119][ T9082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.468656][ T9025] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 170.528712][ T9085] FAULT_INJECTION: forcing a failure. [ 170.528712][ T9085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.541842][ T9085] CPU: 1 UID: 0 PID: 9085 Comm: syz.5.1913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.541875][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 170.541886][ T9085] Call Trace: [ 170.541892][ T9085] [ 170.541899][ T9085] __dump_stack+0x1d/0x30 [ 170.541920][ T9085] dump_stack_lvl+0xe8/0x140 [ 170.541967][ T9085] dump_stack+0x15/0x1b [ 170.541986][ T9085] should_fail_ex+0x265/0x280 [ 170.542065][ T9085] should_fail+0xb/0x20 [ 170.542114][ T9085] should_fail_usercopy+0x1a/0x20 [ 170.542138][ T9085] _copy_to_user+0x20/0xa0 [ 170.542166][ T9085] simple_read_from_buffer+0xb5/0x130 [ 170.542197][ T9085] proc_fail_nth_read+0x10e/0x150 [ 170.542229][ T9085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.542260][ T9085] vfs_read+0x1a8/0x770 [ 170.542286][ T9085] ? __rcu_read_unlock+0x4f/0x70 [ 170.542333][ T9085] ? __fget_files+0x184/0x1c0 [ 170.542359][ T9085] ksys_read+0xda/0x1a0 [ 170.542389][ T9085] __x64_sys_read+0x40/0x50 [ 170.542416][ T9085] x64_sys_call+0x27c0/0x3000 [ 170.542442][ T9085] do_syscall_64+0xd2/0x200 [ 170.542617][ T9085] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.542646][ T9085] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.542667][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.542767][ T9085] RIP: 0033:0x7f373cc6d8dc [ 170.542785][ T9085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 170.542806][ T9085] RSP: 002b:00007f373b6d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.542828][ T9085] RAX: ffffffffffffffda RBX: 00007f373cec5fa0 RCX: 00007f373cc6d8dc [ 170.542840][ T9085] RDX: 000000000000000f RSI: 00007f373b6d70a0 RDI: 0000000000000006 [ 170.542911][ T9085] RBP: 00007f373b6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.542926][ T9085] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 170.542941][ T9085] R13: 00007f373cec6038 R14: 00007f373cec5fa0 R15: 00007ffe93ad4928 [ 170.542992][ T9085] [ 170.944512][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 170.955557][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.072256][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.088301][ T9097] loop5: detected capacity change from 0 to 1024 [ 171.111326][ T9097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.178141][ T9097] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1919: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 171.223981][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'. [ 171.236334][ T9106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1922'. [ 171.250930][ T9106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9106 comm=syz.3.1922 [ 171.303960][ T9097] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1919: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 171.345203][ T5865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.368984][ T9109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9109 comm=syz.3.1924 [ 171.384933][ T9111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9111 comm=syz.5.1925 [ 171.515199][ T9118] hub 9-0:1.0: USB hub found [ 171.544577][ T9118] hub 9-0:1.0: 8 ports detected [ 171.591331][ T9124] vhci_hcd: invalid port number 65 [ 171.596485][ T9124] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 171.605637][ T9126] vhci_hcd: invalid port number 65 [ 171.610799][ T9126] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 171.755857][ T9134] loop5: detected capacity change from 0 to 1024 [ 171.773278][ T9134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.816945][ T9134] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1935: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 171.928710][ T9134] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1935: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 171.958688][ T9145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9145 comm=syz.3.1938 [ 172.004143][ T5865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.199124][ T9155] random: crng reseeded on system resumption [ 172.488469][ T9160] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 172.498415][ T9160] gretap1: entered allmulticast mode [ 172.547337][ T9177] loop5: detected capacity change from 0 to 1024 [ 172.560172][ T9175] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.567476][ T9177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.594571][ T9177] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1950: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 172.666725][ T9177] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1950: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 172.666923][ T9175] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.706329][ T5865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.732067][ T9184] loop5: detected capacity change from 0 to 512 [ 172.742662][ T9184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.755513][ T9184] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.756395][ T9175] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.787856][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1951'. [ 172.808428][ T5865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.826729][ T9175] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.867232][ T381] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.878197][ T381] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.890054][ T381] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.901592][ T381] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.087810][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'. [ 173.122424][ T9209] loop6: detected capacity change from 0 to 1024 [ 173.132233][ T9209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.147075][ T9209] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1962: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 173.187007][ T9210] loop5: detected capacity change from 0 to 512 [ 173.201102][ T9217] netlink: 'syz.3.1965': attribute type 7 has an invalid length. [ 173.206504][ T9210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.208875][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 173.223112][ T9210] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.236031][ T9209] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1962: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 173.286009][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.301288][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 173.301306][ T29] audit: type=1326 audit(1760579641.597:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2073eec9 code=0x7ffc0000 [ 173.331105][ T29] audit: type=1326 audit(1760579641.597:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2073eec9 code=0x7ffc0000 [ 173.365345][ T29] audit: type=1326 audit(1760579641.608:16287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 173.388910][ T29] audit: type=1326 audit(1760579641.608:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 173.412493][ T29] audit: type=1326 audit(1760579641.608:16289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 173.436229][ T29] audit: type=1326 audit(1760579641.608:16290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 173.459836][ T29] audit: type=1326 audit(1760579641.608:16291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 173.483429][ T29] audit: type=1326 audit(1760579641.608:16292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 173.507120][ T29] audit: type=1326 audit(1760579641.650:16293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 173.530632][ T29] audit: type=1326 audit(1760579641.650:16294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 173.657768][ T9241] 9pnet: Could not find request transport: fd [ 174.918573][ T9324] __dump_stack+0x1d/0x30 [ 174.918601][ T9324] dump_stack_lvl+0xe8/0x140 [ 174.918628][ T9324] dump_stack+0x15/0x1b [ 174.918724][ T9324] should_fail_ex+0x265/0x280 [ 174.918841][ T9324] ? kobject_uevent_env+0x1c0/0x570 [ 174.918884][ T9324] should_failslab+0x8c/0xb0 [ 174.918949][ T9324] __kmalloc_cache_noprof+0x4c/0x4a0 [ 174.919053][ T9324] ? kobject_put+0x10b/0x190 [ 174.919082][ T9324] kobject_uevent_env+0x1c0/0x570 [ 174.919118][ T9324] ? device_pm_check_callbacks+0x683/0x6a0 [ 174.919155][ T9324] kobject_uevent+0x1d/0x30 [ 174.919242][ T9324] device_del+0x710/0x790 [ 174.919269][ T9324] serio_destroy_port+0x293/0x340 [ 174.919306][ T9324] ? device_release_driver_internal+0x4b9/0x4e0 [ 174.919365][ T9324] serio_unregister_port+0xe1/0x130 [ 174.919432][ T9324] serport_ldisc_read+0x2cd/0x300 [ 174.919457][ T9324] ? __pfx_autoremove_wake_function+0x10/0x10 [ 174.919543][ T9324] tty_read+0x154/0x4a0 [ 174.919581][ T9324] ? __import_iovec+0x428/0x540 [ 174.919628][ T9324] do_iter_readv_writev+0x4a1/0x540 [ 174.919660][ T9324] vfs_readv+0x1ea/0x690 [ 174.919723][ T9324] do_readv+0xe7/0x210 [ 174.919823][ T9324] __x64_sys_readv+0x45/0x50 [ 174.919854][ T9324] x64_sys_call+0x29fc/0x3000 [ 174.919953][ T9324] do_syscall_64+0xd2/0x200 [ 174.919993][ T9324] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.920022][ T9324] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.920083][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.920107][ T9324] RIP: 0033:0x7f0b2073eec9 [ 174.920122][ T9324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.920195][ T9324] RSP: 002b:00007f0b1f1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 174.920252][ T9324] RAX: ffffffffffffffda RBX: 00007f0b20995fa0 RCX: 00007f0b2073eec9 [ 174.920266][ T9324] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 174.920282][ T9324] RBP: 00007f0b1f1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 174.920298][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.920312][ T9324] R13: 00007f0b20996038 R14: 00007f0b20995fa0 R15: 00007ffecfe6f8e8 [ 174.920394][ T9324] [ 175.208458][ T9336] vhci_hcd: invalid port number 65 [ 175.213714][ T9336] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 175.283620][ T9343] binfmt_misc: register: failed to install interpreter file ./file0 [ 175.304074][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.362812][ T9349] netlink: 'syz.0.2009': attribute type 7 has an invalid length. [ 175.370622][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 175.419801][ T9358] hub 9-0:1.0: USB hub found [ 175.424534][ T9358] hub 9-0:1.0: 8 ports detected [ 175.519584][ T9368] wireguard0: entered promiscuous mode [ 175.525338][ T9368] wireguard0: entered allmulticast mode [ 175.555642][ T9360] loop6: detected capacity change from 0 to 512 [ 175.563832][ T9360] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.2015: corrupted in-inode xattr: invalid ea_ino [ 175.577494][ T9360] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2015: couldn't read orphan inode 15 (err -117) [ 175.590191][ T9360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.620079][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.725769][ T9377] syzkaller0: entered allmulticast mode [ 175.731836][ T9377] syzkaller0: entered promiscuous mode [ 175.751807][ T9377] syzkaller0 (unregistering): left allmulticast mode [ 175.758638][ T9377] syzkaller0 (unregistering): left promiscuous mode [ 175.837994][ T9378] loop5: detected capacity change from 0 to 512 [ 175.864577][ T9378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.882924][ T9378] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.116547][ T9385] Driver unsupported XDP return value 0 on prog (id 1745) dev N/A, expect packet loss! [ 176.168209][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'. [ 176.191504][ T9395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.251390][ T9398] loop6: detected capacity change from 0 to 1024 [ 176.261937][ T9398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.277321][ T9398] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.2026: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 176.351813][ T9398] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.2026: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 176.506707][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.525786][ T9417] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 176.582595][ T9423] loop3: detected capacity change from 0 to 512 [ 176.582682][ T5865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.599161][ T9423] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.641042][ T9423] EXT4-fs (loop3): 1 truncate cleaned up [ 176.647154][ T9423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.745612][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.799117][ T9443] loop6: detected capacity change from 0 to 1024 [ 176.806002][ T9448] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 176.828656][ T9443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.865943][ T9443] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.2046: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 176.899808][ T9456] FAULT_INJECTION: forcing a failure. [ 176.899808][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 176.900483][ T9435] FAULT_INJECTION: forcing a failure. [ 176.900483][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 176.912493][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.3.2051 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.912577][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.912594][ T9456] Call Trace: [ 176.912604][ T9456] [ 176.912613][ T9456] __dump_stack+0x1d/0x30 [ 176.912640][ T9456] dump_stack_lvl+0xe8/0x140 [ 176.912722][ T9456] dump_stack+0x15/0x1b [ 176.912743][ T9456] should_fail_ex+0x265/0x280 [ 176.912789][ T9456] should_failslab+0x8c/0xb0 [ 176.912854][ T9456] __kmalloc_noprof+0xa5/0x570 [ 176.912897][ T9456] ? sel_write_create+0x19b/0x4f0 [ 176.912947][ T9456] sel_write_create+0x19b/0x4f0 [ 176.913012][ T9456] selinux_transaction_write+0xc6/0x110 [ 176.913057][ T9456] ? __pfx_selinux_transaction_write+0x10/0x10 [ 176.913102][ T9456] vfs_write+0x269/0x960 [ 176.913205][ T9456] ? __rcu_read_unlock+0x4f/0x70 [ 176.913300][ T9456] ? __fget_files+0x184/0x1c0 [ 176.913337][ T9456] ksys_write+0xda/0x1a0 [ 176.913368][ T9456] __x64_sys_write+0x40/0x50 [ 176.913399][ T9456] x64_sys_call+0x2802/0x3000 [ 176.913426][ T9456] do_syscall_64+0xd2/0x200 [ 176.913479][ T9456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 176.913514][ T9456] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 176.913602][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.913629][ T9456] RIP: 0033:0x7f0b2073eec9 [ 176.913649][ T9456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.913674][ T9456] RSP: 002b:00007f0b1f1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.913748][ T9456] RAX: ffffffffffffffda RBX: 00007f0b20995fa0 RCX: 00007f0b2073eec9 [ 176.913764][ T9456] RDX: 000000000000005c RSI: 0000200000000300 RDI: 0000000000000006 [ 176.913780][ T9456] RBP: 00007f0b1f1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.913796][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.913883][ T9456] R13: 00007f0b20996038 R14: 00007f0b20995fa0 R15: 00007ffecfe6f8e8 [ 176.913909][ T9456] [ 177.058409][ T9443] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.2046: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 177.074058][ T9435] CPU: 0 UID: 0 PID: 9435 Comm: syz.5.2041 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.074155][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.074175][ T9435] Call Trace: [ 177.074185][ T9435] [ 177.074197][ T9435] __dump_stack+0x1d/0x30 [ 177.074233][ T9435] dump_stack_lvl+0xe8/0x140 [ 177.074260][ T9435] dump_stack+0x15/0x1b [ 177.074284][ T9435] should_fail_ex+0x265/0x280 [ 177.074334][ T9435] should_failslab+0x8c/0xb0 [ 177.074377][ T9435] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 177.074486][ T9435] ? sidtab_sid2str_get+0xa0/0x130 [ 177.074609][ T9435] kmemdup_noprof+0x2b/0x70 [ 177.074657][ T9435] sidtab_sid2str_get+0xa0/0x130 [ 177.074759][ T9435] security_sid_to_context_core+0x1eb/0x2e0 [ 177.074800][ T9435] security_sid_to_context+0x27/0x40 [ 177.074837][ T9435] avc_audit_post_callback+0x9d/0x520 [ 177.074961][ T9435] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 177.075008][ T9435] common_lsm_audit+0x1bb/0x230 [ 177.075042][ T9435] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 177.075091][ T9435] slow_avc_audit+0x104/0x140 [ 177.075234][ T9435] avc_has_perm+0x13a/0x180 [ 177.075355][ T9435] file_has_perm+0x35c/0x3a0 [ 177.075400][ T9435] selinux_file_permission+0x2f0/0x320 [ 177.075469][ T9435] security_file_permission+0x3e/0x80 [ 177.075507][ T9435] rw_verify_area+0x8d/0x160 [ 177.075545][ T9435] aio_write+0x19d/0x410 [ 177.075605][ T9435] io_submit_one+0xacd/0x11d0 [ 177.075717][ T9435] __se_sys_io_submit+0xfb/0x280 [ 177.075762][ T9435] __x64_sys_io_submit+0x43/0x50 [ 177.075858][ T9435] x64_sys_call+0x2d6c/0x3000 [ 177.075889][ T9435] do_syscall_64+0xd2/0x200 [ 177.075924][ T9435] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.075963][ T9435] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.076038][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.076070][ T9435] RIP: 0033:0x7f373cc6eec9 [ 177.076092][ T9435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.076118][ T9435] RSP: 002b:00007f373b6d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 177.076145][ T9435] RAX: ffffffffffffffda RBX: 00007f373cec5fa0 RCX: 00007f373cc6eec9 [ 177.076158][ T9435] RDX: 0000200000000240 RSI: 0000000000000001 RDI: 00007f373b672000 [ 177.076231][ T9435] RBP: 00007f373b6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.076249][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.076266][ T9435] R13: 00007f373cec6038 R14: 00007f373cec5fa0 R15: 00007ffe93ad4928 [ 177.076294][ T9435] [ 177.439417][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.520122][ T9480] netlink: 'syz.3.2062': attribute type 7 has an invalid length. [ 177.527760][ T9482] loop6: detected capacity change from 0 to 512 [ 177.527903][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 177.540062][ T9482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.560449][ T9482] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.602115][ T9489] FAULT_INJECTION: forcing a failure. [ 177.602115][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 177.614902][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.5.2065 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.614933][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.614949][ T9489] Call Trace: [ 177.614956][ T9489] [ 177.614964][ T9489] __dump_stack+0x1d/0x30 [ 177.615016][ T9489] dump_stack_lvl+0xe8/0x140 [ 177.615036][ T9489] dump_stack+0x15/0x1b [ 177.615090][ T9489] should_fail_ex+0x265/0x280 [ 177.615187][ T9489] should_failslab+0x8c/0xb0 [ 177.615265][ T9489] __kmalloc_node_noprof+0xaa/0x580 [ 177.615300][ T9489] ? qdisc_alloc+0x65/0x440 [ 177.615400][ T9489] qdisc_alloc+0x65/0x440 [ 177.615435][ T9489] qdisc_create_dflt+0x7f/0x2d0 [ 177.615465][ T9489] taprio_init+0x286/0x5f0 [ 177.615552][ T9489] ? __pfx_taprio_init+0x10/0x10 [ 177.615593][ T9489] qdisc_create+0x591/0x9e0 [ 177.615618][ T9489] tc_modify_qdisc+0xf2e/0x1420 [ 177.615681][ T9489] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 177.615708][ T9489] rtnetlink_rcv_msg+0x65a/0x6d0 [ 177.615808][ T9489] netlink_rcv_skb+0x123/0x220 [ 177.615851][ T9489] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.615965][ T9489] rtnetlink_rcv+0x1c/0x30 [ 177.615997][ T9489] netlink_unicast+0x5c0/0x690 [ 177.616032][ T9489] netlink_sendmsg+0x58b/0x6b0 [ 177.616107][ T9489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.616147][ T9489] __sock_sendmsg+0x145/0x180 [ 177.616175][ T9489] ____sys_sendmsg+0x31e/0x4e0 [ 177.616219][ T9489] ___sys_sendmsg+0x17b/0x1d0 [ 177.616294][ T9489] __x64_sys_sendmsg+0xd4/0x160 [ 177.616338][ T9489] x64_sys_call+0x191e/0x3000 [ 177.616366][ T9489] do_syscall_64+0xd2/0x200 [ 177.616396][ T9489] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.616464][ T9489] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.616489][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.616590][ T9489] RIP: 0033:0x7f373cc6eec9 [ 177.616609][ T9489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.616633][ T9489] RSP: 002b:00007f373b6d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.616758][ T9489] RAX: ffffffffffffffda RBX: 00007f373cec5fa0 RCX: 00007f373cc6eec9 [ 177.616774][ T9489] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 177.616848][ T9489] RBP: 00007f373b6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.616860][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.616872][ T9489] R13: 00007f373cec6038 R14: 00007f373cec5fa0 R15: 00007ffe93ad4928 [ 177.616891][ T9489] [ 177.907190][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 177.924299][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2058'. [ 177.952956][ T9497] loop0: detected capacity change from 0 to 1024 [ 177.980111][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.003466][ T9497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.033791][ T9497] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.2068: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 178.122967][ T9497] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.2068: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 178.209257][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.306964][ T9522] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 178.356390][ T9528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9528 comm=syz.6.2081 [ 178.370872][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2081'. [ 178.432146][ T9533] loop6: detected capacity change from 0 to 2048 [ 178.454270][ T9533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.499429][ T9535] loop0: detected capacity change from 0 to 512 [ 178.517607][ T9535] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.2084: corrupted in-inode xattr: invalid ea_ino [ 178.539476][ T9535] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2084: couldn't read orphan inode 15 (err -117) [ 178.564448][ T9535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.619452][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.656628][ T9541] loop0: detected capacity change from 0 to 512 [ 178.673288][ T9541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.699972][ T9541] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.748410][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 178.748428][ T29] audit: type=1326 audit(1760579647.340:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3affeec9 code=0x7ffc0000 [ 178.750975][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'. [ 178.754729][ T29] audit: type=1326 audit(1760579647.340:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e3affeec9 code=0x7ffc0000 [ 178.810441][ T29] audit: type=1326 audit(1760579647.340:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3affeec9 code=0x7ffc0000 [ 178.833952][ T29] audit: type=1326 audit(1760579647.340:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2e3affeec9 code=0x7ffc0000 [ 178.857368][ T29] audit: type=1326 audit(1760579647.340:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3affeec9 code=0x7ffc0000 [ 178.880885][ T29] audit: type=1326 audit(1760579647.340:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2e3affeec9 code=0x7ffc0000 [ 178.905913][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.944416][ T9541] bond2: (slave veth1): Releasing active interface [ 178.980884][ T9546] syzkaller0: entered allmulticast mode [ 178.997610][ T29] audit: type=1326 audit(1760579647.604:16428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3affeec9 code=0x7ffc0000 [ 179.021206][ T29] audit: type=1326 audit(1760579647.604:16429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3affeec9 code=0x7ffc0000 [ 179.065364][ T9546] syzkaller0: entered promiscuous mode [ 179.072338][ T9550] syzkaller0 (unregistering): left allmulticast mode [ 179.079105][ T9550] syzkaller0 (unregistering): left promiscuous mode [ 179.108767][ T9524] 9pnet_fd: p9_fd_create_tcp (9524): problem connecting socket to 127.0.0.1 [ 179.245218][ T29] audit: type=1326 audit(1760579647.868:16430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.6.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 179.268830][ T29] audit: type=1326 audit(1760579647.868:16431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.6.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e67a7eec9 code=0x7ffc0000 [ 179.301642][ T9547] loop3: detected capacity change from 0 to 512 [ 179.349732][ T9565] vlan2: entered allmulticast mode [ 179.361554][ T9547] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.450859][ T9565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2094'. [ 179.519953][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 179.645260][ T9588] vhci_hcd: invalid port number 65 [ 179.650495][ T9588] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 179.912390][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2109'. [ 179.915573][ T9601] syz_tun: entered promiscuous mode [ 180.099600][ T9620] loop5: detected capacity change from 0 to 2048 [ 180.812704][ T9651] netlink: 'syz.0.2129': attribute type 3 has an invalid length. [ 180.820520][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 180.936823][ T9659] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 181.190814][ T9686] loop0: detected capacity change from 0 to 512 [ 181.199974][ T9686] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.240189][ T9691] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 181.251874][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 181.283522][ T9645] 9pnet_fd: p9_fd_create_tcp (9645): problem connecting socket to 127.0.0.1 [ 181.372143][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 181.446384][ T9719] loop3: detected capacity change from 0 to 512 [ 181.473363][ T9719] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.481041][ T9718] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 181.745769][ T9760] syzkaller0: entered allmulticast mode [ 181.760764][ T9761] loop5: detected capacity change from 0 to 512 [ 181.761225][ T9760] syzkaller0: entered promiscuous mode [ 181.774671][ T9761] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2173: corrupted in-inode xattr: invalid ea_ino [ 181.775299][ T9760] syzkaller0 (unregistering): left allmulticast mode [ 181.788750][ T9761] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2173: couldn't read orphan inode 15 (err -117) [ 181.795137][ T9760] syzkaller0 (unregistering): left promiscuous mode [ 182.024840][ T9779] FAULT_INJECTION: forcing a failure. [ 182.024840][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 182.037562][ T9779] CPU: 1 UID: 0 PID: 9779 Comm: syz.3.2183 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.037594][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.037609][ T9779] Call Trace: [ 182.037616][ T9779] [ 182.037624][ T9779] __dump_stack+0x1d/0x30 [ 182.037648][ T9779] dump_stack_lvl+0xe8/0x140 [ 182.037671][ T9779] dump_stack+0x15/0x1b [ 182.037748][ T9779] should_fail_ex+0x265/0x280 [ 182.037787][ T9779] ? audit_log_d_path+0x8d/0x150 [ 182.037821][ T9779] should_failslab+0x8c/0xb0 [ 182.037854][ T9779] __kmalloc_cache_noprof+0x4c/0x4a0 [ 182.037896][ T9779] audit_log_d_path+0x8d/0x150 [ 182.037918][ T9779] audit_log_d_path_exe+0x42/0x70 [ 182.038012][ T9779] audit_log_task+0x1e9/0x250 [ 182.038050][ T9779] audit_seccomp+0x61/0x100 [ 182.038095][ T9779] ? __seccomp_filter+0x82d/0x1250 [ 182.038132][ T9779] __seccomp_filter+0x83e/0x1250 [ 182.038162][ T9779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.038196][ T9779] ? vfs_write+0x7e8/0x960 [ 182.038249][ T9779] ? __rcu_read_unlock+0x4f/0x70 [ 182.038277][ T9779] ? __rcu_read_unlock+0x4f/0x70 [ 182.038307][ T9779] __secure_computing+0x82/0x150 [ 182.038346][ T9779] syscall_trace_enter+0xcf/0x1e0 [ 182.038490][ T9779] do_syscall_64+0xac/0x200 [ 182.038518][ T9779] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.038577][ T9779] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 182.038619][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.038654][ T9779] RIP: 0033:0x7f0b2073d8dc [ 182.038669][ T9779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.038689][ T9779] RSP: 002b:00007f0b1f1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.038710][ T9779] RAX: ffffffffffffffda RBX: 00007f0b20995fa0 RCX: 00007f0b2073d8dc [ 182.038723][ T9779] RDX: 000000000000000f RSI: 00007f0b1f1a70a0 RDI: 0000000000000005 [ 182.038804][ T9779] RBP: 00007f0b1f1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.038823][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.038836][ T9779] R13: 00007f0b20996038 R14: 00007f0b20995fa0 R15: 00007ffecfe6f8e8 [ 182.038900][ T9779] [ 182.276196][ T9726] 9pnet_fd: p9_fd_create_tcp (9726): problem connecting socket to 127.0.0.1 [ 182.515336][ T9788] loop5: detected capacity change from 0 to 512 [ 182.544120][ T9788] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2187: corrupted in-inode xattr: invalid ea_ino [ 182.570462][ T9788] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2187: couldn't read orphan inode 15 (err -117) [ 182.645165][ T9803] syzkaller0: entered allmulticast mode [ 182.654825][ T9803] syzkaller0: entered promiscuous mode [ 182.669099][ T9803] syzkaller0 (unregistering): left allmulticast mode [ 182.676000][ T9803] syzkaller0 (unregistering): left promiscuous mode [ 182.778809][ T9815] 9pnet: Could not find request transport: fd 0x0800000432000000 [ 188.334059][ T3598] [ 188.336375][ T3598] Reported by Kernel Concurrency Sanitizer on: [ 188.342518][ T3598] CPU: 1 UID: 0 PID: 3598 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.352333][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.362739][ T3598] Workqueue: events debugfs_reap_work [ 188.368130][ T3598] ================================================================== [ 188.424509][ T2592] hsr_slave_0: left promiscuous mode [ 188.430403][ T2592] hsr_slave_1: left promiscuous mode [ 188.435983][ T2592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.443378][ T2592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.452534][ T2592] hsr_slave_0: left promiscuous mode [ 188.458165][ T2592] hsr_slave_1: left promiscuous mode [ 188.463607][ T2592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.470995][ T2592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.480620][ T2592] hsr_slave_0: left promiscuous mode [ 188.486391][ T2592] hsr_slave_1: left promiscuous mode [ 188.492104][ T2592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.499519][ T2592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.507090][ T2592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.514481][ T2592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.526714][ T2592] veth1_macvtap: left promiscuous mode [ 188.532285][ T2592] veth0_macvtap: left promiscuous mode [ 188.537855][ T2592] veth1_vlan: left promiscuous mode [ 188.543088][ T2592] veth0_vlan: left promiscuous mode [ 188.548724][ T2592] team_slave_0: left promiscuous mode [ 188.554128][ T2592] team_slave_1: left promiscuous mode [ 188.559519][ T2592] dummy0: left allmulticast mode [ 188.564607][ T2592] veth1_macvtap: left promiscuous mode [ 188.570083][ T2592] veth0_macvtap: left promiscuous mode [ 188.575609][ T2592] veth1_vlan: left promiscuous mode [ 188.581084][ T2592] veth0_vlan: left promiscuous mode [ 188.586993][ T2592] veth1_macvtap: left promiscuous mode [ 188.592505][ T2592] veth0_macvtap: left promiscuous mode [ 188.598013][ T2592] veth1_vlan: left promiscuous mode [ 188.603258][ T2592] veth0_vlan: left promiscuous mode [ 188.742160][ T2592] team0 (unregistering): Port device team_slave_1 removed [ 188.751656][ T2592] team0 (unregistering): Port device team_slave_0 removed [ 188.795713][ T2592] pim6reg (unregistering): left allmulticast mode [ 188.834903][ T2592] team0 (unregistering): Port device team_slave_1 removed [ 188.844223][ T2592] team0 (unregistering): Port device team_slave_0 removed [ 188.897360][ T2592] team0 (unregistering): Port device team_slave_1 removed [ 188.906833][ T2592] team0 (unregistering): Port device team_slave_0 removed