last executing test programs: 34.875059559s ago: executing program 2 (id=1219): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000004c0), 0x0, 0x5e7, &(0x7f0000000600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unshare(0x24040000) unshare(0x2c020400) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="f25ace399ade483dbcf0d36e93b794ea5179d7ca2c44bee8c6ccdd4cda888f06b56dc1021b7afe18b8a3da5e393d40300ccbfe6b582a6ef71de2019768903e1330a19283df9f256fd2c86986132b9b9bb2d5329e6d50f2f5f02eecee53485b8e6b1191ad39e05d39b2b28f5916d587e758daeffe81056f4f8d2da1be16e4b9c2b3ad00f8e77f55134609d67b5bccea70b6aef4f51945bd39605da3ba391a5f3a83a946780cc1c60dac43dbfead84de7e05d63eecd086b2318a9045dd2751d76ce65d832ebbc0da2e0c1c2336"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = dup3(r6, r5, 0x0) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0213ba000500"], 0x28}}, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unshare(0x50080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_create(0x1, 0x80000) 34.7749487s ago: executing program 2 (id=1221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3a366d1c952a243b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2003, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 34.709808511s ago: executing program 3 (id=1222): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000300)=0x8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000311827d1c0dbf8695100000690787f0000a91d6207650c54f5a4bb1523194501fd48a897daa45c8170b2a981c9697ed6ff0d9a12440c34bea39a42fff238d115aa0dd399771fe67d790cbb473a79ecfc73c58207b6a789a097a435a29c8f14962a9080ef441a42d0f46794d948c83ae73d3b00f24e221c03392684e3d194981ef759ad5d761e6ffdd69c90671a7e0f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) quotactl$Q_QUOTAON(0xffffffff80000201, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) 34.550341463s ago: executing program 2 (id=1223): syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r0, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff010000000800000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 34.388565845s ago: executing program 2 (id=1224): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$inet(0x2, 0x5, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000001040101000000000000000000000000068b000640000000000a0002000000000000000000"], 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1ff, @mcast2, 0x7fffffff}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000240)={[{@i_version}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x447, &(0x7f0000000500)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x169) write$binfmt_elf64(r6, 0x0, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807ff, @void, @value}, 0x94) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 34.387906565s ago: executing program 1 (id=1225): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@grpquota}, {@noinit_itable}, {@noauto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@stripe}, {}]}, 0x1, 0x4c5, &(0x7f0000000f00)="$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") select(0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000002000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000012000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 34.192590708s ago: executing program 3 (id=1226): socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 34.065542269s ago: executing program 3 (id=1228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x20060a0, &(0x7f0000000d80)=ANY=[], 0x1, 0x7b6, &(0x7f0000001040)="$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") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES16=r1, @ANYRES32=r1, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r5, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r4, r5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac1e0001ac1414aa0b039078240000004500000000000000002f0000ac14140ae0000007"], 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r8, 0x141601) 33.818563933s ago: executing program 3 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000003000), 0x201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c595007400"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="4000000010002c092abd7000eaffffff00ba5003", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb08000c00ee000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000001a80)=[{&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/229, 0xe5}, {&(0x7f0000000700)=""/80, 0x50}], 0x6, &(0x7f0000000400)=[{&(0x7f0000001b00)=""/224, 0xe0}, {&(0x7f0000001c00)=""/100, 0x64}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8000000000000000000000000000aa0000000000000000ac1e00010000000000000000000000007f000001000000000000000000000000e000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000000000000000000000000000010000d84e942f0000000000000a0000bb", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015"], 0x134}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') 33.530904976s ago: executing program 1 (id=1235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x80004, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d6664247266646e6f3d8ad3e8e22bd61b55f6f0127b43d70b4b46a871ff50971ac7674f823aaae4895256b911b1fadc368ecbaccb884b7aa5fafd73ce0fe3b6e353fb4362f8597d7e4160f719b7cd50f316afa77e519b2e69aca10748398f220752b5de6b95225d31c66cbe17c303b7d54438ab68fc118f1f66b97fa3ca3b845cc0a3726113b7f8543ac124f8ba0b9e63adfe909df5d3d271c0c319752a0ea1d2955dbf06c5cca4722143a35618a4c038b9aed9", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,cache=readahead,access=user,noextend,rootcontext=root,fowner<', @ANYRESDEC=r5, @ANYBLOB=',permit_directio,dont_appraise,\x00']) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x820000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) alarm(0x81) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000e2ff00000000000000000018110000", @ANYRESDEC=r0, @ANYRES64=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x18) nanosleep(&(0x7f0000000140), 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket(0x2, 0x80805, 0xfffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 33.308380949s ago: executing program 1 (id=1236): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='b *:* r?'], 0x8) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x3ff, 0x80000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002800)={0x53, 0xfffffffffffffffc, 0x4d, 0x9, @scatter={0x9, 0x0, &(0x7f0000002640)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/231, 0xe7}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000000300)=""/48, 0x30}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)}]}, &(0x7f0000002700)="333c09a124a58236ec7a0ac9ae36e2a604d347fdac9afe03293a77c6a00ddfca4b37832439e8e9fb59244b56b6697ef5c4d72183275f365c9a1543f7554990fdafd84033a4b37f35158dfbdbcd", &(0x7f0000002780)=""/112, 0x5, 0x0, 0x1, &(0x7f0000000380)}) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='b *:* r?'], 0x8) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x3ff, 0x80000) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002800)={0x53, 0xfffffffffffffffc, 0x4d, 0x9, @scatter={0x9, 0x0, &(0x7f0000002640)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/231, 0xe7}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000000300)=""/48, 0x30}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)}]}, &(0x7f0000002700)="333c09a124a58236ec7a0ac9ae36e2a604d347fdac9afe03293a77c6a00ddfca4b37832439e8e9fb59244b56b6697ef5c4d72183275f365c9a1543f7554990fdafd84033a4b37f35158dfbdbcd", &(0x7f0000002780)=""/112, 0x5, 0x0, 0x1, &(0x7f0000000380)}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) 33.164889541s ago: executing program 1 (id=1237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xac2d0a6499305908, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r5, 0x407, 0x6) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x46f5, &(0x7f0000000200)={0x0, 0xe85f, 0x4, 0x2, 0x1ea}, &(0x7f0000000040), &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000540)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@init_itable}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x46a, &(0x7f00000006c0)="$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") pwritev(r6, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) socket(0x2a, 0x5, 0x80000000) 33.095031112s ago: executing program 1 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000001e00)=0x2, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='xprt_reserve\x00', r6}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r12, 0x89ed, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r13}, 0x10) bind$can_raw(r9, &(0x7f0000000080), 0x10) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f0000000100)=0x3) r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r15, 0x4004743d, &(0x7f0000000040)=0x3) epoll_create1(0x0) 32.935667304s ago: executing program 2 (id=1239): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c6, &(0x7f0000000a00)="$eJzs3c1rHGUYAPB3dps0SaP9UKStYAsV6gfN5gNpol48qYeCWPCiUGOyjTWbbMhuahN6SPXWgwdRFMSDd/8CL/ZkEcSz3sWDVLRGUEFYmdndNl+7LprutJnfDyb7zsfu875Znndn3p3ZCUBmHY//RCEMhhC+DSHsr89u3OB4/WHt5uWpeIpCrXb2lyjZLp5vbtp83r4QwmoIoS+E8PLzIbwRbY1bWV6ZnSyViouN+UJ1bqFQWV45dWFucqY4U5wfGT89MTE+PDY6sWNtvfreW1fPfPFi7+d/vHvj+vtffRlXa7Cxbn07dlK96T3h4Lple0IIz96JYCnIN9rTn3ZF+E/i9++BEMKJJP/3h3zybgJZUKvVan/X9rZavVoDdq1csg8c5YZCCPVyLjc0VN+HfzAM5ErlSvXJ8+Wl+en6vvKB0JM7f6FUHG4cKxwIPVE8P5KUb8+PbpofCyHZB/4g35/MD02VS9Pd7eqATfZtyv/f8/X8BzLCIT9kl/yH7JL/kF3yH7JL/kN2yX/Irvb539O1egDd5/Mfskv+Q3bJf8gu+Q+Z9NKZM/FUa17/Pn1xeWm2fPHUdLEyOzS3NDU0VV5cGJopl2eSa3bm/u31SuXywshTYelSoVqsVAuV5ZVzc+Wl+eq55Lr+c0WDiXD3OHjs2vdRCGH16f5kivU21slV2N1qtSikfQ0ykI582h0QkBpDf5BdjvGBzT/Ru3m/oK/VExdujxcC95Zc2hUAUnPyiO//IKuM/0N2Gf+H7LKPD2xzi74N2o3/A/emDsb/B7tRD6D7Blvc/+u+5N5d16Pmvb7uDyF8l+/Z27zXF7Ab5H6KGvv/J/c/uuWzvjf6M/mKoDeE8PYnZz+6NFmtLo7Ey3+9tbz6cWP56LontjxgANLSzNNmHgMA2bV28/JUc+pm3J+fq5+EsDX+nsbYZF/yHeXAWrThXIVoh85dWL0SQji8Xfyocb/z+oHMwFp+S/xDjceo/hJJffck903vTvwj6+I/si7+0f/9X4FsuBb3P8Pb5V8uyelwK/829j+DO3TuROv+L3er/8u36P+OdRjjzU/f+bFl/CshHN02fjNeXxJrc/y4bic7jH/jtVcearWu9ln9dbaL3xSXCtW5hUJleeVU8jtyM8X5kfHTExPjw2OjE4VkjLrQHKne6pnD31xv1/6BFvHbtT9e9niH7f/r4a9fPd4m/mMntn//D7WJ3x9CeKLD+L+N/vB6q3Vx/OkW7c+1iR8vG+swfuXDF/Z2uCkA0AWV5ZXZyVKpuJhSoS+kGV1BIf3ClbujGpsKafdMwJ1WWY4PzeOkT7smAAAAAAAAAAAAQKe6cTpx2m0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgN/gkAAP//wPPUxg==") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) 32.922927834s ago: executing program 3 (id=1240): socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.742440297s ago: executing program 1 (id=1242): socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="6c0000009b6effa4db830539a931c5c3b0cc76362b97c9df51cbd01419d85432bb76407ce7835f766f0b29cafe11aeb6efbdadc141504ce894ab3a7c5b5201738b00125ff840602814ca14066369385d119ec022c443c3a3fedd920996393288e9e9e313d66dc53610bed57d3c0471cbaf6e08762a10b3d61677c5fc3cfe5ee5c6707e8b9df38bbd5219e5939395971df7b53aa1a2ab88c943689ba781f0eca9cee61ca548a81c", @ANYRES16=r9, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3100000000"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 32.741888537s ago: executing program 32 (id=1242): socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="6c0000009b6effa4db830539a931c5c3b0cc76362b97c9df51cbd01419d85432bb76407ce7835f766f0b29cafe11aeb6efbdadc141504ce894ab3a7c5b5201738b00125ff840602814ca14066369385d119ec022c443c3a3fedd920996393288e9e9e313d66dc53610bed57d3c0471cbaf6e08762a10b3d61677c5fc3cfe5ee5c6707e8b9df38bbd5219e5939395971df7b53aa1a2ab88c943689ba781f0eca9cee61ca548a81c", @ANYRES16=r9, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3100000000"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 32.627125668s ago: executing program 2 (id=1245): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@grpquota}, {@noinit_itable}, {@noauto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@stripe}, {}]}, 0x1, 0x4c5, &(0x7f0000000f00)="$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") select(0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000002000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000012000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 32.605469568s ago: executing program 33 (id=1245): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@grpquota}, {@noinit_itable}, {@noauto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@stripe}, {}]}, 0x1, 0x4c5, &(0x7f0000000f00)="$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") select(0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000002000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000012000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 32.527064839s ago: executing program 3 (id=1248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d004d11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 32.526730579s ago: executing program 34 (id=1248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d004d11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 4.045206367s ago: executing program 6 (id=1570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close(r0) 4.009677738s ago: executing program 6 (id=1572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x20060a0, &(0x7f0000000d80)=ANY=[], 0x1, 0x7b6, &(0x7f0000001040)="$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") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES16=r1, @ANYRES32=r1, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r4, r5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffff"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac1e0001ac1414aa0b039078240000004500000000000000002f0000ac14140ae0000007"], 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r7, 0x141601) 3.919975979s ago: executing program 7 (id=1573): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x800) 3.917928349s ago: executing program 7 (id=1574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3a366d1c952a243b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2003, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.85334563s ago: executing program 7 (id=1576): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x25e, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xe9b1, 0x6}, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 3.623284823s ago: executing program 6 (id=1578): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000004c0), 0x0, 0x5e7, &(0x7f0000000600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) unshare(0x24040000) unshare(0x2c020400) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="f25ace399ade483dbcf0d36e93b794ea5179d7ca2c44bee8c6ccdd4cda888f06b56dc1021b7afe18b8a3da5e393d40300ccbfe6b582a6ef71de2019768903e1330a19283df9f256fd2c86986132b9b9bb2d5329e6d50f2f5f02eecee53485b8e6b1191ad39e05d39b2b28f5916d587e758daeffe81056f4f8d2da1be16e4b9c2b3ad00f8e77f55134609d67b5bccea70b6aef4f51945bd39605da3ba391a5f3a83a946780cc1c60dac43dbfead84de7e05d63eecd086b2318a9045dd2751d76ce65d832ebbc0da2e0c1c2336"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = dup3(r6, r5, 0x0) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0213ba000500"], 0x28}}, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unshare(0x50080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_create(0x1, 0x80000) 3.409358466s ago: executing program 7 (id=1579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3a366d1c952a243b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2003, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.256739828s ago: executing program 6 (id=1582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close(r0) 3.159112429s ago: executing program 5 (id=1583): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c6, &(0x7f0000000a00)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000012000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"]) 3.06379871s ago: executing program 7 (id=1585): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) getxattr(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r10], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114600000320600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 3.023110301s ago: executing program 6 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3a366d1c952a243b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2003, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.806902493s ago: executing program 6 (id=1589): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil) brk(0x400000ffc020) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000400000005000700e00000020800020005000000080008"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000940)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64], 0xfe, 0x667, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 2.419161099s ago: executing program 5 (id=1590): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x8}, 0xc4c, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x1) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r0, 0x20, &(0x7f00000011c0)={&(0x7f00000001c0)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=""/203, 0xcb}}, 0x10) 2.418626829s ago: executing program 7 (id=1591): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil) brk(0x400000ffc020) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000400000005000700e00000020800020005000000080008"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000940)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64], 0xfe, 0x667, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1.751304797s ago: executing program 0 (id=1594): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0xd, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="580100001000010000000000fbdbdf25ff0100000000000000000000000000010000000000000000000000000000000100000000000000000000a00000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000007f000001000000000000000000000000be870000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400af0000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="03040000b500000000008aea0000feff"], 0xc8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x4084) 1.690925478s ago: executing program 4 (id=1595): r0 = socket(0x10, 0x803, 0x2) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x11200000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0508000004000000ff0f004d50360007"], 0x48) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x32, 0x7, 0x0, 0x1000, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x9, 0x7, 0x0, 0x81, 0x2, 0x4005, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r4, &(0x7f00000001c0), 0x0, 0xe7c, 0x9d, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file0\x00', 0x80809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2cb, &(0x7f00000018c0)="$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") msgsnd(0x0, 0x0, 0x0, 0xe00) r6 = open(0x0, 0x40c5, 0x130) open$dir(0x0, 0x0, 0x51) write$9p(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x800) mount$9p_fd(0x0, 0x0, 0x0, 0x3201058, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 1.634335129s ago: executing program 4 (id=1596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3a366d1c952a243b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2003, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.602276829s ago: executing program 0 (id=1597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) 1.53967604s ago: executing program 5 (id=1598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x66d0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1e423ceb0ab4912f9f6a3af992968e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f3a1173fb9462d3589e67197f90be6e423ceb0ab0912f9f6a31844ec98e950cfed21fcad7ff0fbcb566a0982f8938caa0600000000000000d56ad59300"}, 0x63, 0xffffffffffffffff) 1.53914765s ago: executing program 0 (id=1599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3a366d1c952a243b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2003, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.53852875s ago: executing program 4 (id=1600): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c6, &(0x7f0000000a00)="$eJzs3c1rHGUYAPB3dps0SaP9UKStYAsV6gfN5gNpol48qYeCWPCiUGOyjTWbbMhuahN6SPXWgwdRFMSDd/8CL/ZkEcSz3sWDVLRGUEFYmdndNl+7LprutJnfDyb7zsfu875Znndn3p3ZCUBmHY//RCEMhhC+DSHsr89u3OB4/WHt5uWpeIpCrXb2lyjZLp5vbtp83r4QwmoIoS+E8PLzIbwRbY1bWV6ZnSyViouN+UJ1bqFQWV45dWFucqY4U5wfGT89MTE+PDY6sWNtvfreW1fPfPFi7+d/vHvj+vtffRlXa7Cxbn07dlK96T3h4Lple0IIz96JYCnIN9rTn3ZF+E/i9++BEMKJJP/3h3zybgJZUKvVan/X9rZavVoDdq1csg8c5YZCCPVyLjc0VN+HfzAM5ErlSvXJ8+Wl+en6vvKB0JM7f6FUHG4cKxwIPVE8P5KUb8+PbpofCyHZB/4g35/MD02VS9Pd7eqATfZtyv/f8/X8BzLCIT9kl/yH7JL/kF3yH7JL/kN2yX/Irvb539O1egDd5/Mfskv+Q3bJf8gu+Q+Z9NKZM/FUa17/Pn1xeWm2fPHUdLEyOzS3NDU0VV5cGJopl2eSa3bm/u31SuXywshTYelSoVqsVAuV5ZVzc+Wl+eq55Lr+c0WDiXD3OHjs2vdRCGH16f5kivU21slV2N1qtSikfQ0ykI582h0QkBpDf5BdjvGBzT/Ru3m/oK/VExdujxcC95Zc2hUAUnPyiO//IKuM/0N2Gf+H7LKPD2xzi74N2o3/A/emDsb/B7tRD6D7Blvc/+u+5N5d16Pmvb7uDyF8l+/Z27zXF7Ab5H6KGvv/J/c/uuWzvjf6M/mKoDeE8PYnZz+6NFmtLo7Ey3+9tbz6cWP56LontjxgANLSzNNmHgMA2bV28/JUc+pm3J+fq5+EsDX+nsbYZF/yHeXAWrThXIVoh85dWL0SQji8Xfyocb/z+oHMwFp+S/xDjceo/hJJffck903vTvwj6+I/si7+0f/9X4FsuBb3P8Pb5V8uyelwK/829j+DO3TuROv+L3er/8u36P+OdRjjzU/f+bFl/CshHN02fjNeXxJrc/y4bic7jH/jtVcearWu9ln9dbaL3xSXCtW5hUJleeVU8jtyM8X5kfHTExPjw2OjE4VkjLrQHKne6pnD31xv1/6BFvHbtT9e9niH7f/r4a9fPd4m/mMntn//D7WJ3x9CeKLD+L+N/vB6q3Vx/OkW7c+1iR8vG+swfuXDF/Z2uCkA0AWV5ZXZyVKpuJhSoS+kGV1BIf3ClbujGpsKafdMwJ1WWY4PzeOkT7smAAAAAAAAAAAAQKe6cTpx2m0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgN/gkAAP//wPPUxg==") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000012000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"]) 1.487075051s ago: executing program 5 (id=1601): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0xfc9e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x0, 0x512, &(0x7f0000000380)="$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") 1.481321971s ago: executing program 0 (id=1602): r0 = socket(0x200000000000011, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x3, &(0x7f0000000380)={0x100000000, 0x6}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) lstat(0x0, 0x0) stat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x200, &(0x7f0000001cc0)="$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") setgid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.395797172s ago: executing program 4 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1.297417823s ago: executing program 0 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000003000), 0x201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c595007400"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="4000000010002c092abd7000eaffffff00ba5003", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb08000c00ee000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000001a80)=[{&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/229, 0xe5}, {&(0x7f0000000700)=""/80, 0x50}], 0x6, &(0x7f0000000400)=[{&(0x7f0000001b00)=""/224, 0xe0}, {&(0x7f0000001c00)=""/100, 0x64}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8000000000000000000000000000aa0000000000000000ac1e00010000000000000000000000007f000001000000000000000000000000e000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000000000000000000000000000010000d84e942f0000000000000a0000bb", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015"], 0x134}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') 1.296376073s ago: executing program 4 (id=1605): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="f8ff001200000000000000001000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) syz_emit_ethernet(0xad, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x77, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}, @md5sig={0x13, 0x12, "38558f16c9ee36ede430060b3000"}]}}, {"b8b78037ec53de15cd70654ec814023de4238c65db93f9562ffcd4f79c0500000078e0bfee9ff2d762059d7cbd1f8e627aa4ec2a84e841c474b8a7516a2bf2a0fa502b5a325917a08ceb67a03a55a7"}}}}}}}, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f00000004c0)="0021ff", 0x3}], 0x1, 0x804, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) 939.837088ms ago: executing program 4 (id=1606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000f70f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r2, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004e40)="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", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70b9f2603356704de3f11ad536ac56c6f09b31d750a398764a2f7b7b27c48446c315fff2cbbe5cec1650a8654e49f14", 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000024c0)="02fe40bab3bac2", 0x7}], 0x1}}], 0x2, 0x8090) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x519, &(0x7f0000000340)="$eJzs3W1rY1kdAPD/TZpuZ6ZrsyoyLri7uCszi07Sbt3dKrK7guirBXV9P9Y2LaVpU5p0nJZBO/gBBBEV/AC+EfwAgsxHEGFA34uKIjqjL3Wu3OQG+5C0oU0ns+nvB6c55z6c/zmX5uY+HO4N4NJ6JSLei4hiRLweETP59EKeYr+TsuUeP7q3lKUk0vSDfySR5NO6dWXliYi4lq82FRHf/FrEd5LjcZu7e+uL9XptOy9XWxtb1ebu3q21jcXV2mptc35+7q2FtxfeXJhNc+fqZzki3vnKX37yw1989Z3ffO67f7z9t5vfy5r1pU902h0RS+cK0Een7lJ7W3Rl22j7IoKNSNafUnHUrQAAYBDZMf5HI+LT7eP/mSi2j+YAAACAcZK+Ox3/SSJSAAAAYGwVImI6kkIlHwswHYVCpdIZw/vxuFqoN5qtz640djaXs3kR5SgVVtbqtdl8rHA5SklWnsvH2HbLbxwpz0fECxHx45kr7XJlqVFfHvXFDwAAALgkrr18+Pz/3zOFdh4AAAAYM+W+BQAAAGBcOOUHAACA8ef8HwAAAMba199/P0tp9z3ey3d2d9Ybd24t15rrlY2dpcpSY3urstporLaf2bdxWn31RmPr87G5c7faqjVb1ebu3u2Nxs5m6/baoVdgAwAAAE/RCy8/+EMSEftfvNJOkT8HEOCQP4+6AcAwFUfdAGBkJkbdAGBkSqcuYQ8B4y45Zf7xwTuda4Xx24tpDwAAMHw3Pnn8/v9kPu/0awPAh5mxPgBw+bi7B5dX6awjAK8PuyXAqHyk8/Fcv/l9H94xwP3/zjWGND1TwwAAgKGZbqekUMmP06ejUKhUIp5vvxaglKys1Wuz+fnB72dKz2XlufaayaljhgEAAAAAAAAAAAAAAAAAAAAAAACAjjRNIgUAAADGWkThr0n7af4RN2Zemz58deDIW79+/sFP7y62WttzEZPJP2eySZMR0fpZPv2N1CsBAAAA4BnQOU/PP+dG3RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxs3jR/eWuulpxv37lyOi3Cv+REy1P6eiFBFX/5XExIH1kogoDiH+/v2IuN4rfhJP0jQt563oFf/KBccvtzdN7/iFiLg2hPhwmT3I9j/v9fr+FeKV9mfv799Ens6ru/+bzMsH43f3f8U++5/nj5T7efHhr6p949+PeHGi9/6nGz/pxD8UIiu8OmAfv/2tvb2eMw5U2Sv+wVjV1sZWtbm7d2ttY3G1tlrbnJ+fe2vh7YU3F2arK2v1Wv63Z5gfferXT07q/9U+8cuH+39s+782UO/T+O/Du48+1imUesW/+Wrv39/rfeIX8t++z+T5bP6Nbn6/kz/opV/+7qWT+r/cp/9Tp/T/5kD9jy+8/o0f/KnnnGNbAwB4Gpq7e+uL9Xpt+4TM1ADLDJwpDqWed4fWnmclE89GM0aVSb/f+X88Xz3nXP1YJj3P6hMxhGZMHvueFuOsFSYR+1ldA/5DAgAAY+b/B/0n3UECAAAAAAAAAAAAAAAAAAAALtIZH0s2FREDL3w05v5ougoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKL/BQAA///w6cuT") creat(&(0x7f00000002c0)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x103a02, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x82203) lsetxattr$security_selinux(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:bsdpty_device_t:s0\x00', 0x25, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x535, &(0x7f0000000a00)="$eJzs3V1rZGcdAPD/OZPZZndTM1WRtWBbbGW36M5sGttGkXYF0QspqPV+jclsCDvJhMykbkLRLH4AQUSFfgBvBD+AIP0IIhT0XlQU0a1eao+cmTOal5lMSCaZOPn94Mk8z3n7/5/DzMl545wALq3nIuJuRJQi4sWImC2Gp0WJ3W7Jp3v/8dtLeUkiy978WxJJMay3rLw9FRHXi9mmI+IbX4n4dnI4bmt758Fio1HfLNq19tpGrbW9c3t1bXGlvlJfn5+fe2Xh1YWXF+5khVP1sxIRr33pTz/+wc++/NqvPvOd39/7y63v5ml94WPdvCNi6VQBBuguu9xZFz35Oto8i2BjkvenXBp3FgAAHEe+j//hiPhkZ/9/NkqdvTkAAABgkmSvz8S/kogMAAAAmFhpRMxEklaLewFmIk2r1e49vB+Na2mj2Wp/+n5za305HxdRiXJ6f7VRv1PcK1yJcpK354p7bHvtlw605yPiqYj40ezVTru61Gwsj/vkBwAAAFwS15/df/z/z9m0UwcAAAAmTGVgAwAAAJgUDvkBAABg8jn+BwAAgIn2tTfeyEvWe4/38lvbWw+ab91errceVNe2lqpLzc2N6kqzudJ5Zt/asOU1ms2Nz8b61sNau95q11rbO/fWmlvr7Xur+16BDQAAAJyjp55993dJROx+/mqnRPEcQOCy+OqVY032xzNPBDhHpXEnAIzN1LgTAMamPHQKWwiYdMmQ8Ydv3umeK4xfn00+AADA6N38+N7r/+90hvUuBg4/NwD8P3OvDwBcPq7uweVVjtKjE814Y+SpAGPyoe7HE4PGD3x4xzGu/3fPMWTZiRIDAABGZqZTkrRa7KfPRJpWqxFPdl4LUE7urzbqd4rjg9/Olp/I23OdOZOh9wwDAAAAAAAAAAAAAAAAAAAAAAAAAF1ZlkTWVxRvBe8/Nsuy8uBRAAAAwEUSkf45KY70b86+MLP/7MCBt3698+ZPHi6225tzEVeSv8/mg65ERPunxfCXMq8EAAAAgAuge5xefM6NOxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJs37j99e6pXzjPvXL0ZEpV/8qZjufE5HOSKu/SOJqT3zJRFRGkH83UcRcaNf/CQ+yLKsUmTRL/7VM45f6aya/vHTiLg+gvhwmb2bb3/u9vv9pfFc57P/72+qKKc1ePuX/nf7Vxqw/XnyQHuQp9/7RW1g/EcRT0/13/704ifd+PtC5I3n80p5eB+/9c2dnb4j9iyyX/y9sWrttY1aa3vn9ura4kp9pb4+Pz/3ysKrCy8v3KndX23Ui799w/zwE7/84Kj+XxsQv7K//4fW/wvDux4RWfz7vYePP9JtHFpbefxbz/f//3ujF7+0P35a/O/7VFHPc7nZq+9263s98/PfPHNU/5cH9H96SP9vHav/8bkXv/79P/Qdc4zvDgAweq3tnQeLjUZ984jK9DGmOefK6xcjjRFW4mKkMa5K9r3u9/F0yznl7Icq2Wlmn4oRpHFl/+80InbjpAtM8pkj4phfSAAAYML8b6f/qCtIAAAAAAAAAAAAAAAAAAAAwFk64WPJpiPiyGnu7lnywZi74+kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCR/hMAAP//PQjHkg==") 140.252838ms ago: executing program 0 (id=1607): socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 70.695099ms ago: executing program 5 (id=1608): r0 = socket(0x10, 0x803, 0x2) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x11200000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0508000004000000ff0f004d50360007"], 0x48) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x32, 0x7, 0x0, 0x1000, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x9, 0x7, 0x0, 0x81, 0x2, 0x4005, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r4, &(0x7f00000001c0), 0x0, 0xe7c, 0x9d, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file0\x00', 0x80809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2cb, &(0x7f00000018c0)="$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") msgsnd(0x0, 0x0, 0x0, 0xe00) r6 = open(0x0, 0x40c5, 0x130) open$dir(0x0, 0x0, 0x51) write$9p(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x800) mount$9p_fd(0x0, 0x0, 0x0, 0x3201058, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 5 (id=1609): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000000000100, 0x14020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x10}, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='ata_eh_link_autopsy\x00', r4, 0x0, 0x7}, 0x18) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x7000, 0xbba, 0x81, 0x1e, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x10, r7) ptrace$setregs(0x15, r7, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) close_range(r5, r6, 0x0) kernel console output (not intermixed with test programs): ounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.427095][ T6934] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.482189][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.505434][ T6947] loop3: detected capacity change from 0 to 512 [ 110.519230][ T6947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.571782][ T6947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.603620][ T6947] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.635314][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.723348][ T6960] loop0: detected capacity change from 0 to 1024 [ 110.748669][ T6960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.797828][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.983875][ T6977] loop4: detected capacity change from 0 to 512 [ 111.108840][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.119860][ T6977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.246718][ T6977] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.558425][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.593541][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 111.619256][ T6990] 9pnet_fd: Insufficient options for proto=fd [ 111.644628][ T6992] loop4: detected capacity change from 0 to 512 [ 111.673349][ T6992] EXT4-fs: Ignoring removed nobh option [ 111.684915][ T6999] loop2: detected capacity change from 0 to 764 [ 111.691276][ T6992] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #4: comm syz.4.1135: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 771, max 4(4), depth 0(0) [ 111.733635][ T6992] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.1135: Bad quota inode: 4, type: 1 [ 111.749941][ T6992] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.766343][ T6992] EXT4-fs (loop4): mount failed [ 111.833934][ T7009] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1141'. [ 111.836608][ T7011] netlink: 'syz.2.1140': attribute type 11 has an invalid length. [ 111.885201][ T7016] loop3: detected capacity change from 0 to 512 [ 111.936852][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.029368][ T7016] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.479374][ T7044] loop2: detected capacity change from 0 to 1024 [ 112.507912][ T7044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.559504][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.563583][ T7049] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1156'. [ 112.716071][ T7065] loop0: detected capacity change from 0 to 764 [ 112.733796][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.942200][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 113.311228][ T7105] loop3: detected capacity change from 0 to 764 [ 113.532632][ T7113] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1176'. [ 113.548585][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1175'. [ 113.566675][ T7115] loop3: detected capacity change from 0 to 1024 [ 113.590066][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.641717][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.738168][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 113.784340][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.793943][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.138379][ T7155] loop3: detected capacity change from 0 to 512 [ 114.162771][ T7155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.176079][ T7155] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.216966][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 114.216983][ T29] audit: type=1326 audit(1745514644.314:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31c7e969 code=0x7ffc0000 [ 114.269571][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.279023][ T29] audit: type=1326 audit(1745514644.314:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31c7e969 code=0x7ffc0000 [ 114.303053][ T29] audit: type=1326 audit(1745514644.314:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbe31c7e969 code=0x7ffc0000 [ 114.327260][ T29] audit: type=1326 audit(1745514644.314:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31c7e969 code=0x7ffc0000 [ 114.351175][ T29] audit: type=1326 audit(1745514644.314:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.1.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31c7e969 code=0x7ffc0000 [ 114.537712][ T7185] __nla_validate_parse: 1 callbacks suppressed [ 114.537732][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 114.771767][ T7197] loop0: detected capacity change from 0 to 512 [ 114.825009][ T7197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.838240][ T7197] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.865942][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.939657][ T7208] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1202'. [ 115.078270][ T7220] ALSA: seq fatal error: cannot create timer (-22) [ 115.172570][ T7226] loop4: detected capacity change from 0 to 128 [ 115.179875][ T7226] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.212206][ T7226] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.343530][ T7233] loop4: detected capacity change from 0 to 512 [ 115.381547][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'. [ 115.475176][ T7233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.488303][ T7233] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.514232][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.554214][ T7245] loop2: detected capacity change from 0 to 1024 [ 115.573059][ T7242] loop0: detected capacity change from 0 to 512 [ 115.573497][ T7245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.617239][ T29] audit: type=1326 audit(1745514645.704:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.2.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bad58e969 code=0x7ffc0000 [ 115.641646][ T29] audit: type=1326 audit(1745514645.704:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.2.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f9bad58e969 code=0x7ffc0000 [ 115.665722][ T29] audit: type=1326 audit(1745514645.704:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.2.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bad58e969 code=0x7ffc0000 [ 115.689697][ T29] audit: type=1326 audit(1745514645.704:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.2.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bad58e969 code=0x7ffc0000 [ 115.728719][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.738569][ T7242] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1218: corrupted inode contents [ 115.754704][ T7242] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.1218: mark_inode_dirty error [ 115.777543][ T7248] loop4: detected capacity change from 0 to 128 [ 115.795348][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 115.821246][ T7242] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1218: corrupted inode contents [ 115.842582][ T7242] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.1218: mark_inode_dirty error [ 115.848488][ T7257] loop3: detected capacity change from 0 to 512 [ 115.870403][ T29] audit: type=1400 audit(1745514645.974:3591): avc: denied { tracepoint } for pid=7247 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 115.888493][ T7242] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1218: Failed to acquire dquot type 0 [ 115.923998][ T7257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.935301][ T7242] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1218: corrupted inode contents [ 115.949241][ T7242] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #16: comm syz.0.1218: mark_inode_dirty error [ 115.950016][ T7262] tipc: Started in network mode [ 115.962576][ T7242] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1218: corrupted inode contents [ 115.965907][ T7262] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 115.981133][ T7242] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1218: mark_inode_dirty error [ 115.989912][ T7262] tipc: Enabled bearer , priority 10 [ 116.041879][ T7257] EXT4-fs (loop3): 1 truncate cleaned up [ 116.049702][ T7242] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1218: corrupted inode contents [ 116.062506][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.079766][ T7242] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 116.092237][ T7242] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1218: corrupted inode contents [ 116.107005][ T7242] EXT4-fs error (device loop0): ext4_truncate:4255: inode #16: comm syz.0.1218: mark_inode_dirty error [ 116.120140][ T7242] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 116.143343][ T7242] EXT4-fs (loop0): 1 truncate cleaned up [ 116.158441][ T7242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.185905][ T7242] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.201719][ T7257] EXT4-fs error (device loop3): __ext4_iget:5025: inode #12: block 2: comm syz.3.1222: invalid block [ 116.216466][ T7257] EXT4-fs (loop3): Remounting filesystem read-only [ 116.238881][ T7242] EXT4-fs error (device loop0): ext4_empty_dir:3118: inode #12: block 13: comm syz.0.1218: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 116.261565][ T7272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1224'. [ 116.292217][ T7270] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:31: Failed to release dquot type 1 [ 116.295172][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1226'. [ 116.338800][ T7277] loop0: detected capacity change from 0 to 512 [ 116.369514][ T7277] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.423130][ T7281] loop3: detected capacity change from 0 to 764 [ 116.501948][ T7286] netlink: 'syz.3.1228': attribute type 11 has an invalid length. [ 116.605373][ T7292] loop4: detected capacity change from 0 to 1024 [ 116.855271][ T7272] loop2: detected capacity change from 0 to 512 [ 116.916742][ T7272] EXT4-fs: Ignoring removed i_version option [ 116.978113][ T880] tipc: Node number set to 4269801488 [ 117.029781][ T7272] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.218263][ T7272] EXT4-fs (loop2): 1 truncate cleaned up [ 117.234193][ T7300] loop4: detected capacity change from 0 to 128 [ 117.253107][ T7300] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.254206][ T7267] pim6reg: entered allmulticast mode [ 117.267397][ T7300] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #2: comm syz.4.1234: No space for directory leaf checksum. Please run e2fsck -D. [ 117.286149][ T7300] EXT4-fs error (device loop4): __ext4_find_entry:1628: inode #2: comm syz.4.1234: checksumming directory block 0 [ 117.711519][ T6995] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.773906][ T5242] bond0: (slave syz_tun): Releasing backup interface [ 117.794464][ T6995] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.795099][ T7330] loop0: detected capacity change from 0 to 764 [ 117.818668][ T7330] netlink: 'syz.0.1244': attribute type 11 has an invalid length. [ 117.871593][ T6995] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.939049][ T6995] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.001551][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 118.269629][ T6995] bridge_slave_1: left allmulticast mode [ 118.275710][ T6995] bridge_slave_1: left promiscuous mode [ 118.281785][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.308540][ T6995] bridge_slave_0: left allmulticast mode [ 118.314358][ T6995] bridge_slave_0: left promiscuous mode [ 118.320140][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.790268][ T6995] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.808246][ T6995] bond_slave_0: left promiscuous mode [ 118.815614][ T6995] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.826361][ T6995] bond_slave_1: left promiscuous mode [ 118.833316][ T6995] $Hÿ (unregistering): Released all slaves [ 118.849645][ T7365] netlink: 'syz.4.1252': attribute type 32 has an invalid length. [ 118.857620][ T7365] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1252'. [ 118.870056][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 118.986561][ T7375] loop0: detected capacity change from 0 to 4096 [ 118.993724][ T6995] hsr_slave_0: left promiscuous mode [ 119.001362][ T6995] hsr_slave_1: left promiscuous mode [ 119.007607][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.015113][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.037805][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.045565][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.055938][ T6995] veth1_macvtap: left promiscuous mode [ 119.067800][ T6995] veth0_macvtap: left promiscuous mode [ 119.103250][ T7381] loop0: detected capacity change from 0 to 512 [ 119.123739][ T6995] team0 (unregistering): Port device team_slave_1 removed [ 119.134913][ T6995] team0 (unregistering): Port device team_slave_0 removed [ 119.144214][ T7381] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.182575][ T7386] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1256'. [ 119.261130][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.268407][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.280037][ T7326] bridge_slave_0: entered allmulticast mode [ 119.287030][ T7326] bridge_slave_0: entered promiscuous mode [ 119.303056][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.310242][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.317807][ T7326] bridge_slave_1: entered allmulticast mode [ 119.324301][ T7326] bridge_slave_1: entered promiscuous mode [ 119.372253][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.391838][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.413450][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 119.477479][ T7326] team0: Port device team_slave_0 added [ 119.516808][ T7326] team0: Port device team_slave_1 added [ 119.555794][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.563039][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.589963][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.602257][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.609354][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.636339][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.665374][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 119.680871][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.688384][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.695746][ T7341] bridge_slave_0: entered allmulticast mode [ 119.702707][ T7341] bridge_slave_0: entered promiscuous mode [ 119.728986][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.736409][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.749167][ T7341] bridge_slave_1: entered allmulticast mode [ 119.756183][ T7341] bridge_slave_1: entered promiscuous mode [ 119.782133][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.807178][ T7326] hsr_slave_0: entered promiscuous mode [ 119.813492][ T7326] hsr_slave_1: entered promiscuous mode [ 119.819657][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.827413][ T7326] Cannot create hsr debugfs directory [ 119.834600][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.869964][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.877503][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.885453][ T7350] bridge_slave_0: entered allmulticast mode [ 119.892964][ T7350] bridge_slave_0: entered promiscuous mode [ 119.910962][ T6995] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.936552][ T7406] loop4: detected capacity change from 0 to 764 [ 119.939576][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.950213][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.958452][ T7350] bridge_slave_1: entered allmulticast mode [ 119.965101][ T7350] bridge_slave_1: entered promiscuous mode [ 119.988330][ T7341] team0: Port device team_slave_0 added [ 119.998392][ T6995] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.002781][ T7407] netlink: 'syz.4.1258': attribute type 11 has an invalid length. [ 120.025995][ T7341] team0: Port device team_slave_1 added [ 120.038341][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.066084][ T6995] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.087042][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.094300][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.120504][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.132961][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.166192][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.173575][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.199634][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.212130][ T6995] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.231362][ T7350] team0: Port device team_slave_0 added [ 120.272319][ T7350] team0: Port device team_slave_1 added [ 120.314948][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.322235][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.348902][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.396720][ T7341] hsr_slave_0: entered promiscuous mode [ 120.405308][ T7341] hsr_slave_1: entered promiscuous mode [ 120.426578][ T7341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.434425][ T7341] Cannot create hsr debugfs directory [ 120.457746][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.465030][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.491319][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.855832][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 120.855868][ T29] audit: type=1326 audit(1745514650.954:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd510a4e969 code=0x7ffc0000 [ 120.900825][ T29] audit: type=1326 audit(1745514651.004:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fd510a4e969 code=0x7ffc0000 [ 121.003898][ T7326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.022664][ T7326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.038001][ T7326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.047760][ T7326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.121474][ T6995] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.138291][ T7425] loop4: detected capacity change from 0 to 512 [ 121.151141][ T7425] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.182782][ T6995] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.202874][ T7430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1264'. [ 121.203576][ T7350] hsr_slave_0: entered promiscuous mode [ 121.234233][ T7350] hsr_slave_1: entered promiscuous mode [ 121.240776][ T7350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.248598][ T7350] Cannot create hsr debugfs directory [ 121.259361][ T6995] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.336077][ T29] audit: type=1326 audit(1745514651.434:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd510a4e969 code=0x7ffc0000 [ 121.349386][ T7435] loop4: detected capacity change from 0 to 764 [ 121.359940][ T29] audit: type=1326 audit(1745514651.434:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd510a4e969 code=0x7ffc0000 [ 121.391513][ T6995] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.402859][ T29] audit: type=1326 audit(1745514651.494:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd510a4e969 code=0x7ffc0000 [ 121.426416][ T29] audit: type=1326 audit(1745514651.494:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd510a4e969 code=0x7ffc0000 [ 121.449955][ T29] audit: type=1326 audit(1745514651.494:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd510a4e969 code=0x7ffc0000 [ 121.475493][ T7437] netlink: 'syz.4.1266': attribute type 11 has an invalid length. [ 121.571141][ T29] audit: type=1326 audit(1745514651.654:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7438 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 121.595301][ T29] audit: type=1326 audit(1745514651.654:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7438 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 121.618983][ T29] audit: type=1326 audit(1745514651.654:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7438 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 121.714676][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.723773][ T7341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.748201][ T7341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.767094][ T7341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.782330][ T6995] bridge_slave_1: left allmulticast mode [ 121.788125][ T6995] bridge_slave_1: left promiscuous mode [ 121.793971][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.821229][ T6995] bridge_slave_0: left allmulticast mode [ 121.827124][ T6995] bridge_slave_0: left promiscuous mode [ 121.832945][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.858906][ T6995] bridge_slave_1: left allmulticast mode [ 121.864722][ T6995] bridge_slave_1: left promiscuous mode [ 121.870572][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.888655][ T6995] bridge_slave_0: left allmulticast mode [ 121.894450][ T6995] bridge_slave_0: left promiscuous mode [ 121.900291][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.140512][ T6995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.150737][ T6995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.169527][ T6995] bond0 (unregistering): Released all slaves [ 122.183584][ T6995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.200133][ T6995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.221528][ T6995] bond0 (unregistering): Released all slaves [ 122.245017][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.261386][ T7341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.286103][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.293319][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.325178][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.332376][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.362245][ T7350] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 122.380128][ T6995] tipc: Disabling bearer [ 122.385304][ T6995] tipc: Left network mode [ 122.392363][ T7326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.403194][ T7326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.454026][ T7350] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 122.465089][ T7350] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 122.475095][ T7350] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 122.505236][ T6995] hsr_slave_0: left promiscuous mode [ 122.516292][ T6995] hsr_slave_1: left promiscuous mode [ 122.527291][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.535254][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.568967][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.576660][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.603116][ T6995] hsr_slave_0: left promiscuous mode [ 122.621229][ T6995] hsr_slave_1: left promiscuous mode [ 122.628572][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.636221][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.648963][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.656801][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.689077][ T6995] veth1_vlan: left promiscuous mode [ 122.694567][ T6995] veth0_vlan: left promiscuous mode [ 122.720365][ T6995] veth1_macvtap: left promiscuous mode [ 122.726236][ T6995] veth0_macvtap: left promiscuous mode [ 122.738546][ T6995] veth1_vlan: left promiscuous mode [ 122.744055][ T6995] veth0_vlan: left promiscuous mode [ 122.893013][ T6995] team0 (unregistering): Port device team_slave_1 removed [ 122.911635][ T6995] team0 (unregistering): Port device team_slave_0 removed [ 122.952821][ T6995] pim6reg (unregistering): left allmulticast mode [ 122.992738][ T6995] team0 (unregistering): Port device team_slave_1 removed [ 123.004579][ T6995] team0 (unregistering): Port device team_slave_0 removed [ 123.111583][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.135890][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.174195][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.225196][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.242655][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.249964][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.281451][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.293706][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.301001][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.312575][ T7466] loop4: detected capacity change from 0 to 512 [ 123.329064][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.336403][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.355966][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.363107][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.390915][ T7466] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.471457][ T7326] veth0_vlan: entered promiscuous mode [ 123.489365][ T7326] veth1_vlan: entered promiscuous mode [ 123.527846][ T7326] veth0_macvtap: entered promiscuous mode [ 123.547041][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.555736][ T7326] veth1_macvtap: entered promiscuous mode [ 123.565606][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.600975][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.611727][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.624737][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.649754][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.660695][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.675876][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.716495][ T7326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.725386][ T7326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.734450][ T7326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.743503][ T7326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.886769][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 123.927557][ T7350] veth0_vlan: entered promiscuous mode [ 123.968792][ T7341] veth0_vlan: entered promiscuous mode [ 123.989805][ T7350] veth1_vlan: entered promiscuous mode [ 124.009593][ T7341] veth1_vlan: entered promiscuous mode [ 124.038935][ T7350] veth0_macvtap: entered promiscuous mode [ 124.076484][ T7341] veth0_macvtap: entered promiscuous mode [ 124.128486][ T7350] veth1_macvtap: entered promiscuous mode [ 124.140971][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1279'. [ 124.151650][ T7341] veth1_macvtap: entered promiscuous mode [ 124.192082][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.202654][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.212605][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.223194][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.234779][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.281147][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.291955][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.301939][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.312578][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.322887][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.333646][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.347577][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.377258][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.387977][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.398063][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.408623][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.422364][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.438619][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.449868][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.460302][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.471261][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.481506][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.492117][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.493730][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.511253][ T7350] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.520281][ T7350] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.529305][ T7350] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.538408][ T7350] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.577459][ T7341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.586301][ T7341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.595400][ T7341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.604407][ T7341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.717277][ T7547] loop6: detected capacity change from 0 to 1024 [ 124.740076][ T7550] loop5: detected capacity change from 0 to 512 [ 124.748125][ T7550] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 124.967644][ T7550] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 124.978872][ T7561] loop6: detected capacity change from 0 to 764 [ 125.047044][ T7566] netlink: 'syz.6.1289': attribute type 11 has an invalid length. [ 125.061637][ T7567] loop7: detected capacity change from 0 to 764 [ 125.122009][ T7567] netlink: 'syz.7.1290': attribute type 11 has an invalid length. [ 125.241378][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1292'. [ 125.266751][ T7573] netlink: 'syz.7.1293': attribute type 10 has an invalid length. [ 125.275073][ T7573] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1293'. [ 125.290696][ T7573] team0: Device geneve1 is up. Set it down before adding it as a team port [ 125.300305][ T7573] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 125.300365][ T7577] loop0: detected capacity change from 0 to 160 [ 125.335091][ T7573] 9pnet_fd: Insufficient options for proto=fd [ 125.411486][ T7580] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 125.427000][ T7580] SELinux: failed to load policy [ 125.527334][ T7592] loop5: detected capacity change from 0 to 764 [ 125.557423][ T7596] 9pnet_fd: Insufficient options for proto=fd [ 125.597614][ T7599] netlink: 'syz.5.1303': attribute type 11 has an invalid length. [ 125.642571][ T7602] FAULT_INJECTION: forcing a failure. [ 125.642571][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 125.657232][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.7.1305 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 125.657267][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.657284][ T7602] Call Trace: [ 125.657293][ T7602] [ 125.657304][ T7602] dump_stack_lvl+0xf6/0x150 [ 125.657350][ T7602] dump_stack+0x15/0x1a [ 125.657371][ T7602] should_fail_ex+0x261/0x270 [ 125.657401][ T7602] should_failslab+0x8f/0xb0 [ 125.657429][ T7602] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 125.657515][ T7602] ? scm_fp_dup+0x40/0x210 [ 125.657552][ T7602] ? __skb_try_recv_datagram+0x284/0x320 [ 125.657584][ T7602] kmemdup_noprof+0x2b/0x70 [ 125.657681][ T7602] scm_fp_dup+0x40/0x210 [ 125.657712][ T7602] __unix_dgram_recvmsg+0x6e9/0x890 [ 125.657747][ T7602] unix_dgram_recvmsg+0x81/0x90 [ 125.657921][ T7602] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 125.657957][ T7602] sock_recvmsg_nosec+0x107/0x140 [ 125.657996][ T7602] ____sys_recvmsg+0x27b/0x290 [ 125.658102][ T7602] do_recvmmsg+0x2a1/0x6e0 [ 125.658150][ T7602] __x64_sys_recvmmsg+0xe4/0x170 [ 125.658183][ T7602] x64_sys_call+0x1b90/0x2e10 [ 125.658207][ T7602] do_syscall_64+0xc9/0x1a0 [ 125.658265][ T7602] ? clear_bhb_loop+0x25/0x80 [ 125.658290][ T7602] ? clear_bhb_loop+0x25/0x80 [ 125.658316][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.658338][ T7602] RIP: 0033:0x7fd8e2c2e969 [ 125.658353][ T7602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.658375][ T7602] RSP: 002b:00007fd8e1276038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 125.658463][ T7602] RAX: ffffffffffffffda RBX: 00007fd8e2e56080 RCX: 00007fd8e2c2e969 [ 125.658478][ T7602] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 125.658493][ T7602] RBP: 00007fd8e1276090 R08: 0000000000000000 R09: 0000000000000000 [ 125.658508][ T7602] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 125.658522][ T7602] R13: 0000000000000001 R14: 00007fd8e2e56080 R15: 00007ffd96d76e38 [ 125.658674][ T7602] [ 125.958116][ T7606] lo: entered allmulticast mode [ 125.968970][ T7604] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1307'. [ 125.990413][ T7606] tunl0: entered allmulticast mode [ 126.001782][ T7606] gre0: entered allmulticast mode [ 126.012774][ T7609] loop4: detected capacity change from 0 to 1024 [ 126.030781][ T7606] gretap0: entered allmulticast mode [ 126.049554][ T7606] erspan0: entered allmulticast mode [ 126.057450][ T7606] ip_vti0: entered allmulticast mode [ 126.076792][ T7606] ip6_vti0: entered allmulticast mode [ 126.088781][ T7606] sit0: entered allmulticast mode [ 126.119972][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 126.120022][ T29] audit: type=1326 audit(1745514656.204:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 126.144167][ T7606] ip6tnl0: entered allmulticast mode [ 126.159264][ T29] audit: type=1326 audit(1745514656.204:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 126.171295][ T7606] ip6gre0: entered allmulticast mode [ 126.207000][ T29] audit: type=1326 audit(1745514656.204:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 126.250021][ T29] audit: type=1326 audit(1745514656.204:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 126.291332][ T7606] syz_tun: entered allmulticast mode [ 126.303309][ T7606] ip6gretap0: entered allmulticast mode [ 126.314438][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.326219][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.346519][ T7606] bridge0: entered allmulticast mode [ 126.346612][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.354377][ T7606] vcan0: entered allmulticast mode [ 126.367721][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.376874][ T7606] bond0: entered allmulticast mode [ 126.388555][ T7606] bond_slave_0: entered allmulticast mode [ 126.399583][ T7606] bond_slave_1: entered allmulticast mode [ 126.409805][ T7606] team0: entered allmulticast mode [ 126.416157][ T7606] team_slave_0: entered allmulticast mode [ 126.422580][ T7606] team_slave_1: entered allmulticast mode [ 126.433052][ T7606] dummy0: entered allmulticast mode [ 126.440606][ T7606] nlmon0: entered allmulticast mode [ 126.448672][ T7606] caif0: entered allmulticast mode [ 126.454567][ T7606] batadv0: entered allmulticast mode [ 126.470581][ T7606] vxcan0: entered allmulticast mode [ 126.477376][ T7606] vxcan1: entered allmulticast mode [ 126.485057][ T7606] veth0: entered allmulticast mode [ 126.493640][ T7606] veth1: entered allmulticast mode [ 126.503976][ T7606] wg0: entered allmulticast mode [ 126.512004][ T7606] wg1: entered allmulticast mode [ 126.520791][ T7606] wg2: entered allmulticast mode [ 126.529399][ T7606] veth0_to_bridge: entered allmulticast mode [ 126.540211][ T7606] veth1_to_bridge: entered allmulticast mode [ 126.550724][ T7606] veth0_to_bond: entered allmulticast mode [ 126.559485][ T7606] veth1_to_bond: entered allmulticast mode [ 126.568945][ T7606] veth0_to_team: entered allmulticast mode [ 126.578326][ T7606] veth1_to_team: entered allmulticast mode [ 126.587439][ T7606] veth0_to_batadv: entered allmulticast mode [ 126.596070][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.604720][ T7606] batadv_slave_0: entered allmulticast mode [ 126.613824][ T7606] veth1_to_batadv: entered allmulticast mode [ 126.626961][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.627787][ T7633] SELinux: failed to load policy [ 126.637619][ T7606] batadv_slave_1: entered allmulticast mode [ 126.646249][ T7633] loop4: detected capacity change from 0 to 512 [ 126.651113][ T7606] xfrm0: entered allmulticast mode [ 126.663136][ T7606] veth0_to_hsr: entered allmulticast mode [ 126.673053][ T7633] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.687278][ T7606] hsr_slave_0: entered allmulticast mode [ 126.695670][ T7606] veth1_to_hsr: entered allmulticast mode [ 126.704351][ T7606] hsr_slave_1: entered allmulticast mode [ 126.714892][ T7606] hsr0: entered allmulticast mode [ 126.722581][ T7606] veth1_virt_wifi: entered allmulticast mode [ 126.730569][ T7606] veth0_virt_wifi: entered allmulticast mode [ 126.739813][ T7606] veth1_vlan: entered allmulticast mode [ 126.748291][ T7606] veth0_vlan: entered allmulticast mode [ 126.764340][ T7606] vlan0: entered allmulticast mode [ 126.774646][ T7606] vlan1: entered allmulticast mode [ 126.784259][ T7606] macvlan0: entered allmulticast mode [ 126.794954][ T7606] macvlan1: entered allmulticast mode [ 126.803263][ T7606] ipvlan0: entered allmulticast mode [ 126.813364][ T7606] ipvlan1: entered allmulticast mode [ 126.825631][ T7606] veth1_macvtap: entered allmulticast mode [ 126.834836][ T7606] veth0_macvtap: entered allmulticast mode [ 126.844704][ T7606] macvtap0: entered allmulticast mode [ 126.855743][ T7606] macsec0: entered allmulticast mode [ 126.863533][ T7606] geneve0: entered allmulticast mode [ 126.872509][ T7606] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.885373][ T7606] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.896149][ T7606] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.907731][ T7606] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.918618][ T7606] geneve1: entered allmulticast mode [ 126.926868][ T7606] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 126.935885][ T7606] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 126.947484][ T7606] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 126.957776][ T7606] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 126.997654][ T7636] loop0: detected capacity change from 0 to 512 [ 127.024462][ T7636] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.040809][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1318'. [ 127.082189][ T7642] loop6: detected capacity change from 0 to 764 [ 127.102112][ T7644] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 127.128518][ T7644] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 127.208305][ T29] audit: type=1400 audit(1745514657.294:3861): avc: denied { read } for pid=7645 comm="syz.4.1321" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.238180][ T29] audit: type=1400 audit(1745514657.294:3862): avc: denied { open } for pid=7645 comm="syz.4.1321" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.268299][ T29] audit: type=1400 audit(1745514657.294:3863): avc: denied { block_suspend } for pid=7645 comm="syz.4.1321" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.301143][ T7653] netlink: 'syz.6.1319': attribute type 11 has an invalid length. [ 127.366415][ T7657] loop4: detected capacity change from 0 to 1024 [ 127.380875][ T29] audit: type=1400 audit(1745514657.444:3864): avc: denied { nlmsg_write } for pid=7654 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 127.406818][ T29] audit: type=1326 audit(1745514657.464:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 127.434836][ T29] audit: type=1326 audit(1745514657.464:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f507842e969 code=0x7ffc0000 [ 127.628057][ T7668] netlink: 200 bytes leftover after parsing attributes in process `syz.7.1327'. [ 127.641630][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1329'. [ 127.761916][ T7680] loop7: detected capacity change from 0 to 512 [ 127.801134][ T7680] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.899186][ T7686] loop5: detected capacity change from 0 to 512 [ 127.929441][ T7686] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.953606][ T7686] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1333: corrupted inode contents [ 128.033307][ T7686] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.1333: mark_inode_dirty error [ 128.119729][ T7686] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.1333: corrupted inode contents [ 128.136287][ T7685] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1332'. [ 128.138516][ T7686] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1333: mark_inode_dirty error [ 128.179878][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1336'. [ 128.217434][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1332'. [ 128.247392][ T7698] FAULT_INJECTION: forcing a failure. [ 128.247392][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 128.268669][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.5.1337 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 128.268695][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.268707][ T7698] Call Trace: [ 128.268714][ T7698] [ 128.268722][ T7698] dump_stack_lvl+0xf6/0x150 [ 128.268750][ T7698] dump_stack+0x15/0x1a [ 128.268787][ T7698] should_fail_ex+0x261/0x270 [ 128.268811][ T7698] should_failslab+0x8f/0xb0 [ 128.268833][ T7698] __kmalloc_noprof+0xad/0x410 [ 128.268918][ T7698] ? copy_splice_read+0xb8/0x5d0 [ 128.268956][ T7698] copy_splice_read+0xb8/0x5d0 [ 128.268991][ T7698] ? __kmalloc_noprof+0x287/0x410 [ 128.269032][ T7698] ? alloc_pipe_info+0x1cb/0x360 [ 128.269059][ T7698] ? __pfx_copy_splice_read+0x10/0x10 [ 128.269094][ T7698] splice_direct_to_actor+0x26c/0x680 [ 128.269133][ T7698] ? __pfx_direct_splice_actor+0x10/0x10 [ 128.269176][ T7698] do_splice_direct+0xd9/0x150 [ 128.269210][ T7698] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 128.269263][ T7698] do_sendfile+0x40a/0x690 [ 128.269355][ T7698] __x64_sys_sendfile64+0x113/0x160 [ 128.269386][ T7698] x64_sys_call+0xfc3/0x2e10 [ 128.269413][ T7698] do_syscall_64+0xc9/0x1a0 [ 128.269460][ T7698] ? clear_bhb_loop+0x25/0x80 [ 128.269519][ T7698] ? clear_bhb_loop+0x25/0x80 [ 128.269539][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.269562][ T7698] RIP: 0033:0x7f397944e969 [ 128.269607][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.269629][ T7698] RSP: 002b:00007f3977ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 128.269648][ T7698] RAX: ffffffffffffffda RBX: 00007f3979675fa0 RCX: 00007f397944e969 [ 128.269659][ T7698] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 128.269737][ T7698] RBP: 00007f3977ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.269751][ T7698] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 128.269765][ T7698] R13: 0000000000000000 R14: 00007f3979675fa0 R15: 00007ffca0eac598 [ 128.269788][ T7698] [ 128.616670][ T7704] loop5: detected capacity change from 0 to 764 [ 128.636549][ T7704] netlink: 'syz.5.1339': attribute type 11 has an invalid length. [ 128.720329][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1340'. [ 128.761794][ T7707] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 128.775127][ T7707] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 128.832728][ T7712] loop7: detected capacity change from 0 to 512 [ 128.872586][ T7712] EXT4-fs mount: 30 callbacks suppressed [ 128.872608][ T7712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.900504][ T7716] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1343'. [ 128.944248][ T7712] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.009238][ T7350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.268647][ T7732] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1350'. [ 129.285311][ T7730] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1350'. [ 129.322771][ T7734] loop7: detected capacity change from 0 to 764 [ 129.395508][ T7735] netlink: 'syz.7.1352': attribute type 11 has an invalid length. [ 129.529502][ T7741] loop6: detected capacity change from 0 to 512 [ 129.552528][ T7741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.573773][ T7741] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.756091][ T7755] rdma_op ffff888125774d80 conn xmit_rdma 0000000000000000 [ 129.787130][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.896599][ T7769] loop4: detected capacity change from 0 to 512 [ 129.914801][ T7769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.938533][ T7769] EXT4-fs (loop4): 1 truncate cleaned up [ 129.946044][ T7769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.046621][ T7777] lo: entered promiscuous mode [ 130.052302][ T7777] lo: entered allmulticast mode [ 130.063450][ T7779] loop6: detected capacity change from 0 to 764 [ 130.086426][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.125810][ T7781] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 130.134885][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.142960][ T7781] vhci_hcd vhci_hcd.0: Device attached [ 130.159695][ T7786] netlink: 'syz.6.1367': attribute type 11 has an invalid length. [ 130.203928][ T7781] loop5: detected capacity change from 0 to 512 [ 130.254489][ T7781] EXT4-fs (loop5): 1 orphan inode deleted [ 130.266894][ T7794] loop4: detected capacity change from 0 to 512 [ 130.274523][ T4340] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 130.299860][ T7794] EXT4-fs: dax option not supported [ 130.319949][ T7781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.338151][ T3381] vhci_hcd: vhci_device speed not set [ 130.360791][ T7781] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.408221][ T3381] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 130.425865][ T7785] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 130.596501][ T4340] vhci_hcd: stop threads [ 130.601197][ T4340] vhci_hcd: release socket [ 130.605745][ T4340] vhci_hcd: disconnect device [ 131.167881][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.187527][ T7816] audit_log_lost: 103 callbacks suppressed [ 131.187545][ T7816] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 131.203762][ T7816] audit: out of memory in audit_log_start [ 131.250874][ T29] audit: type=1400 audit(1745514661.354:3969): avc: denied { recv } for pid=7770 comm="syz.7.1364" saddr=10.128.0.163 src=30030 daddr=10.128.1.20 dest=55242 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 131.379156][ T7826] loop0: detected capacity change from 0 to 2045 [ 131.519063][ T7826] Alternate GPT is invalid, using primary GPT. [ 131.538837][ T7826] loop0: p2 p3 p7 [ 131.612182][ T29] audit: type=1400 audit(1745514661.714:3970): avc: denied { mounton } for pid=7823 comm="syz.0.1381" path="/syzcgroup/net/syz0/cgroup.procs" dev="cgroup" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 131.643424][ T7839] nfs: Unknown parameter 'ù±Y' [ 131.659910][ T7838] loop6: detected capacity change from 0 to 764 [ 131.670846][ T7836] loop5: detected capacity change from 0 to 1024 [ 131.699082][ T7826] team0 (unregistering): Port device team_slave_0 removed [ 131.703415][ T7836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.723228][ T7826] team0 (unregistering): Port device team_slave_1 removed [ 131.761758][ T7846] loop4: detected capacity change from 0 to 512 [ 131.781428][ T7836] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.808002][ T7847] netlink: 'syz.6.1385': attribute type 11 has an invalid length. [ 131.828342][ T7846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.858657][ T7846] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 131.869868][ T7846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01d, mo2=0102] [ 131.881166][ T7846] System zones: 1-12 [ 131.886638][ T7846] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 131.898321][ T7846] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 131.914701][ T7846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 131.949177][ T7846] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 131.950146][ T7836] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1386: corrupted xattr block 128: overlapping e_value [ 131.994280][ T7846] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.1388: lblock 0 mapped to illegal pblock 3 (length 1) [ 132.014113][ T7836] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 132.029651][ T7846] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.1388: error -117 reading directory block [ 132.050499][ T7836] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1386: corrupted xattr block 128: overlapping e_value [ 132.078797][ T7836] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 132.099416][ T7836] EXT4-fs error (device loop5): ext4_xattr_block_find:1869: inode #15: comm syz.5.1386: corrupted xattr block 128: overlapping e_value [ 132.132635][ T7836] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1386: corrupted xattr block 128: overlapping e_value [ 132.159982][ T7836] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 132.190706][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.198271][ T29] audit: type=1400 audit(1745514662.274:3971): avc: denied { mounton } for pid=7835 comm="syz.5.1386" path="/21/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.279286][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.376926][ T7865] __nla_validate_parse: 7 callbacks suppressed [ 132.376946][ T7865] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1396'. [ 132.433183][ T7867] SELinux: ebitmap: truncated map [ 132.449397][ T7867] SELinux: failed to load policy [ 132.493783][ T29] audit: type=1400 audit(1745514662.594:3972): avc: denied { bind } for pid=7869 comm="syz.6.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 132.546902][ T7872] loop4: detected capacity change from 0 to 1024 [ 132.575412][ T29] audit: type=1326 audit(1745514662.664:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7873 comm="syz.6.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 132.575698][ T7872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.608983][ T29] audit: type=1326 audit(1745514662.664:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7873 comm="syz.6.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 132.652386][ T29] audit: type=1326 audit(1745514662.664:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7873 comm="syz.6.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 132.681191][ T29] audit: type=1326 audit(1745514662.674:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7873 comm="syz.6.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 132.750817][ T7877] xt_hashlimit: max too large, truncated to 1048576 [ 132.784175][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.872793][ T7888] rdma_op ffff888117fbbd80 conn xmit_rdma 0000000000000000 [ 132.885908][ T7887] loop5: detected capacity change from 0 to 764 [ 132.897275][ T7890] syz.0.1400 (7890): attempted to duplicate a private mapping with mremap. This is not supported. [ 132.900248][ T7887] netlink: 'syz.5.1402': attribute type 11 has an invalid length. [ 132.949968][ T7890] loop0: detected capacity change from 0 to 1024 [ 132.965885][ T7890] EXT4-fs: Ignoring removed bh option [ 133.004043][ T7890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.022586][ T7890] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 133.030616][ T7890] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.040243][ T7890] vhci_hcd vhci_hcd.0: Device attached [ 133.050735][ T7893] block device autoloading is deprecated and will be removed. [ 133.063972][ T7896] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 133.073383][ T7893] syz.5.1403: attempt to access beyond end of device [ 133.073383][ T7893] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 133.089898][ T6799] vhci_hcd: stop threads [ 133.095777][ T6799] vhci_hcd: release socket [ 133.104507][ T6799] vhci_hcd: disconnect device [ 133.222085][ T7902] FAULT_INJECTION: forcing a failure. [ 133.222085][ T7902] name failslab, interval 1, probability 0, space 0, times 0 [ 133.236501][ T7902] CPU: 1 UID: 0 PID: 7902 Comm: syz.5.1405 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 133.236539][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.236562][ T7902] Call Trace: [ 133.236570][ T7902] [ 133.236580][ T7902] dump_stack_lvl+0xf6/0x150 [ 133.236611][ T7902] dump_stack+0x15/0x1a [ 133.236699][ T7902] should_fail_ex+0x261/0x270 [ 133.236730][ T7902] should_failslab+0x8f/0xb0 [ 133.236757][ T7902] kmem_cache_alloc_noprof+0x59/0x340 [ 133.236785][ T7902] ? alloc_file_pseudo_noaccount+0xe4/0x210 [ 133.236893][ T7902] alloc_file_pseudo_noaccount+0xe4/0x210 [ 133.236926][ T7902] bdev_file_open_by_dev+0x187/0x230 [ 133.237036][ T7902] swsusp_check+0x3f/0x260 [ 133.237069][ T7902] software_resume+0x43/0x2d0 [ 133.237096][ T7902] resume_store+0x353/0x3a0 [ 133.237124][ T7902] ? __pfx_resume_store+0x10/0x10 [ 133.237220][ T7902] kobj_attr_store+0x47/0x70 [ 133.237316][ T7902] ? __pfx_kobj_attr_store+0x10/0x10 [ 133.237346][ T7902] sysfs_kf_write+0xf3/0x110 [ 133.237379][ T7902] ? __pfx_sysfs_kf_write+0x10/0x10 [ 133.237478][ T7902] kernfs_fop_write_iter+0x1cd/0x2d0 [ 133.237506][ T7902] vfs_write+0x79b/0x950 [ 133.237523][ T7902] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 133.237560][ T7902] ksys_write+0xeb/0x1b0 [ 133.237585][ T7902] __x64_sys_write+0x42/0x50 [ 133.237606][ T7902] x64_sys_call+0x2a45/0x2e10 [ 133.237650][ T7902] do_syscall_64+0xc9/0x1a0 [ 133.237677][ T7902] ? clear_bhb_loop+0x25/0x80 [ 133.237734][ T7902] ? clear_bhb_loop+0x25/0x80 [ 133.237812][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.237880][ T7902] RIP: 0033:0x7f397944e969 [ 133.237896][ T7902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.237914][ T7902] RSP: 002b:00007f3977ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.237937][ T7902] RAX: ffffffffffffffda RBX: 00007f3979675fa0 RCX: 00007f397944e969 [ 133.237949][ T7902] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 000000000000000a [ 133.237963][ T7902] RBP: 00007f3977ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.237976][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.237990][ T7902] R13: 0000000000000000 R14: 00007f3979675fa0 R15: 00007ffca0eac598 [ 133.238061][ T7902] [ 133.591189][ T7911] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1409'. [ 133.646100][ T7914] SELinux: failed to load policy [ 133.653489][ T7916] FAULT_INJECTION: forcing a failure. [ 133.653489][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 133.667106][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.5.1411 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 133.667136][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.667151][ T7916] Call Trace: [ 133.667159][ T7916] [ 133.667169][ T7916] dump_stack_lvl+0xf6/0x150 [ 133.667255][ T7916] dump_stack+0x15/0x1a [ 133.667274][ T7916] should_fail_ex+0x261/0x270 [ 133.667299][ T7916] should_failslab+0x8f/0xb0 [ 133.667324][ T7916] __kmalloc_noprof+0xad/0x410 [ 133.667357][ T7916] ? cttimeout_new_timeout+0x1bf/0x470 [ 133.667420][ T7916] cttimeout_new_timeout+0x1bf/0x470 [ 133.667447][ T7916] ? lzma_main+0x1021/0x22c0 [ 133.667470][ T7916] nfnetlink_rcv_msg+0x4ba/0x580 [ 133.667523][ T7916] netlink_rcv_skb+0x12f/0x230 [ 133.667588][ T7916] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 133.667626][ T7916] nfnetlink_rcv+0x187/0x1610 [ 133.667700][ T7916] ? xas_load+0x3ba/0x3d0 [ 133.667726][ T7916] ? __rcu_read_unlock+0x4e/0x70 [ 133.667749][ T7916] ? memcg_list_lru_alloc+0xde/0x4a0 [ 133.667781][ T7916] ? mod_objcg_state+0x3f6/0x530 [ 133.667817][ T7916] ? obj_cgroup_charge+0xc6/0x170 [ 133.667907][ T7916] ? should_fail_ex+0x31/0x270 [ 133.667939][ T7916] ? __rcu_read_unlock+0x4e/0x70 [ 133.667962][ T7916] ? avc_has_perm_noaudit+0x1cc/0x210 [ 133.668034][ T7916] ? avc_has_perm+0xd6/0x150 [ 133.668063][ T7916] ? should_fail_ex+0xd7/0x270 [ 133.668092][ T7916] ? selinux_nlmsg_lookup+0x119/0x8c0 [ 133.668121][ T7916] ? __rcu_read_unlock+0x34/0x70 [ 133.668141][ T7916] ? __netlink_lookup+0x25d/0x2a0 [ 133.668241][ T7916] netlink_unicast+0x605/0x6c0 [ 133.668277][ T7916] netlink_sendmsg+0x609/0x720 [ 133.668306][ T7916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.668334][ T7916] __sock_sendmsg+0x140/0x180 [ 133.668370][ T7916] ____sys_sendmsg+0x350/0x4e0 [ 133.668404][ T7916] __sys_sendmsg+0x1a0/0x240 [ 133.668474][ T7916] __x64_sys_sendmsg+0x46/0x50 [ 133.668550][ T7916] x64_sys_call+0x26f3/0x2e10 [ 133.668579][ T7916] do_syscall_64+0xc9/0x1a0 [ 133.668603][ T7916] ? clear_bhb_loop+0x25/0x80 [ 133.668627][ T7916] ? clear_bhb_loop+0x25/0x80 [ 133.668666][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.668689][ T7916] RIP: 0033:0x7f397944e969 [ 133.668756][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.668774][ T7916] RSP: 002b:00007f3977ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.668838][ T7916] RAX: ffffffffffffffda RBX: 00007f3979675fa0 RCX: 00007f397944e969 [ 133.668854][ T7916] RDX: 00000000000040c0 RSI: 0000200000000340 RDI: 0000000000000003 [ 133.668876][ T7916] RBP: 00007f3977ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.668890][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.668903][ T7916] R13: 0000000000000000 R14: 00007f3979675fa0 R15: 00007ffca0eac598 [ 133.668926][ T7916] [ 134.068125][ T7922] loop5: detected capacity change from 0 to 512 [ 134.068246][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.078378][ T7922] EXT4-fs: Ignoring removed nobh option [ 134.090131][ T7924] loop7: detected capacity change from 0 to 764 [ 134.090513][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.135839][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.160696][ T7930] netlink: 'syz.7.1414': attribute type 11 has an invalid length. [ 134.200249][ T7922] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1413: corrupted inode contents [ 134.215905][ T7922] EXT4-fs (loop5): Remounting filesystem read-only [ 134.224229][ T7922] EXT4-fs (loop5): 1 truncate cleaned up [ 134.231142][ T7922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.245679][ T336] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 134.248386][ T7922] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.256902][ T336] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 134.257030][ T336] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 134.292689][ T7934] loop0: detected capacity change from 0 to 1024 [ 134.309586][ T7922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.335779][ T7934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.381723][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.414774][ T7939] FAULT_INJECTION: forcing a failure. [ 134.414774][ T7939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.431924][ T7939] CPU: 1 UID: 0 PID: 7939 Comm: syz.0.1418 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 134.432081][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.432097][ T7939] Call Trace: [ 134.432104][ T7939] [ 134.432113][ T7939] dump_stack_lvl+0xf6/0x150 [ 134.432137][ T7939] dump_stack+0x15/0x1a [ 134.432153][ T7939] should_fail_ex+0x261/0x270 [ 134.432236][ T7939] should_fail+0xb/0x10 [ 134.432256][ T7939] should_fail_usercopy+0x1a/0x20 [ 134.432286][ T7939] _copy_from_user+0x1c/0xa0 [ 134.432347][ T7939] copy_msghdr_from_user+0x54/0x2b0 [ 134.432386][ T7939] ? __fget_files+0x186/0x1c0 [ 134.432485][ T7939] __sys_sendmsg+0x141/0x240 [ 134.432523][ T7939] __x64_sys_sendmsg+0x46/0x50 [ 134.432587][ T7939] x64_sys_call+0x26f3/0x2e10 [ 134.432632][ T7939] do_syscall_64+0xc9/0x1a0 [ 134.432697][ T7939] ? clear_bhb_loop+0x25/0x80 [ 134.433709][ T7939] ? clear_bhb_loop+0x25/0x80 [ 134.433736][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.433759][ T7939] RIP: 0033:0x7fd510a4e969 [ 134.433776][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.433798][ T7939] RSP: 002b:00007fd50f0b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.433821][ T7939] RAX: ffffffffffffffda RBX: 00007fd510c75fa0 RCX: 00007fd510a4e969 [ 134.433836][ T7939] RDX: 0000000020040814 RSI: 0000200000000080 RDI: 0000000000000008 [ 134.433926][ T7939] RBP: 00007fd50f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.433941][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.433955][ T7939] R13: 0000000000000000 R14: 00007fd510c75fa0 R15: 00007ffc2cebbf08 [ 134.433979][ T7939] [ 134.647688][ T7922] loop5: detected capacity change from 0 to 512 [ 134.725890][ T7922] ext3: Unknown parameter 'noacl' [ 134.906422][ T7954] loop6: detected capacity change from 0 to 128 [ 134.990959][ T7954] netlink: 'syz.6.1423': attribute type 3 has an invalid length. [ 135.097794][ T7965] loop4: detected capacity change from 0 to 512 [ 135.160989][ T7965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.198232][ T7965] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.273883][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.352577][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.352577][ T6629] loop6: rw=1, sector=145, nr_sectors = 40 limit=128 [ 135.376768][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.376768][ T6629] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 135.393426][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.393426][ T6629] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 135.409670][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.409670][ T6629] loop6: rw=1, sector=225, nr_sectors = 16 limit=128 [ 135.432585][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.432585][ T6629] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 135.469285][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.469285][ T6629] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 135.483622][ T7977] macvlan1: entered promiscuous mode [ 135.498754][ T3381] usb 11-1: enqueue for inactive port 0 [ 135.505010][ T7977] macvlan1: left promiscuous mode [ 135.515350][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.515350][ T6629] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 135.519015][ T3381] usb 11-1: enqueue for inactive port 0 [ 135.540873][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.540873][ T6629] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 135.555980][ T6629] kworker/u8:21: attempt to access beyond end of device [ 135.555980][ T6629] loop6: rw=1, sector=313, nr_sectors = 8 limit=128 [ 135.597130][ T7983] loop6: detected capacity change from 0 to 1024 [ 135.609150][ T7983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.651616][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.664032][ T3381] vhci_hcd: vhci_device speed not set [ 135.692248][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 135.731349][ T7992] FAULT_INJECTION: forcing a failure. [ 135.731349][ T7992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.747463][ T7992] CPU: 0 UID: 0 PID: 7992 Comm: syz.0.1439 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 135.747494][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.747513][ T7992] Call Trace: [ 135.747520][ T7992] [ 135.747555][ T7992] dump_stack_lvl+0xf6/0x150 [ 135.747587][ T7992] dump_stack+0x15/0x1a [ 135.747603][ T7992] should_fail_ex+0x261/0x270 [ 135.747684][ T7992] should_fail+0xb/0x10 [ 135.747720][ T7992] should_fail_usercopy+0x1a/0x20 [ 135.747766][ T7992] _copy_to_user+0x20/0xa0 [ 135.747801][ T7992] simple_read_from_buffer+0xb2/0x130 [ 135.747868][ T7992] proc_fail_nth_read+0x103/0x140 [ 135.747984][ T7992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.748015][ T7992] vfs_read+0x1b2/0x710 [ 135.748030][ T7992] ? __rcu_read_unlock+0x4e/0x70 [ 135.748055][ T7992] ? __fget_files+0x186/0x1c0 [ 135.748125][ T7992] ksys_read+0xeb/0x1b0 [ 135.748143][ T7992] __x64_sys_read+0x42/0x50 [ 135.748160][ T7992] x64_sys_call+0x2a3b/0x2e10 [ 135.748180][ T7992] do_syscall_64+0xc9/0x1a0 [ 135.748206][ T7992] ? clear_bhb_loop+0x25/0x80 [ 135.748233][ T7992] ? clear_bhb_loop+0x25/0x80 [ 135.748265][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.748325][ T7992] RIP: 0033:0x7fd510a4d37c [ 135.748340][ T7992] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.748358][ T7992] RSP: 002b:00007fd50f0b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.748376][ T7992] RAX: ffffffffffffffda RBX: 00007fd510c75fa0 RCX: 00007fd510a4d37c [ 135.748388][ T7992] RDX: 000000000000000f RSI: 00007fd50f0b70a0 RDI: 0000000000000007 [ 135.748399][ T7992] RBP: 00007fd50f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.748410][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.748458][ T7992] R13: 0000000000000000 R14: 00007fd510c75fa0 R15: 00007ffc2cebbf08 [ 135.748536][ T7992] [ 136.033074][ T7996] loop0: detected capacity change from 0 to 512 [ 136.068737][ T7998] loop4: detected capacity change from 0 to 764 [ 136.080336][ T7996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.176108][ T7996] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.211496][ T8007] netlink: 'syz.4.1441': attribute type 11 has an invalid length. [ 136.255660][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.322814][ T8018] FAULT_INJECTION: forcing a failure. [ 136.322814][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 136.338482][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.7.1446 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 136.338591][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.338607][ T8018] Call Trace: [ 136.338615][ T8018] [ 136.338624][ T8018] dump_stack_lvl+0xf6/0x150 [ 136.338649][ T8018] dump_stack+0x15/0x1a [ 136.338670][ T8018] should_fail_ex+0x261/0x270 [ 136.338701][ T8018] should_failslab+0x8f/0xb0 [ 136.338779][ T8018] kmem_cache_alloc_noprof+0x59/0x340 [ 136.338815][ T8018] ? alloc_empty_file+0x78/0x200 [ 136.338847][ T8018] ? _raw_spin_unlock+0x26/0x50 [ 136.338886][ T8018] alloc_empty_file+0x78/0x200 [ 136.338914][ T8018] alloc_file_pseudo+0xcb/0x160 [ 136.339060][ T8018] __shmem_file_setup+0x1bb/0x1f0 [ 136.339085][ T8018] shmem_file_setup+0x3b/0x50 [ 136.339105][ T8018] __se_sys_memfd_create+0x2e1/0x5a0 [ 136.339193][ T8018] __x64_sys_memfd_create+0x31/0x40 [ 136.339226][ T8018] x64_sys_call+0x1163/0x2e10 [ 136.339277][ T8018] do_syscall_64+0xc9/0x1a0 [ 136.339318][ T8018] ? clear_bhb_loop+0x25/0x80 [ 136.339340][ T8018] ? clear_bhb_loop+0x25/0x80 [ 136.339361][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.339420][ T8018] RIP: 0033:0x7fd8e2c2e969 [ 136.339437][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.339455][ T8018] RSP: 002b:00007fd8e1296e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 136.339474][ T8018] RAX: ffffffffffffffda RBX: 0000000000000446 RCX: 00007fd8e2c2e969 [ 136.339487][ T8018] RDX: 00007fd8e1296ef0 RSI: 0000000000000000 RDI: 00007fd8e2cb1444 [ 136.339499][ T8018] RBP: 0000200000000d40 R08: 00007fd8e1296bb7 R09: 00007fd8e1296e40 [ 136.339513][ T8018] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 136.339525][ T8018] R13: 00007fd8e1296ef0 R14: 00007fd8e1296eb0 R15: 0000200000000680 [ 136.339619][ T8018] [ 136.622023][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 136.622040][ T29] audit: type=1400 audit(1745514666.724:4223): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 136.656212][ T29] audit: type=1400 audit(1745514666.724:4224): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 136.806121][ T8023] sg_write: process 700 (syz.4.1450) changed security contexts after opening file descriptor, this is not allowed. [ 136.824821][ T8025] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1448'. [ 137.347682][ T8033] syzkaller0: entered allmulticast mode [ 137.356514][ T8033] syzkaller0: entered promiscuous mode [ 137.373506][ T8033] syzkaller0 (unregistering): left promiscuous mode [ 137.381718][ T8033] syzkaller0 (unregistering): left allmulticast mode [ 137.506427][ T8042] loop0: detected capacity change from 0 to 512 [ 137.561482][ T8042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.566191][ T8043] bridge_slave_0: left allmulticast mode [ 137.590531][ T8043] bridge_slave_0: left promiscuous mode [ 137.598066][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.615074][ T8042] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.634866][ T8043] bridge_slave_1: left allmulticast mode [ 137.642201][ T8043] bridge_slave_1: left promiscuous mode [ 137.649875][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.694880][ T8051] SELinux: Context : is not valid (left unmapped). [ 137.702225][ T29] audit: type=1400 audit(1745514667.804:4225): avc: denied { relabelto } for pid=8041 comm="syz.7.1454" name="rdma.current" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 137.734782][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.759513][ T8043] bond0: (slave bond_slave_0): Releasing backup interface [ 137.773388][ T8058] loop4: detected capacity change from 0 to 512 [ 137.780887][ T8058] EXT4-fs: inline encryption not supported [ 137.788719][ T8058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.792515][ T8043] bond0: (slave bond_slave_1): Releasing backup interface [ 137.798462][ T8058] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.798486][ T8058] EXT4-fs (loop4): blocks per group (39) and clusters per group (32768) inconsistent [ 137.817392][ T29] audit: type=1400 audit(1745514667.804:4226): avc: denied { associate } for pid=8041 comm="syz.7.1454" name="rdma.current" dev="tmpfs" ino=204 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 137.880058][ T8043] team0: Port device team_slave_0 removed [ 137.902078][ T8043] team0: Port device team_slave_1 removed [ 137.912831][ T8043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.922096][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.931869][ T8060] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1461'. [ 137.951734][ T8043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.966163][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.003879][ T29] audit: type=1400 audit(1745514668.094:4227): avc: denied { open } for pid=8062 comm="syz.6.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.026664][ T29] audit: type=1400 audit(1745514668.094:4228): avc: denied { perfmon } for pid=8062 comm="syz.6.1462" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.052202][ T29] audit: type=1400 audit(1745514668.094:4229): avc: denied { kernel } for pid=8062 comm="syz.6.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.115589][ T29] audit: type=1400 audit(1745514668.154:4230): avc: denied { watch } for pid=8062 comm="syz.6.1462" path="/42/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 138.142933][ T29] audit: type=1400 audit(1745514668.154:4231): avc: denied { prog_load } for pid=8062 comm="syz.6.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.167305][ T29] audit: type=1400 audit(1745514668.154:4232): avc: denied { bpf } for pid=8062 comm="syz.6.1462" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.167884][ T8064] loop4: detected capacity change from 0 to 8192 [ 138.369273][ T8079] IPv4: Oversized IP packet from 127.202.26.0 [ 138.467573][ T8089] loop6: detected capacity change from 0 to 512 [ 138.566296][ T8092] Invalid ELF header magic: != ELF [ 138.579257][ T8089] EXT4-fs: Mount option(s) incompatible with ext3 [ 138.610575][ T8089] program syz.6.1471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.621016][ T8092] loop4: detected capacity change from 0 to 2048 [ 138.671449][ T8092] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 138.727704][ T8092] loop4: detected capacity change from 0 to 128 [ 138.730387][ T8103] loop6: detected capacity change from 0 to 1024 [ 138.781170][ T8103] EXT4-fs: Ignoring removed nobh option [ 138.787586][ T8103] EXT4-fs: Ignoring removed bh option [ 138.788222][ T8106] loop0: detected capacity change from 0 to 2048 [ 138.822047][ T8106] EXT4-fs: Ignoring removed bh option [ 138.830963][ T8106] EXT4-fs (loop0): blocks per group (262144) and clusters per group (16384) inconsistent [ 138.840592][ T8103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.968564][ T8103] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1477: Allocating blocks 385-513 which overlap fs metadata [ 139.126786][ T8123] EXT4-fs (loop6): pa ffff8881064f1150: logic 16, phys. 129, len 24 [ 139.139720][ T8123] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 139.267781][ T8123] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 139.283042][ T8123] EXT4-fs (loop6): This should not happen!! Data will be lost [ 139.283042][ T8123] [ 139.293815][ T8123] EXT4-fs (loop6): Total free blocks count 0 [ 139.300571][ T8123] EXT4-fs (loop6): Free/Dirty block details [ 139.306891][ T8123] EXT4-fs (loop6): free_blocks=128 [ 139.317316][ T8123] EXT4-fs (loop6): dirty_blocks=0 [ 139.323342][ T8123] EXT4-fs (loop6): Block reservation details [ 139.330219][ T8123] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 139.372434][ T8103] $Hÿ: renamed from bond0 (while UP) [ 139.386765][ T8103] $Hÿ: entered promiscuous mode [ 139.392205][ T8103] bond_slave_0: entered promiscuous mode [ 139.399689][ T8103] bond_slave_1: entered promiscuous mode [ 139.540478][ T8131] loop0: detected capacity change from 0 to 512 [ 139.547996][ T8131] EXT4-fs: Ignoring removed nobh option [ 139.580859][ T8133] loop6: detected capacity change from 0 to 764 [ 139.618401][ T8131] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1483: corrupted inode contents [ 139.686388][ T8131] EXT4-fs (loop0): Remounting filesystem read-only [ 139.702701][ T8136] netlink: 'syz.6.1484': attribute type 11 has an invalid length. [ 139.705356][ T8131] EXT4-fs (loop0): 1 truncate cleaned up [ 139.719510][ T4722] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.731890][ T4722] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.738372][ T8131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.799879][ T8131] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.816939][ T8138] loop4: detected capacity change from 0 to 256 [ 139.848353][ T8138] vfat: Unknown parameter 'ÿÿ18446744073709551615' [ 139.856226][ T4722] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 139.875847][ T8131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.913547][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1485'. [ 140.022024][ T8154] loop5: detected capacity change from 0 to 512 [ 140.048896][ T8155] loop0: detected capacity change from 0 to 512 [ 140.070383][ T8154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.113706][ T8154] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.180980][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.232720][ T8163] loop6: detected capacity change from 0 to 512 [ 140.255705][ T8168] loop0: detected capacity change from 0 to 764 [ 140.274958][ T8168] netlink: 'syz.0.1496': attribute type 11 has an invalid length. [ 140.287990][ T8163] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 140.394642][ T8163] EXT4-fs (loop6): 1 truncate cleaned up [ 140.424968][ T8163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.524600][ T8181] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1499'. [ 141.100529][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.131611][ T8191] loop6: detected capacity change from 0 to 512 [ 141.170470][ T8191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.222932][ T8191] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.247654][ T8196] loop5: detected capacity change from 0 to 1024 [ 141.260801][ T8196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.323047][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.339430][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.355059][ T8199] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1506'. [ 141.374181][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1507'. [ 141.395224][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1507'. [ 141.424819][ T8203] loop6: detected capacity change from 0 to 764 [ 141.457627][ T8208] loop4: detected capacity change from 0 to 512 [ 141.513867][ T8208] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.541239][ T8213] netlink: 'syz.6.1508': attribute type 11 has an invalid length. [ 141.607280][ T8219] loop5: detected capacity change from 0 to 164 [ 141.623338][ T8208] EXT4-fs (loop4): 1 truncate cleaned up [ 141.648733][ T8208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.723860][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 141.723879][ T29] audit: type=1400 audit(1745514671.824:4597): avc: denied { unmount } for pid=7326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 141.783137][ T8233] loop6: detected capacity change from 0 to 1024 [ 141.796567][ T8233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.831154][ T29] audit: type=1326 audit(1745514671.934:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8232 comm="syz.6.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 141.863157][ T29] audit: type=1326 audit(1745514671.934:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8232 comm="syz.6.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 141.890393][ T29] audit: type=1326 audit(1745514671.934:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8232 comm="syz.6.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 141.917009][ T29] audit: type=1326 audit(1745514671.934:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8232 comm="syz.6.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 141.945727][ T8239] loop7: detected capacity change from 0 to 512 [ 141.956828][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.967787][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.003624][ T8247] FAULT_INJECTION: forcing a failure. [ 142.003624][ T8247] name failslab, interval 1, probability 0, space 0, times 0 [ 142.009479][ T8239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.017671][ T8247] CPU: 1 UID: 0 PID: 8247 Comm: syz.6.1521 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 142.017709][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.017726][ T8247] Call Trace: [ 142.017736][ T8247] [ 142.017746][ T8247] dump_stack_lvl+0xf6/0x150 [ 142.017777][ T8247] dump_stack+0x15/0x1a [ 142.017798][ T8247] should_fail_ex+0x261/0x270 [ 142.017847][ T8247] should_failslab+0x8f/0xb0 [ 142.017875][ T8247] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 142.017968][ T8247] ? __alloc_skb+0x10d/0x320 [ 142.017996][ T8247] __alloc_skb+0x10d/0x320 [ 142.018021][ T8247] netlink_alloc_large_skb+0xad/0xe0 [ 142.018064][ T8247] netlink_sendmsg+0x3da/0x720 [ 142.018095][ T8247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.018137][ T8247] __sock_sendmsg+0x140/0x180 [ 142.018273][ T8247] ____sys_sendmsg+0x350/0x4e0 [ 142.018307][ T8247] __sys_sendmsg+0x1a0/0x240 [ 142.018409][ T8247] __x64_sys_sendmsg+0x46/0x50 [ 142.018439][ T8247] x64_sys_call+0x26f3/0x2e10 [ 142.018467][ T8247] do_syscall_64+0xc9/0x1a0 [ 142.018499][ T8247] ? clear_bhb_loop+0x25/0x80 [ 142.018531][ T8247] ? clear_bhb_loop+0x25/0x80 [ 142.018557][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.018582][ T8247] RIP: 0033:0x7fcbd3dde969 [ 142.018602][ T8247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.018627][ T8247] RSP: 002b:00007fcbd2447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.018650][ T8247] RAX: ffffffffffffffda RBX: 00007fcbd4005fa0 RCX: 00007fcbd3dde969 [ 142.018665][ T8247] RDX: 0000000024008000 RSI: 0000200000000840 RDI: 0000000000000006 [ 142.018680][ T8247] RBP: 00007fcbd2447090 R08: 0000000000000000 R09: 0000000000000000 [ 142.018694][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.018709][ T8247] R13: 0000000000000000 R14: 00007fcbd4005fa0 R15: 00007fffe6c432f8 [ 142.018730][ T8247] [ 142.124504][ T29] audit: type=1400 audit(1745514672.104:4602): avc: denied { getopt } for pid=8242 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.132282][ T8239] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.135924][ T29] audit: type=1400 audit(1745514672.104:4603): avc: denied { create } for pid=8242 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.262339][ T8241] loop4: detected capacity change from 0 to 512 [ 142.284533][ T29] audit: type=1400 audit(1745514672.114:4604): avc: denied { connect } for pid=8242 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.288021][ T29] audit: type=1326 audit(1745514672.384:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8248 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 142.301042][ T7350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.322500][ T29] audit: type=1326 audit(1745514672.384:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8248 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 142.366918][ T8241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.446746][ T8241] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.468214][ T8254] FAULT_INJECTION: forcing a failure. [ 142.468214][ T8254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.486577][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.5.1525 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 142.486608][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.486624][ T8254] Call Trace: [ 142.486693][ T8254] [ 142.486703][ T8254] dump_stack_lvl+0xf6/0x150 [ 142.486848][ T8254] dump_stack+0x15/0x1a [ 142.486868][ T8254] should_fail_ex+0x261/0x270 [ 142.486895][ T8254] should_fail+0xb/0x10 [ 142.486918][ T8254] should_fail_usercopy+0x1a/0x20 [ 142.487007][ T8254] _copy_to_user+0x20/0xa0 [ 142.487043][ T8254] simple_read_from_buffer+0xb2/0x130 [ 142.487083][ T8254] proc_fail_nth_read+0x103/0x140 [ 142.487126][ T8254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.487218][ T8254] vfs_read+0x1b2/0x710 [ 142.487233][ T8254] ? __rcu_read_unlock+0x4e/0x70 [ 142.487253][ T8254] ? __fget_files+0x186/0x1c0 [ 142.487279][ T8254] ksys_read+0xeb/0x1b0 [ 142.487302][ T8254] __x64_sys_read+0x42/0x50 [ 142.487336][ T8254] x64_sys_call+0x2a3b/0x2e10 [ 142.487362][ T8254] do_syscall_64+0xc9/0x1a0 [ 142.487392][ T8254] ? clear_bhb_loop+0x25/0x80 [ 142.487418][ T8254] ? clear_bhb_loop+0x25/0x80 [ 142.487479][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.487503][ T8254] RIP: 0033:0x7f397944d37c [ 142.487516][ T8254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.487682][ T8254] RSP: 002b:00007f3977ab7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.487708][ T8254] RAX: ffffffffffffffda RBX: 00007f3979675fa0 RCX: 00007f397944d37c [ 142.487721][ T8254] RDX: 000000000000000f RSI: 00007f3977ab70a0 RDI: 0000000000000003 [ 142.487734][ T8254] RBP: 00007f3977ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.487791][ T8254] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 142.487804][ T8254] R13: 0000000000000001 R14: 00007f3979675fa0 R15: 00007ffca0eac598 [ 142.487823][ T8254] [ 142.785503][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.791788][ T8261] FAULT_INJECTION: forcing a failure. [ 142.791788][ T8261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.810234][ T8261] CPU: 1 UID: 0 PID: 8261 Comm: syz.7.1524 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 142.810267][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.810282][ T8261] Call Trace: [ 142.810291][ T8261] [ 142.810300][ T8261] dump_stack_lvl+0xf6/0x150 [ 142.810328][ T8261] dump_stack+0x15/0x1a [ 142.810354][ T8261] should_fail_ex+0x261/0x270 [ 142.810383][ T8261] should_fail_alloc_page+0xfd/0x110 [ 142.810411][ T8261] __alloc_frozen_pages_noprof+0x11d/0x360 [ 142.810483][ T8261] alloc_pages_mpol+0xb6/0x260 [ 142.810522][ T8261] alloc_migration_target_by_mpol+0x123/0x240 [ 142.810550][ T8261] migrate_pages_batch+0x324/0x1930 [ 142.810634][ T8261] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 142.810669][ T8261] migrate_pages+0xf08/0x1850 [ 142.810703][ T8261] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 142.810876][ T8261] __se_sys_mbind+0xdf4/0xfe0 [ 142.810908][ T8261] ? vfs_write+0x669/0x950 [ 142.810937][ T8261] __x64_sys_mbind+0x78/0x90 [ 142.810966][ T8261] x64_sys_call+0x13be/0x2e10 [ 142.811042][ T8261] do_syscall_64+0xc9/0x1a0 [ 142.811070][ T8261] ? clear_bhb_loop+0x25/0x80 [ 142.811093][ T8261] ? clear_bhb_loop+0x25/0x80 [ 142.811116][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.811139][ T8261] RIP: 0033:0x7fd8e2c2e969 [ 142.811214][ T8261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.811234][ T8261] RSP: 002b:00007fd8e1255038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 142.811255][ T8261] RAX: ffffffffffffffda RBX: 00007fd8e2e56160 RCX: 00007fd8e2c2e969 [ 142.811268][ T8261] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 142.811282][ T8261] RBP: 00007fd8e1255090 R08: 0000000000000000 R09: 0000000000000002 [ 142.811376][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.811389][ T8261] R13: 0000000000000001 R14: 00007fd8e2e56160 R15: 00007ffd96d76e38 [ 142.811412][ T8261] [ 143.069778][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1528'. [ 143.072661][ T8268] loop0: detected capacity change from 0 to 764 [ 143.104813][ T8268] netlink: 'syz.0.1529': attribute type 11 has an invalid length. [ 143.156219][ T8275] bio_check_eod: 98 callbacks suppressed [ 143.156236][ T8275] syz.6.1531: attempt to access beyond end of device [ 143.156236][ T8275] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 143.201390][ T8280] FAULT_INJECTION: forcing a failure. [ 143.201390][ T8280] name failslab, interval 1, probability 0, space 0, times 0 [ 143.219942][ T8280] CPU: 1 UID: 0 PID: 8280 Comm: syz.7.1533 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 143.219976][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.219989][ T8280] Call Trace: [ 143.219996][ T8280] [ 143.220004][ T8280] dump_stack_lvl+0xf6/0x150 [ 143.220067][ T8280] dump_stack+0x15/0x1a [ 143.220086][ T8280] should_fail_ex+0x261/0x270 [ 143.220116][ T8280] should_failslab+0x8f/0xb0 [ 143.220139][ T8280] kmem_cache_alloc_noprof+0x59/0x340 [ 143.220165][ T8280] ? skb_clone+0x154/0x1f0 [ 143.220232][ T8280] skb_clone+0x154/0x1f0 [ 143.220296][ T8280] __netlink_deliver_tap+0x2bd/0x4f0 [ 143.220322][ T8280] netlink_unicast+0x69e/0x6c0 [ 143.220364][ T8280] netlink_sendmsg+0x609/0x720 [ 143.220394][ T8280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.220428][ T8280] __sock_sendmsg+0x140/0x180 [ 143.220456][ T8280] sock_write_iter+0x186/0x1c0 [ 143.220493][ T8280] vfs_write+0x79b/0x950 [ 143.220628][ T8280] ? __pfx_sock_write_iter+0x10/0x10 [ 143.220717][ T8280] ksys_write+0xeb/0x1b0 [ 143.220830][ T8280] __x64_sys_write+0x42/0x50 [ 143.220852][ T8280] x64_sys_call+0x2a45/0x2e10 [ 143.220874][ T8280] do_syscall_64+0xc9/0x1a0 [ 143.220902][ T8280] ? clear_bhb_loop+0x25/0x80 [ 143.221007][ T8280] ? clear_bhb_loop+0x25/0x80 [ 143.221080][ T8280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.221113][ T8280] RIP: 0033:0x7fd8e2c2e969 [ 143.221127][ T8280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.221147][ T8280] RSP: 002b:00007fd8e1297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.221194][ T8280] RAX: ffffffffffffffda RBX: 00007fd8e2e55fa0 RCX: 00007fd8e2c2e969 [ 143.221210][ T8280] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 143.221225][ T8280] RBP: 00007fd8e1297090 R08: 0000000000000000 R09: 0000000000000000 [ 143.221239][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.221253][ T8280] R13: 0000000000000000 R14: 00007fd8e2e55fa0 R15: 00007ffd96d76e38 [ 143.221348][ T8280] [ 143.221366][ T8280] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1533'. [ 143.266212][ T8278] loop4: detected capacity change from 0 to 1024 [ 143.391461][ T8285] loop6: detected capacity change from 0 to 512 [ 143.414822][ T8286] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1536'. [ 143.493430][ T8278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.575541][ T8285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.598201][ T8285] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.670341][ T8293] loop0: detected capacity change from 0 to 256 [ 143.681122][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.697647][ T8293] vfat: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 143.716444][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.739106][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1538'. [ 143.761201][ T8299] FAULT_INJECTION: forcing a failure. [ 143.761201][ T8299] name failslab, interval 1, probability 0, space 0, times 0 [ 143.781993][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.5.1543 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 143.782021][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.782036][ T8299] Call Trace: [ 143.782044][ T8299] [ 143.782053][ T8299] dump_stack_lvl+0xf6/0x150 [ 143.782111][ T8299] dump_stack+0x15/0x1a [ 143.782131][ T8299] should_fail_ex+0x261/0x270 [ 143.782228][ T8299] should_failslab+0x8f/0xb0 [ 143.782253][ T8299] __kmalloc_cache_noprof+0x55/0x320 [ 143.782284][ T8299] ? nf_tables_newtable+0x3c5/0xf10 [ 143.782326][ T8299] nf_tables_newtable+0x3c5/0xf10 [ 143.782433][ T8299] nfnetlink_rcv+0xb6e/0x1610 [ 143.782501][ T8299] netlink_unicast+0x605/0x6c0 [ 143.782625][ T8299] netlink_sendmsg+0x609/0x720 [ 143.782655][ T8299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.782679][ T8299] __sock_sendmsg+0x140/0x180 [ 143.782715][ T8299] ____sys_sendmsg+0x350/0x4e0 [ 143.782787][ T8299] __sys_sendmsg+0x1a0/0x240 [ 143.782834][ T8299] __x64_sys_sendmsg+0x46/0x50 [ 143.782859][ T8299] x64_sys_call+0x26f3/0x2e10 [ 143.782909][ T8299] do_syscall_64+0xc9/0x1a0 [ 143.782938][ T8299] ? clear_bhb_loop+0x25/0x80 [ 143.782963][ T8299] ? clear_bhb_loop+0x25/0x80 [ 143.783005][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.783027][ T8299] RIP: 0033:0x7f397944e969 [ 143.783044][ T8299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.783097][ T8299] RSP: 002b:00007f3977ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.783117][ T8299] RAX: ffffffffffffffda RBX: 00007f3979675fa0 RCX: 00007f397944e969 [ 143.783131][ T8299] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 143.783144][ T8299] RBP: 00007f3977ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.783164][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.783177][ T8299] R13: 0000000000000000 R14: 00007f3979675fa0 R15: 00007ffca0eac598 [ 143.783200][ T8299] [ 144.169679][ T8309] loop0: detected capacity change from 0 to 764 [ 144.180883][ T8307] loop4: detected capacity change from 0 to 1024 [ 144.193124][ T8307] EXT4-fs: test_dummy_encryption option not supported [ 144.211381][ T8307] loop4: detected capacity change from 0 to 128 [ 144.270586][ T8309] netlink: 'syz.0.1546': attribute type 11 has an invalid length. [ 144.330659][ T8315] loop5: detected capacity change from 0 to 128 [ 144.359743][ T8317] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1549'. [ 144.388238][ T8321] syz.4.1542: attempt to access beyond end of device [ 144.388238][ T8321] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 144.408914][ T8321] syz.4.1542: attempt to access beyond end of device [ 144.408914][ T8321] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 144.435415][ T8321] syz.4.1542: attempt to access beyond end of device [ 144.435415][ T8321] loop4: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 144.454603][ T8321] syz.4.1542: attempt to access beyond end of device [ 144.454603][ T8321] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 144.550035][ T8321] syz.4.1542: attempt to access beyond end of device [ 144.550035][ T8321] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 144.866619][ T8326] loop6: detected capacity change from 0 to 512 [ 144.886495][ T8321] syz.4.1542: attempt to access beyond end of device [ 144.886495][ T8321] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 145.063543][ T8321] syz.4.1542: attempt to access beyond end of device [ 145.063543][ T8321] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 145.081529][ T8321] syz.4.1542: attempt to access beyond end of device [ 145.081529][ T8321] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 145.100171][ T8321] syz.4.1542: attempt to access beyond end of device [ 145.100171][ T8321] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 145.139294][ T8326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.153511][ T8326] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.313618][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.378075][ T8356] loop5: detected capacity change from 0 to 764 [ 145.411757][ T8356] netlink: 'syz.5.1560': attribute type 11 has an invalid length. [ 145.478458][ T8367] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1561'. [ 145.736315][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.777521][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.045836][ T8375] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1566'. [ 146.310270][ T8385] loop7: detected capacity change from 0 to 512 [ 146.342392][ T8385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.368121][ T8385] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.483440][ T8393] loop5: detected capacity change from 0 to 1024 [ 146.494154][ T7350] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.519820][ T8392] loop6: detected capacity change from 0 to 764 [ 146.528720][ T8393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.598831][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.612304][ T8403] loop7: detected capacity change from 0 to 128 [ 146.639691][ T8402] netlink: 'syz.6.1572': attribute type 11 has an invalid length. [ 146.640214][ T8403] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.680756][ T8406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8406 comm=syz.5.1575 [ 146.705047][ T8403] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.753379][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 146.753398][ T29] audit: type=1400 audit(1745514676.854:4810): avc: denied { read write } for pid=8405 comm="syz.5.1575" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.807207][ T29] audit: type=1400 audit(1745514676.894:4811): avc: denied { open } for pid=8405 comm="syz.5.1575" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.833396][ T29] audit: type=1400 audit(1745514676.894:4812): avc: denied { ioctl } for pid=8405 comm="syz.5.1575" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.884280][ T8403] EXT4-fs error (device loop7): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.7.1576: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 146.936961][ T8409] loop6: detected capacity change from 0 to 1024 [ 146.973071][ T8409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.010913][ T7350] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.069601][ T29] audit: type=1326 audit(1745514677.154:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 147.095827][ T29] audit: type=1326 audit(1745514677.154:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 147.123346][ T29] audit: type=1326 audit(1745514677.154:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 147.149830][ T29] audit: type=1326 audit(1745514677.154:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 147.177461][ T29] audit: type=1326 audit(1745514677.154:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3dde969 code=0x7ffc0000 [ 147.204834][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.236126][ T8414] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 147.296086][ T8421] loop5: detected capacity change from 0 to 512 [ 147.329584][ T8425] FAULT_INJECTION: forcing a failure. [ 147.329584][ T8425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.336311][ T29] audit: type=1400 audit(1745514677.434:4818): avc: denied { bind } for pid=8424 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.344006][ T8425] CPU: 1 UID: 0 PID: 8425 Comm: syz.0.1584 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 147.344114][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.344179][ T8425] Call Trace: [ 147.344186][ T8425] [ 147.344197][ T8425] dump_stack_lvl+0xf6/0x150 [ 147.345038][ T8425] dump_stack+0x15/0x1a [ 147.345062][ T8425] should_fail_ex+0x261/0x270 [ 147.345095][ T8425] should_fail+0xb/0x10 [ 147.345194][ T8425] should_fail_usercopy+0x1a/0x20 [ 147.345228][ T8425] _copy_from_user+0x1c/0xa0 [ 147.345310][ T8425] copy_msghdr_from_user+0x54/0x2b0 [ 147.345357][ T8425] ? __fget_files+0x186/0x1c0 [ 147.345389][ T8425] __sys_sendmsg+0x141/0x240 [ 147.345966][ T8425] __x64_sys_sendmsg+0x46/0x50 [ 147.346082][ T8425] x64_sys_call+0x26f3/0x2e10 [ 147.346178][ T8425] do_syscall_64+0xc9/0x1a0 [ 147.346206][ T8425] ? clear_bhb_loop+0x25/0x80 [ 147.346260][ T8425] ? clear_bhb_loop+0x25/0x80 [ 147.346287][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.346364][ T8425] RIP: 0033:0x7fd510a4e969 [ 147.346384][ T8425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.346455][ T8425] RSP: 002b:00007fd50f0b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.346480][ T8425] RAX: ffffffffffffffda RBX: 00007fd510c75fa0 RCX: 00007fd510a4e969 [ 147.346567][ T8425] RDX: 0000000000000001 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 147.346582][ T8425] RBP: 00007fd50f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.346597][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.346672][ T8425] R13: 0000000000000000 R14: 00007fd510c75fa0 R15: 00007ffc2cebbf08 [ 147.346695][ T8425] [ 147.430772][ T8421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.609596][ T8421] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.660974][ T29] audit: type=1326 audit(1745514677.724:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.7.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e2c2e969 code=0x7ffc0000 [ 147.709484][ T8442] FAULT_INJECTION: forcing a failure. [ 147.709484][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 147.726157][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.0.1588 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 147.726194][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.726211][ T8442] Call Trace: [ 147.726221][ T8442] [ 147.726233][ T8442] dump_stack_lvl+0xf6/0x150 [ 147.726266][ T8442] dump_stack+0x15/0x1a [ 147.726623][ T8442] should_fail_ex+0x261/0x270 [ 147.726656][ T8442] should_failslab+0x8f/0xb0 [ 147.726682][ T8442] kmem_cache_alloc_noprof+0x59/0x340 [ 147.726801][ T8442] ? skb_clone+0x154/0x1f0 [ 147.726877][ T8442] skb_clone+0x154/0x1f0 [ 147.726906][ T8442] __netlink_deliver_tap+0x2bd/0x4f0 [ 147.726962][ T8442] netlink_unicast+0x69e/0x6c0 [ 147.727045][ T8442] netlink_sendmsg+0x609/0x720 [ 147.727068][ T8442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.727155][ T8442] __sock_sendmsg+0x140/0x180 [ 147.727261][ T8442] ____sys_sendmsg+0x350/0x4e0 [ 147.727311][ T8442] __sys_sendmsg+0x1a0/0x240 [ 147.727357][ T8442] __x64_sys_sendmsg+0x46/0x50 [ 147.727440][ T8442] x64_sys_call+0x26f3/0x2e10 [ 147.727466][ T8442] do_syscall_64+0xc9/0x1a0 [ 147.727497][ T8442] ? clear_bhb_loop+0x25/0x80 [ 147.727598][ T8442] ? clear_bhb_loop+0x25/0x80 [ 147.727624][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.727651][ T8442] RIP: 0033:0x7fd510a4e969 [ 147.727670][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.727726][ T8442] RSP: 002b:00007fd50f096038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.727745][ T8442] RAX: ffffffffffffffda RBX: 00007fd510c76080 RCX: 00007fd510a4e969 [ 147.727757][ T8442] RDX: 0000000024000880 RSI: 00002000000000c0 RDI: 0000000000000007 [ 147.727768][ T8442] RBP: 00007fd50f096090 R08: 0000000000000000 R09: 0000000000000000 [ 147.727837][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.727851][ T8442] R13: 0000000000000000 R14: 00007fd510c76080 R15: 00007ffc2cebbf08 [ 147.727873][ T8442] [ 148.001217][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.539030][ T8451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8451 comm=syz.0.1592 [ 148.572397][ T8453] loop4: detected capacity change from 0 to 512 [ 148.589903][ T8453] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 148.619272][ T8453] EXT4-fs (loop4): invalid journal inode [ 148.625570][ T8453] EXT4-fs (loop4): can't get journal size [ 148.633818][ T8453] EXT4-fs (loop4): 1 truncate cleaned up [ 148.773215][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 148.792677][ T8461] loop4: detected capacity change from 0 to 256 [ 148.951139][ T8478] loop4: detected capacity change from 0 to 512 [ 148.952278][ T8476] loop5: detected capacity change from 0 to 512 [ 148.986703][ T8476] EXT4-fs: Ignoring removed nobh option [ 149.003057][ T8478] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.021414][ T8481] loop0: detected capacity change from 0 to 256 [ 149.040354][ T8481] msdos: Bad value for 'gid' [ 149.045914][ T8481] msdos: Bad value for 'gid' [ 149.051410][ T8476] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.1601: corrupted inode contents [ 149.085789][ T8476] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.1601: mark_inode_dirty error [ 149.148085][ T8476] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.1601: corrupted inode contents [ 149.168270][ T8476] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.1601: mark_inode_dirty error [ 149.183594][ T8476] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1601: Failed to acquire dquot type 0 [ 149.185319][ T8491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8491 comm=syz.4.1605 [ 149.271254][ T8476] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1601: corrupted inode contents [ 149.355979][ T8476] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #16: comm syz.5.1601: mark_inode_dirty error [ 149.395307][ T8476] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1601: corrupted inode contents [ 149.418791][ T8476] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1601: mark_inode_dirty error [ 149.653401][ T8476] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1601: corrupted inode contents [ 149.873423][ T8476] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 149.967425][ T8476] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1601: corrupted inode contents [ 150.099404][ T8476] EXT4-fs error (device loop5): ext4_truncate:4255: inode #16: comm syz.5.1601: mark_inode_dirty error [ 150.134920][ T8497] loop4: detected capacity change from 0 to 512 [ 150.148315][ T8476] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 150.190610][ T8476] EXT4-fs (loop5): 1 truncate cleaned up [ 150.217825][ T8476] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.235564][ T8497] EXT4-fs (loop4): 1 orphan inode deleted [ 150.253068][ T8497] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.320589][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 150.412345][ T8503] loop5: detected capacity change from 0 to 256 [ 150.475044][ T3309] ================================================================== [ 150.483778][ T3309] BUG: KCSAN: data-race in pollwake / pollwake [ 150.490590][ T3309] [ 150.493379][ T3309] write to 0xffffc9000156f9d0 of 4 bytes by task 7341 on cpu 1: [ 150.501825][ T3309] pollwake+0xc1/0x110 [ 150.506273][ T3309] __wake_up_sync_key+0x51/0x80 [ 150.511410][ T3309] anon_pipe_write+0x9df/0xb10 [ 150.516684][ T3309] vfs_write+0x79b/0x950 [ 150.521085][ T3309] ksys_write+0xeb/0x1b0 [ 150.525692][ T3309] __x64_sys_write+0x42/0x50 [ 150.530663][ T3309] x64_sys_call+0x2a45/0x2e10 [ 150.535666][ T3309] do_syscall_64+0xc9/0x1a0 [ 150.541093][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.547956][ T3309] [ 150.550685][ T3309] write to 0xffffc9000156f9d0 of 4 bytes by task 3309 on cpu 0: [ 150.558584][ T3309] pollwake+0xc1/0x110 [ 150.563124][ T3309] __wake_up_sync_key+0x51/0x80 [ 150.568504][ T3309] anon_pipe_write+0x9df/0xb10 [ 150.573984][ T3309] vfs_write+0x79b/0x950 [ 150.578716][ T3309] ksys_write+0xeb/0x1b0 [ 150.583193][ T3309] __x64_sys_write+0x42/0x50 [ 150.588352][ T3309] x64_sys_call+0x2a45/0x2e10 [ 150.593249][ T3309] do_syscall_64+0xc9/0x1a0 [ 150.597994][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.604361][ T3309] [ 150.606960][ T3309] value changed: 0x00000000 -> 0x00000001 [ 150.613363][ T3309] [ 150.616223][ T3309] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to send rpc fd=3 want=31288 sent=0 n=-1 (errno 32: Broken pipe) [ 150.623281][ T3309] CPU: 0 UID: 0 PID: 3309 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 150.637409][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.649289][ T3309] ================================================================== [ 151.190993][ T4344] bridge_slave_1: left promiscuous mode [ 151.197143][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.219013][ T4344] bridge_slave_0: left promiscuous mode [ 151.225912][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.360025][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.369775][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.379464][ T4344] bond0 (unregistering): Released all slaves [ 151.411665][ T4344] hsr_slave_0: left promiscuous mode [ 151.417354][ T4344] hsr_slave_1: left promiscuous mode [ 151.423648][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.431740][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.469683][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 151.480004][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 151.780782][ T4344] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.839788][ T4344] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.889886][ T4344] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.959499][ T4344] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.978853][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 151.978868][ T29] audit: type=1400 audit(1745514682.084:4927): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 152.010306][ T29] audit: type=1400 audit(1745514682.084:4928): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 152.251892][ T4344] bridge_slave_1: left allmulticast mode [ 152.258500][ T4344] bridge_slave_1: left promiscuous mode [ 152.265303][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.273758][ T4344] bridge_slave_0: left allmulticast mode [ 152.280366][ T4344] bridge_slave_0: left promiscuous mode [ 152.288240][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.297659][ T4344] bridge_slave_1: left allmulticast mode [ 152.304223][ T4344] bridge_slave_1: left promiscuous mode [ 152.310901][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.319777][ T4344] bridge_slave_0: left allmulticast mode [ 152.326079][ T4344] bridge_slave_0: left promiscuous mode [ 152.333921][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.520549][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.531402][ T4344] bond0 (unregistering): Released all slaves [ 152.542261][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.552248][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.562419][ T4344] bond0 (unregistering): Released all slaves [ 152.621898][ T4344] tipc: Left network mode [ 152.632217][ T4344] hsr_slave_0: left promiscuous mode [ 152.641433][ T4344] hsr_slave_1: left promiscuous mode [ 152.648589][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.659122][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.668511][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.678420][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.689438][ T4344] hsr_slave_0: left promiscuous mode [ 152.695338][ T4344] hsr_slave_1: left promiscuous mode [ 152.702260][ T4344] batman_adv: batadv0: Interface deactivated: dummy0 [ 152.709350][ T4344] batman_adv: batadv0: Removing interface: dummy0 [ 152.717595][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.725770][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.737713][ T4344] veth1_macvtap: left promiscuous mode [ 152.743599][ T4344] veth0_macvtap: left promiscuous mode [ 152.749485][ T4344] veth1_vlan: left promiscuous mode [ 152.755170][ T4344] veth0_vlan: left promiscuous mode [ 152.829031][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 152.841841][ T4344] team0 (unregistering): Port device team_slave_0 removed