last executing test programs: 4m50.550890173s ago: executing program 1 (id=2): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 4m50.384821356s ago: executing program 1 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x310) 4m50.11010172s ago: executing program 1 (id=12): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4040001) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5c39, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000000, 0x1}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x1}, 0x18) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r3, 0xa) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f00000008c0)={0x0, 0x0, {0x0, 0x0, 0xffffffff}, 0x41}) sendmsg$inet6(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20048014}, 0x4040080) 4m50.009554891s ago: executing program 1 (id=15): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x0, 0x2, 0x8, 0xffffffffffffdfff}) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) creat(&(0x7f0000000000)='./file1\x00', 0x8) 4m49.46049765s ago: executing program 1 (id=23): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) (fail_nth: 13) 4m47.022452228s ago: executing program 1 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1100, 0x5dd8, 0x0, 0x5, 0x3, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x31bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m47.022106198s ago: executing program 32 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1100, 0x5dd8, 0x0, 0x5, 0x3, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x31bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m45.117290488s ago: executing program 0 (id=61): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0, @void, @value}, 0x94) r1 = socket(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000080)='./file0\x00', r3}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') 4m44.889665801s ago: executing program 0 (id=64): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) 4m44.856361721s ago: executing program 0 (id=65): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000002030500001600000000000000000000090002"], 0x20}}, 0x0) (fail_nth: 2) 4m44.582563236s ago: executing program 0 (id=68): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000e7d08e820"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffedd) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@user_xattr}, {@nomblk_io_submit}]}, 0x2, 0xbca, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRqu1bKteuZRS91KVUmwoXUsuMrUp1C4uvfQQSK4BC3llhNYfSAqOZB1WyT8QkpwDuQSSmIQc4rMvCck1l8S+JuQQMEGxEgghUZj9kBRrV5KjXY2Rfz94Ne8770jP8+ygnXlhZwN4Yg1nP9KIYxFxMYkoNfenEVGs9wYiao3jVpYXJ75bXpxIYnX16a+TSCLiwfLiROtvJc3t4eZgICI++U8Sv31xc9zZ+YXp8Wq1MtMcn5y7cv3k7PzC36eujF+uXK5cHT39z7FTY6dHzox1rdbvPz93+9s//+/L2g9v/Xjrm1feSOJcDDbnNtbRLcMxvPaabFSIiPFuB8tJX7OejXUmhW1+Ke1xUgAAdJRuuIf7fZSiL9Zv3krxwae5JgcAAAB0xWpfxCoAAACwzyXW/wAAALDPtT4H8GB5caLV8v1Ewt66fz4ihhr1rzRbY6YQtfp2IPoj4tCDJDY+1po0fm3XhiPii3tn3s1a9Og55K3UliLiD+3Of1Kvf6j+FPfm+tOIGOlC/OGHxm3q3+5p4l3ZTf3nuhB/B/UDQNfdOd+4kG2+/qVr9z/R5vpXaHPt+jXyvv617v9WNt3/rdff1+H+76kdxrj55ms3Os1l9f/r9n/fabUsfrbdVVGP4P5SxB8L7epP1upPOtR/cYcxSj/dqHSay7v+1dcjjkf7+luSrb+f6OTkVLUy0vjZNsbSx2Nvd4qfd/3Z+T/Uof7W9z91Ov/Xdxjj2QsX3tu08956d+v606+KyTP1XrG55/nxubmZ0Yhi8v/N+09tnUvrmNbfyOo/8Zet///b1Z+9J9Sar0O2FlhqbrPxCw/F/Petm+93yqe1/svz/F/qcP431v9RYfP5f2mHMf764csnOs1tXP9mLYvfWgsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEsaEYORpOW1fpqWyxGHI+J3cSitXpud+9vkteeuXsrmIoaiP52cqlZGIqLUGCfZeLTeXx+femj8j4g4GhGvlg7Wx+WJa9VLeRcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAmsMRMRhJWo6INCJWSmlaLuedFQAAANB1Q3knAAAAAPSc9T8AAADsf9b/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NjRP925m0RE7ezBessUm3P9uWYG9FqadwJAbvryTgDITSHvBIDcPOIa3+0C7DdHViPZ5pCBjjMHup4OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+v48fu3E0ionb2YL1lis25/lwzA3otzTsBIDd9W00W9i4PYO/5F4cnlzU+kGwzP7B+TO2XMwd6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj5/BekvSckQUm/vK5YjfRMRQ9CeTU9XKSEQciYjPSv0HsvFozjkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQfbPzC9Pj1WplJuuk0eys7dFZ7ySNV6z2uOSjs8tOMfYuVuxhrO508n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7PzC9Pj1WplZjbvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8zc4vTI9Xq5WZHnbyrhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPz8HAAA///KyQqg") r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, 0x0, 0x0) set_robust_list(&(0x7f0000000400)={0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x0, r9}, 0x18) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x3ffff) sendfile(r10, r9, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 4m42.870777632s ago: executing program 0 (id=76): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = creat(0x0, 0xecf86c37d53048ec) fchown(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688", 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, 0x0, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r9}, 0x18) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000010) r10 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xcc501, 0x0) preadv(r11, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/102399, 0x18fff}], 0x1, 0xfffffff8, 0x0) ftruncate(r10, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r7, 0x1000000) 4m41.917305297s ago: executing program 0 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x10000, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x802}, 0xffffffffffffffff, 0x800, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socket(0x22, 0x2, 0x1) r5 = syz_io_uring_setup(0x6d0c, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x184d, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) write$selinux_validatetrans(r6, &(0x7f00000002c0)={'system_u:object_r:ipmi_device_t:s0', 0x20, 'system_u:object_r:init_var_run_t:s0', 0x20, 0x2, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r11) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="007f1cbe80e000009b3a740fa4122a983e7603da1265ddb9e21b8a5f1200"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m41.869204918s ago: executing program 33 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x10000, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x802}, 0xffffffffffffffff, 0x800, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socket(0x22, 0x2, 0x1) r5 = syz_io_uring_setup(0x6d0c, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x184d, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) write$selinux_validatetrans(r6, &(0x7f00000002c0)={'system_u:object_r:ipmi_device_t:s0', 0x20, 'system_u:object_r:init_var_run_t:s0', 0x20, 0x2, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r11) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="007f1cbe80e000009b3a740fa4122a983e7603da1265ddb9e21b8a5f1200"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m42.920319551s ago: executing program 4 (id=2945): renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 1m42.872993852s ago: executing program 4 (id=2949): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x0, 0x9dff, 0x1, "0007edeb00cbe600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300"], 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf) syz_read_part_table(0x60e, &(0x7f0000000780)="$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") ioprio_set$pid(0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="8cc7ade2f7ffffffffffa49c1da9fd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x1000000) 1m42.472228818s ago: executing program 4 (id=2960): r0 = inotify_init() inotify_rm_watch(r0, 0x0) 1m42.397727889s ago: executing program 4 (id=2961): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x11320, 0x87, 0x3, 0x5, 0x0, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m42.261525701s ago: executing program 4 (id=2964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1m39.807039129s ago: executing program 4 (id=2998): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14"], 0x28}}, 0x40) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40)=[{r3}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 1m39.78899253s ago: executing program 34 (id=2998): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14"], 0x28}}, 0x40) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40)=[{r3}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 2.222931726s ago: executing program 3 (id=4585): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 2.165667897s ago: executing program 3 (id=4586): syz_read_part_table(0x105d, &(0x7f0000001800)="$eJzszyFuAlEUBdDbTjrTcfWVdZUINIIdEDRbYS3IMewEzSqQJBiG/OGzBUCcI35y38v9yQsv9d+lTX/Yz2ruk0WSbgof5Rmre1ztHs1lxibteC3T5lImP3Xz+zf1av80T/L1PW22n8m5/DiUdNysh6ceCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv6hYAAP//Gh4ZSQ==") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0xb}, @loopback}, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) 2.135843207s ago: executing program 3 (id=4589): lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000120000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014000000b70300000000009f366c00850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) connect$inet(r5, &(0x7f0000000680)={0x2, 0x4e20, @private=0xa010101}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='pvfs2\x00', 0x60406, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES8=r7, @ANYRES64=r6, @ANYRES16=r2, @ANYRES8=0x0, @ANYRES8=r4], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r10, 0x0) connect$unix(r10, &(0x7f0000fce000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r12 = accept(r11, 0x0, 0x0) sendto$inet6(r12, &(0x7f00000002c0)='S', 0x1, 0x404c810, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000002c0)={{0x40, 0x1}, 0x100, './file0\x00'}) 1.446235588s ago: executing program 2 (id=4603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000010000000000"], 0x48) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="f5", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010029c170000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003007866726d3000000000000000000000001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005a00010025bd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0xd}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r8 = syz_open_pts(r7, 0x141601) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback, 0xd}, 0x1c) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x5, 0x41000000}, {&(0x7f0000000680)="6ed4d798ffef8f4558b7eb0dd0ebe2c14583944a6e6822ea9f446eb41b7ebc892225291e24c88e1a757574f4dad7233272888500b6354beec73d195658b8c48a5a8f41e45735c5f7f92ed9189e5771148f8b23d38980d0900f48417a441c1d844de0581a4d1c9a308b156b9698b76dc80d3d7289ee794907f30f9f3c86dd6f4156a6c9efcc1922570e4e2f7cc6a8b85253ac13ae31fe179df1aee8545b8f1fe14d76eb351cc751d0cd7beee450b826364302104eac57ca1793463d9ad92967c09d03ecbe8e8e3edc064ba1a6ac8d699cc601b17b581d136d", 0xd8, 0x5, 0xfffffffffffffffc}], 0xa0000) socket$inet6_tcp(0xa, 0x1, 0x0) 1.221621151s ago: executing program 3 (id=4610): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x0, 0x9dff, 0x1, "0007edeb00cbe600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400"], 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf) 988.730255ms ago: executing program 7 (id=4616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 861.670377ms ago: executing program 5 (id=4618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) getrusage(0x1, &(0x7f0000000300)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x13, 0x0, 0x7ffc1ffc}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 861.114647ms ago: executing program 7 (id=4619): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x587, &(0x7f0000000940)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x765, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) poll(0x0, 0x0, 0x7) (async) poll(0x0, 0x0, 0x7) unshare(0x2c000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='sched_kthread_work_execute_start\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x10, 0x3, 0x7c27) 695.56358ms ago: executing program 5 (id=4621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r4 = io_uring_setup(0x60fa, &(0x7f0000000a40)={0x0, 0xbc12, 0x2, 0xfffffffe, 0x385}) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) listen(r5, 0x4) close_range(r4, r5, 0x0) 653.58832ms ago: executing program 7 (id=4622): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1) 651.27811ms ago: executing program 6 (id=4623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(r2) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) 609.639731ms ago: executing program 7 (id=4624): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2a002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x20, 0x2000, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x300, 0x0}, 0x10000) 574.384491ms ago: executing program 6 (id=4625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x4000000a, 0x0) 532.965062ms ago: executing program 2 (id=4626): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @remote}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x20) 505.893152ms ago: executing program 2 (id=4627): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 451.255963ms ago: executing program 2 (id=4628): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000240)="fe179dd0d9e0b9cc6153e158ea48e564", 0x10) 450.911723ms ago: executing program 2 (id=4629): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @remote}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x20) 450.146643ms ago: executing program 2 (id=4630): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000c00)=""/218, 0xda}], 0x1}, 0x40000001) 399.112164ms ago: executing program 5 (id=4631): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x22, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4045}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r4], 0x7c}, 0x1, 0x0, 0x0, 0x20044091}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000280)=0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1a, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000400bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r7], &(0x7f0000000880)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) prlimit64(r9, 0xe, &(0x7f0000000300)={0x155f186a, 0x8}, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x2000000000000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000080), &(0x7f0000000200)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r10}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r11) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="da273b27e8cbce061800e0a38993d26dd239b46ce55baa012f8892956d62cc956c31ad20d24e2f1ad0ad", @ANYRES16=r9, @ANYBLOB="59bb22bd7000e19d35f16ef2711808002b01"], 0x28}}, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x922, 0x12) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x19, 0x7a, 0xb0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad3ba56be24b73b2d025ce7e4384c45e4d0086dddf24bdd8dff3"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) 398.435034ms ago: executing program 5 (id=4632): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20311}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x59b64538e080e552}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x200}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.oom.group\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0xa, 0x12) 316.198355ms ago: executing program 7 (id=4633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kvm_mmio\x00', r1, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x80) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x2b, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000000840), 0x0, 0x406, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt(r6, 0x87e, 0xa49c, &(0x7f00000004c0)=""/123, &(0x7f0000000540)=0x7b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x1}, 0x18) openat$bsg(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r2, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x21b8}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 315.662936ms ago: executing program 7 (id=4634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x4000a9ee, 0x400, 0x100003, 0x16}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x142, 0x101b80, 0x23456}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000f8000000f8000000040000001000000000000009010000000300000008000006040000000100cf0007000000070000000500000007000000f9ffffff030000000500000006000000080000000e000000e00f0000050000007f0000000d000000480000001000000000000002000000000a0000000000000e02000000020000000200000005000013080000000d0000000b000000000400000300000081000000f103000007000000ff7f14ea65c7f0aef6af38c5231024d9ff0000090000000100004008000000010000000600000008000000030000000000000002000085070000001000000005000000060000000b00000005000000fdffffff0700000000000008050000000f000000000000090000000000300000"], &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) 315.206406ms ago: executing program 5 (id=4635): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000400)=']', 0x1, 0x800, &(0x7f0000000000)={0xa, 0x4e23, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) shutdown(r1, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 314.746085ms ago: executing program 6 (id=4636): statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 313.118066ms ago: executing program 6 (id=4637): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0xb, 0x8509) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x0, 0x0, 0xfba2, 0x8}) 224.309916ms ago: executing program 3 (id=4638): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 152.156088ms ago: executing program 3 (id=4639): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[], 0x54}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x5c, 0x0, 0x7ffbfffe}]}) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x21, 0x0, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r10) 151.315268ms ago: executing program 6 (id=4640): getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x85, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) shutdown(r1, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x1) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) 134.377588ms ago: executing program 5 (id=4641): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472796c6f636b20696f006ca57c16d2f5f8f0494a5e933113d78955cb94e9cd0967f00341a3475b010000003f3ce73c9eef5eba11ff266e6ca1573ec43c0b32b27c787a230c4007b6345ecfced25a8e14847559aafcf5c64503dc18bd7de4bb26dd6325455f82250dbbee617149df726d8548166b15c56e7e822d6a60d74432d2f8dc4b027c"], 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x3}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x80000000000}, 0x18) read(r4, &(0x7f00000019c0)=""/4097, 0x1001) 0s ago: executing program 6 (id=4642): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80180, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x4200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x1, 0x7, 0x8, 0xfffffff9, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x64, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, {[@ssrr={0x89, 0x1f, 0x97, [@loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0xa0, [@rand_addr=0x64010101]}, @noop, @ssrr={0x89, 0x23, 0x55, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @empty, @broadcast]}, @rr={0x7, 0x17, 0x75, [@multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @lsrr={0x83, 0x23, 0xf1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @loopback, @empty, @loopback, @private=0xa010100]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x1, 0x9, "d60f481b8710c4"}, {0x2, 0x7, "b3fa5a2b2a"}, {0x2, 0x3, "04"}, {0x0, 0x6, "13e11eb7"}, {0x5, 0xb, "5de3a93268c21b0e6e"}, {0x2, 0x5, "80a125"}]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=r2, 0x5, 0x1, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000380), &(0x7f0000000440)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=r2, 0x5, 0x1, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000380), &(0x7f0000000440)=[0x0, 0x0]}, 0x40) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0), &(0x7f0000000040)) (async) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[], 0x20) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$kcm(0x29, 0x2, 0x0) read$nci(r7, &(0x7f0000000000)=""/33, 0x21) preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000080)=""/77, 0x4d}], 0x1, 0x6, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): x7ffc0000 [ 286.420269][ T29] audit: type=1326 audit(2000000100.339:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.7.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 286.443810][ T29] audit: type=1400 audit(2000000100.405:11883): avc: denied { read } for pid=15070 comm="syz.3.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.475127][ T29] audit: type=1326 audit(2000000100.517:11884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.7.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 286.498845][ T29] audit: type=1326 audit(2000000100.517:11885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.7.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 286.593634][ T29] audit: type=1400 audit(2000000100.620:11886): avc: denied { unmount } for pid=11364 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.617394][T15076] tipc: Started in network mode [ 286.622430][T15076] tipc: Node identity 4a77da6c5eb8, cluster identity 4711 [ 286.629710][T15076] tipc: Enabled bearer , priority 0 [ 286.654632][T15081] FAULT_INJECTION: forcing a failure. [ 286.654632][T15081] name failslab, interval 1, probability 0, space 0, times 0 [ 286.655526][T15076] serio: Serial port ptm0 [ 286.667303][T15081] CPU: 1 UID: 0 PID: 15081 Comm: syz.7.3932 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 286.667341][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.667371][T15081] Call Trace: [ 286.667380][T15081] [ 286.667391][T15081] dump_stack_lvl+0xf6/0x150 [ 286.667423][T15081] dump_stack+0x15/0x1a [ 286.667445][T15081] should_fail_ex+0x261/0x270 [ 286.667480][T15081] should_failslab+0x8f/0xb0 [ 286.667571][T15081] kmem_cache_alloc_noprof+0x59/0x340 [ 286.667600][T15081] ? skb_clone+0x154/0x1f0 [ 286.667637][T15081] skb_clone+0x154/0x1f0 [ 286.667673][T15081] __netlink_deliver_tap+0x2bd/0x4f0 [ 286.667712][T15081] netlink_unicast+0x69e/0x6c0 [ 286.667768][T15081] netlink_sendmsg+0x609/0x720 [ 286.667837][T15081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.667869][T15081] __sock_sendmsg+0x140/0x180 [ 286.667893][T15081] ____sys_sendmsg+0x350/0x4e0 [ 286.667941][T15081] __sys_sendmsg+0x1a0/0x240 [ 286.668047][T15081] __x64_sys_sendmsg+0x46/0x50 [ 286.668080][T15081] x64_sys_call+0x26f3/0x2e10 [ 286.668108][T15081] do_syscall_64+0xc9/0x1c0 [ 286.668158][T15081] ? clear_bhb_loop+0x25/0x80 [ 286.668234][T15081] ? clear_bhb_loop+0x25/0x80 [ 286.668262][T15081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.668289][T15081] RIP: 0033:0x7f6c53e4e169 [ 286.668331][T15081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.668367][T15081] RSP: 002b:00007f6c524b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.668392][T15081] RAX: ffffffffffffffda RBX: 00007f6c54075fa0 RCX: 00007f6c53e4e169 [ 286.668407][T15081] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 286.668423][T15081] RBP: 00007f6c524b7090 R08: 0000000000000000 R09: 0000000000000000 [ 286.668440][T15081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.668455][T15081] R13: 0000000000000000 R14: 00007f6c54075fa0 R15: 00007fff2c3bdcf8 [ 286.668536][T15081] [ 286.875398][T15081] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.894549][T15075] tipc: Disabling bearer [ 286.988003][T15081] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.038479][T15097] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 287.060453][T15081] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.072299][T15059] dummy0 speed is unknown, defaulting to 1000 [ 287.097829][T15101] FAULT_INJECTION: forcing a failure. [ 287.097829][T15101] name failslab, interval 1, probability 0, space 0, times 0 [ 287.110542][T15101] CPU: 0 UID: 0 PID: 15101 Comm: syz.5.3938 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 287.110576][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.110636][T15101] Call Trace: [ 287.110644][T15101] [ 287.110652][T15101] dump_stack_lvl+0xf6/0x150 [ 287.110681][T15101] dump_stack+0x15/0x1a [ 287.110703][T15101] should_fail_ex+0x261/0x270 [ 287.110738][T15101] should_failslab+0x8f/0xb0 [ 287.110834][T15101] __kmalloc_cache_noprof+0x55/0x320 [ 287.110863][T15101] ? audit_log_d_path+0x8e/0x150 [ 287.110892][T15101] audit_log_d_path+0x8e/0x150 [ 287.110920][T15101] audit_log_d_path_exe+0x42/0x70 [ 287.110946][T15101] audit_log_task+0x1f1/0x250 [ 287.111002][T15101] audit_seccomp+0x68/0x130 [ 287.111026][T15101] __seccomp_filter+0x694/0x10e0 [ 287.111065][T15101] ? vfs_write+0x669/0x950 [ 287.111112][T15101] __secure_computing+0x7e/0x160 [ 287.111151][T15101] syscall_trace_enter+0xcf/0x1f0 [ 287.111266][T15101] do_syscall_64+0xaa/0x1c0 [ 287.111307][T15101] ? clear_bhb_loop+0x25/0x80 [ 287.111413][T15101] ? clear_bhb_loop+0x25/0x80 [ 287.111441][T15101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.111466][T15101] RIP: 0033:0x7fd22258e169 [ 287.111483][T15101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.111505][T15101] RSP: 002b:00007fd220bf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 287.111529][T15101] RAX: ffffffffffffffda RBX: 00007fd2227b5fa0 RCX: 00007fd22258e169 [ 287.111583][T15101] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 287.111598][T15101] RBP: 00007fd220bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 287.111613][T15101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.111628][T15101] R13: 0000000000000000 R14: 00007fd2227b5fa0 R15: 00007ffec2da6b68 [ 287.111651][T15101] [ 287.307939][T15081] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.414682][T15081] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.436005][T15106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.446962][T15081] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.455385][T15106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.471009][T15081] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.475750][ T8950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.492298][T15081] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.703345][T15116] tipc: Started in network mode [ 287.708365][T15116] tipc: Node identity 027348fce05c, cluster identity 4711 [ 287.715713][T15116] tipc: Enabled bearer , priority 0 [ 287.740706][T15116] serio: Serial port ptm1 [ 287.805777][T15115] tipc: Disabling bearer [ 287.880350][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3950'. [ 287.894284][T15127] FAULT_INJECTION: forcing a failure. [ 287.894284][T15127] name failslab, interval 1, probability 0, space 0, times 0 [ 287.907009][T15127] CPU: 1 UID: 0 PID: 15127 Comm: syz.7.3950 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 287.907042][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.907104][T15127] Call Trace: [ 287.907110][T15127] [ 287.907118][T15127] dump_stack_lvl+0xf6/0x150 [ 287.907209][T15127] dump_stack+0x15/0x1a [ 287.907227][T15127] should_fail_ex+0x261/0x270 [ 287.907256][T15127] should_failslab+0x8f/0xb0 [ 287.907355][T15127] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 287.907381][T15127] ? __alloc_skb+0x10d/0x320 [ 287.907420][T15127] __alloc_skb+0x10d/0x320 [ 287.907449][T15127] netlink_alloc_large_skb+0xad/0xe0 [ 287.907503][T15127] netlink_sendmsg+0x3da/0x720 [ 287.907538][T15127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.907609][T15127] __sock_sendmsg+0x140/0x180 [ 287.907701][T15127] ____sys_sendmsg+0x350/0x4e0 [ 287.907739][T15127] __sys_sendmmsg+0x22a/0x4b0 [ 287.907858][T15127] __x64_sys_sendmmsg+0x57/0x70 [ 287.907942][T15127] x64_sys_call+0x2b53/0x2e10 [ 287.908013][T15127] do_syscall_64+0xc9/0x1c0 [ 287.908062][T15127] ? clear_bhb_loop+0x25/0x80 [ 287.908086][T15127] ? clear_bhb_loop+0x25/0x80 [ 287.908112][T15127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.908213][T15127] RIP: 0033:0x7f6c53e4e169 [ 287.908271][T15127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.908294][T15127] RSP: 002b:00007f6c524b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 287.908317][T15127] RAX: ffffffffffffffda RBX: 00007f6c54075fa0 RCX: 00007f6c53e4e169 [ 287.908332][T15127] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 287.908347][T15127] RBP: 00007f6c524b7090 R08: 0000000000000000 R09: 0000000000000000 [ 287.908361][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.908375][T15127] R13: 0000000000000000 R14: 00007f6c54075fa0 R15: 00007fff2c3bdcf8 [ 287.908468][T15127] [ 288.180132][T15137] loop7: detected capacity change from 0 to 128 [ 288.195878][T15137] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.211966][T15137] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.268792][T12607] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.305688][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3959'. [ 288.373673][T15149] tipc: Enabled bearer , priority 0 [ 288.393486][T15149] serio: Serial port ptm1 [ 288.450612][T15148] tipc: Disabling bearer [ 288.770659][T15180] netlink: 'syz.3.3973': attribute type 1 has an invalid length. [ 288.778482][T15180] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3973'. [ 288.932769][T15186] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.966036][T15190] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.996795][T15186] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.013065][T15192] FAULT_INJECTION: forcing a failure. [ 289.013065][T15192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.026394][T15192] CPU: 1 UID: 0 PID: 15192 Comm: syz.6.3978 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 289.026426][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.026441][T15192] Call Trace: [ 289.026448][T15192] [ 289.026456][T15192] dump_stack_lvl+0xf6/0x150 [ 289.026483][T15192] dump_stack+0x15/0x1a [ 289.026540][T15192] should_fail_ex+0x261/0x270 [ 289.026597][T15192] should_fail+0xb/0x10 [ 289.026625][T15192] should_fail_usercopy+0x1a/0x20 [ 289.026671][T15192] _copy_from_user+0x1c/0xa0 [ 289.026708][T15192] copy_msghdr_from_user+0x54/0x2b0 [ 289.026763][T15192] ? __fget_files+0x186/0x1c0 [ 289.026789][T15192] __sys_sendmsg+0x141/0x240 [ 289.026838][T15192] __x64_sys_sendmsg+0x46/0x50 [ 289.026864][T15192] x64_sys_call+0x26f3/0x2e10 [ 289.026977][T15192] do_syscall_64+0xc9/0x1c0 [ 289.027007][T15192] ? clear_bhb_loop+0x25/0x80 [ 289.027031][T15192] ? clear_bhb_loop+0x25/0x80 [ 289.027106][T15192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.027126][T15192] RIP: 0033:0x7f546d66e169 [ 289.027141][T15192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.027197][T15192] RSP: 002b:00007f546bcb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.027219][T15192] RAX: ffffffffffffffda RBX: 00007f546d896080 RCX: 00007f546d66e169 [ 289.027233][T15192] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000005 [ 289.027249][T15192] RBP: 00007f546bcb6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.027261][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.027272][T15192] R13: 0000000000000000 R14: 00007f546d896080 R15: 00007ffd211d7458 [ 289.027291][T15192] [ 289.213645][T15190] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.266311][T15186] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.295979][T15190] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.338188][T15186] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.393063][T15190] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.473012][T15190] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.485628][T15190] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.497833][T15190] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.510778][T15190] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.656371][T15214] tipc: Started in network mode [ 289.661416][T15214] tipc: Node identity eec62b03cf24, cluster identity 4711 [ 289.668587][T15214] tipc: Enabled bearer , priority 0 [ 289.677003][T15214] serio: Serial port ptm1 [ 289.734276][T15213] tipc: Disabling bearer [ 289.756634][T15217] netlink: 'syz.3.3989': attribute type 33 has an invalid length. [ 289.764601][T15217] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3989'. [ 289.774161][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3989'. [ 289.922763][T15235] cgroup: fork rejected by pids controller in /syz3 [ 289.982691][T15239] loop6: detected capacity change from 0 to 512 [ 289.989400][T15239] EXT4-fs: Ignoring removed nobh option [ 290.012259][T15239] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.3999: corrupted inode contents [ 290.024451][T15239] EXT4-fs (loop6): Remounting filesystem read-only [ 290.031268][T15239] EXT4-fs (loop6): 1 truncate cleaned up [ 290.037259][T15239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.049863][T15239] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.062074][ T8952] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 290.072709][ T8952] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 290.080836][T15239] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 290.083249][ T8952] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 290.092619][T15239] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 290.111592][T15239] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 290.122157][T15239] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 290.131280][T15239] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 290.183599][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.208839][T15245] tipc: Enabled bearer , priority 0 [ 290.217884][ T8957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.230484][T15245] serio: Serial port ptm1 [ 290.287098][T15243] tipc: Disabling bearer [ 290.314850][T15244] dummy0 speed is unknown, defaulting to 1000 [ 290.428221][T15269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.452637][T15269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.536733][T15244] chnl_net:caif_netlink_parms(): no params data found [ 290.591723][T15278] loop6: detected capacity change from 0 to 512 [ 290.605559][T15244] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.612823][T15244] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.629464][T15244] bridge_slave_0: entered allmulticast mode [ 290.637398][T15244] bridge_slave_0: entered promiscuous mode [ 290.644924][T15278] EXT4-fs (loop6): 1 orphan inode deleted [ 290.645206][T15244] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.657855][T15244] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.665267][T15244] bridge_slave_1: entered allmulticast mode [ 290.667377][T15278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.671888][T15244] bridge_slave_1: entered promiscuous mode [ 290.689795][ T8950] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 290.702806][T15278] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.734112][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.745352][T15244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.756292][T15244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.769111][T15286] FAULT_INJECTION: forcing a failure. [ 290.769111][T15286] name failslab, interval 1, probability 0, space 0, times 0 [ 290.781909][T15286] CPU: 1 UID: 0 PID: 15286 Comm: syz.6.4012 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 290.781938][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.781950][T15286] Call Trace: [ 290.781957][T15286] [ 290.781966][T15286] dump_stack_lvl+0xf6/0x150 [ 290.781998][T15286] dump_stack+0x15/0x1a [ 290.782019][T15286] should_fail_ex+0x261/0x270 [ 290.782053][T15286] should_failslab+0x8f/0xb0 [ 290.782100][T15286] kmem_cache_alloc_noprof+0x59/0x340 [ 290.782126][T15286] ? security_inode_alloc+0x37/0x100 [ 290.782191][T15286] security_inode_alloc+0x37/0x100 [ 290.782227][T15286] inode_init_always_gfp+0x4a2/0x4f0 [ 290.782264][T15286] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 290.782290][T15286] alloc_inode+0x86/0x170 [ 290.782385][T15286] new_inode+0x1e/0xe0 [ 290.782441][T15286] shmem_get_inode+0x24e/0x730 [ 290.782478][T15286] __shmem_file_setup+0x127/0x1f0 [ 290.782513][T15286] shmem_file_setup+0x3b/0x50 [ 290.782580][T15286] __se_sys_memfd_create+0x2e1/0x5a0 [ 290.782640][T15286] __x64_sys_memfd_create+0x31/0x40 [ 290.782671][T15286] x64_sys_call+0x1163/0x2e10 [ 290.782701][T15286] do_syscall_64+0xc9/0x1c0 [ 290.782737][T15286] ? clear_bhb_loop+0x25/0x80 [ 290.782763][T15286] ? clear_bhb_loop+0x25/0x80 [ 290.782786][T15286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.782806][T15286] RIP: 0033:0x7f546d66e169 [ 290.782821][T15286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.782899][T15286] RSP: 002b:00007f546bcd6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 290.782920][T15286] RAX: ffffffffffffffda RBX: 00000000000004a3 RCX: 00007f546d66e169 [ 290.782935][T15286] RDX: 00007f546bcd6ef0 RSI: 0000000000000000 RDI: 00007f546d6f1404 [ 290.782949][T15286] RBP: 00002000000005c0 R08: 00007f546bcd6bb7 R09: 00007f546bcd6e40 [ 290.782961][T15286] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 290.782972][T15286] R13: 00007f546bcd6ef0 R14: 00007f546bcd6eb0 R15: 0000200000000300 [ 290.782992][T15286] [ 290.788031][T15280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4011'. [ 290.820497][T15288] loop6: detected capacity change from 0 to 1024 [ 291.013242][T15244] team0: Port device team_slave_0 added [ 291.020479][T15244] team0: Port device team_slave_1 added [ 291.025982][T15288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.030125][T15288] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 291.055321][T15288] EXT4-fs (loop6): Remounting filesystem read-only [ 291.063366][T15244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.070410][T15244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.096413][T15244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.110957][T15244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.118099][T15244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.144077][T15244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.173219][T15244] hsr_slave_0: entered promiscuous mode [ 291.179639][T15244] hsr_slave_1: entered promiscuous mode [ 291.185734][T15244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.193349][T15244] Cannot create hsr debugfs directory [ 291.247641][T15244] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.282038][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4014'. [ 291.282456][T15244] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.291169][T15293] FAULT_INJECTION: forcing a failure. [ 291.291169][T15293] name failslab, interval 1, probability 0, space 0, times 0 [ 291.313572][T15293] CPU: 0 UID: 0 PID: 15293 Comm: syz.2.4014 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 291.313606][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.313622][T15293] Call Trace: [ 291.313629][T15293] [ 291.313638][T15293] dump_stack_lvl+0xf6/0x150 [ 291.313668][T15293] dump_stack+0x15/0x1a [ 291.313689][T15293] should_fail_ex+0x261/0x270 [ 291.313767][T15293] should_failslab+0x8f/0xb0 [ 291.313803][T15293] __kmalloc_noprof+0xad/0x410 [ 291.313827][T15293] ? nfc_llcp_build_tlv+0xae/0x130 [ 291.313857][T15293] nfc_llcp_build_tlv+0xae/0x130 [ 291.313943][T15293] nfc_llcp_build_gb+0xea/0x2f0 [ 291.313970][T15293] nfc_llcp_general_bytes+0xe0/0x1e0 [ 291.313996][T15293] nfc_dep_link_up+0xff/0x290 [ 291.314025][T15293] nfc_genl_dep_link_up+0xe3/0x120 [ 291.314116][T15293] genl_rcv_msg+0x69b/0x6f0 [ 291.314155][T15293] ? __pfx_nfc_genl_dep_link_up+0x10/0x10 [ 291.314187][T15293] ? should_fail_ex+0x31/0x270 [ 291.314217][T15293] ? __rcu_read_unlock+0x4e/0x70 [ 291.314259][T15293] netlink_rcv_skb+0x12f/0x230 [ 291.314284][T15293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.314322][T15293] genl_rcv+0x28/0x40 [ 291.314355][T15293] netlink_unicast+0x605/0x6c0 [ 291.314447][T15293] netlink_sendmsg+0x609/0x720 [ 291.314482][T15293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.314579][T15293] __sock_sendmsg+0x140/0x180 [ 291.314617][T15293] ____sys_sendmsg+0x350/0x4e0 [ 291.314655][T15293] __sys_sendmsg+0x1a0/0x240 [ 291.314699][T15293] __x64_sys_sendmsg+0x46/0x50 [ 291.314729][T15293] x64_sys_call+0x26f3/0x2e10 [ 291.314756][T15293] do_syscall_64+0xc9/0x1c0 [ 291.314852][T15293] ? clear_bhb_loop+0x25/0x80 [ 291.314918][T15293] ? clear_bhb_loop+0x25/0x80 [ 291.314939][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.314960][T15293] RIP: 0033:0x7ff31145e169 [ 291.314977][T15293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.314998][T15293] RSP: 002b:00007ff30fac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.315021][T15293] RAX: ffffffffffffffda RBX: 00007ff311685fa0 RCX: 00007ff31145e169 [ 291.315061][T15293] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004 [ 291.315076][T15293] RBP: 00007ff30fac7090 R08: 0000000000000000 R09: 0000000000000000 [ 291.315087][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.315128][T15293] R13: 0000000000000000 R14: 00007ff311685fa0 R15: 00007ffded72b128 [ 291.315151][T15293] [ 291.316498][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.580463][ T8952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.603660][T15244] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.629130][T15186] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.635269][T15305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4020'. [ 291.646168][T15186] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.655416][T15301] tipc: Enabled bearer , priority 0 [ 291.663860][T15301] serio: Serial port ptm0 [ 291.665981][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4020'. [ 291.672855][T15186] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.677296][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4020'. [ 291.697710][T15244] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.714699][T15186] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.730064][T15308] €Â: renamed from syzkaller0 [ 291.740980][T15308] tipc: Disabling bearer [ 291.751227][T15305] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.766853][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.779648][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.808620][T15305] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.824261][T15244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.833688][T15244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.843139][T15244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.845388][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 291.845405][ T29] audit: type=1326 audit(2000000105.531:12208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 291.881804][T15244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.882932][ T29] audit: type=1326 audit(2000000105.549:12209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 291.912213][ T29] audit: type=1326 audit(2000000105.549:12210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 291.935846][ T29] audit: type=1326 audit(2000000105.549:12211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 291.959490][ T29] audit: type=1326 audit(2000000105.549:12212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 291.983056][ T29] audit: type=1326 audit(2000000105.549:12213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 292.006657][ T29] audit: type=1326 audit(2000000105.549:12214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 292.030539][ T29] audit: type=1326 audit(2000000105.549:12215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 292.054121][ T29] audit: type=1326 audit(2000000105.549:12216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 292.077751][ T29] audit: type=1326 audit(2000000105.549:12217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.7.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 292.105480][T15305] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.143371][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4025'. [ 292.159647][T15244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.176149][T15244] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.185812][T15305] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.200038][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.207184][ T8950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.227870][T15244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.238325][T15244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.251986][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.259110][ T8950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.289933][T15305] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.307606][T15305] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.320295][T15305] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.334931][T15305] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.353072][T15244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.426518][T15244] veth0_vlan: entered promiscuous mode [ 292.434985][T15244] veth1_vlan: entered promiscuous mode [ 292.458182][T15244] veth0_macvtap: entered promiscuous mode [ 292.465755][T15244] veth1_macvtap: entered promiscuous mode [ 292.478563][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.489096][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.499009][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.509526][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.519407][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.530122][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.540456][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.551003][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.560866][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.571340][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.581196][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.591708][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.601670][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.612164][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.622051][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.632520][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.643163][T15244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.656432][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.667106][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.677017][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.687593][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.697495][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.707957][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.717914][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.728472][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.738431][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.748882][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.758716][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.769163][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.779068][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.789509][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.799343][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.809883][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.819754][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.830223][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.841771][T15244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.852974][T15244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.861784][T15244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.870839][T15244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.874592][ T4773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.879577][T15244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.959744][T15353] netlink: 'syz.3.4000': attribute type 33 has an invalid length. [ 292.967710][T15353] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4000'. [ 292.987223][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.009958][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4000'. [ 293.010294][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.075521][T15362] vhci_hcd: invalid port number 15 [ 293.080840][T15362] vhci_hcd: invalid port number 15 [ 293.317204][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4043'. [ 293.431976][T15368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.441135][T15368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.562269][T15386] loop7: detected capacity change from 0 to 2048 [ 293.580842][T15386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.756275][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.780002][T15395] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4051'. [ 294.013639][T15404] loop7: detected capacity change from 0 to 512 [ 294.055103][T15404] EXT4-fs (loop7): 1 orphan inode deleted [ 294.065456][T15404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.078327][T15404] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.078571][ T390] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 294.131782][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.134825][T15410] loop6: detected capacity change from 0 to 512 [ 294.165411][T15410] EXT4-fs (loop6): 1 orphan inode deleted [ 294.172317][T15410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.185931][T15410] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.197117][ T390] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 294.240457][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.296256][T15420] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.372278][T15420] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.386116][T15422] loop6: detected capacity change from 0 to 512 [ 294.410387][T15422] EXT4-fs (loop6): 1 orphan inode deleted [ 294.418414][T15420] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.428427][ T8950] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 294.430069][T15422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.452998][T15422] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.490421][T15420] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.504618][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.813315][T15443] loop6: detected capacity change from 0 to 512 [ 294.862477][T15443] EXT4-fs: Ignoring removed nobh option [ 294.889509][T15443] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.4070: corrupted inode contents [ 295.024276][T15443] EXT4-fs (loop6): Remounting filesystem read-only [ 295.033340][T15443] EXT4-fs (loop6): 1 truncate cleaned up [ 295.045493][T15443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.076187][ T4780] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 295.086924][ T4780] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 295.100846][ T4780] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 295.148897][T15443] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.181279][T15443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 295.193201][T15443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 295.202672][T15443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 295.218546][T15443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 295.228311][T15443] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 295.240308][T15453] tipc: Started in network mode [ 295.245198][T15453] tipc: Node identity 2a8123757dba, cluster identity 4711 [ 295.252524][T15453] tipc: Enabled bearer , priority 0 [ 295.279891][T15453] €Â: renamed from syzkaller0 [ 295.286499][T15453] tipc: Disabling bearer [ 295.306838][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.351912][T15451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.374201][T15451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.445374][T15468] loop6: detected capacity change from 0 to 512 [ 295.476060][T15468] EXT4-fs (loop6): 1 orphan inode deleted [ 295.482489][T15468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.498599][ T8950] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 295.510262][T15468] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.541448][T15420] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.551649][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.567413][T15420] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.583208][T15420] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.595078][T15420] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.604023][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.756878][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4088'. [ 296.031289][T15517] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 296.039461][T15519] loop7: detected capacity change from 0 to 512 [ 296.140966][T15520] loop5: detected capacity change from 0 to 512 [ 296.148153][T15520] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 296.159178][T15519] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 296.172219][T15520] EXT4-fs (loop5): 1 truncate cleaned up [ 296.185455][T15520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.192458][T15477] dummy0 speed is unknown, defaulting to 1000 [ 296.578858][T15517] dummy0 speed is unknown, defaulting to 1000 [ 296.671406][T15524] dummy0 speed is unknown, defaulting to 1000 [ 297.001943][ T8950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.088256][T15537] loop6: detected capacity change from 0 to 128 [ 297.095212][T15537] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.108124][T15537] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.216765][ T8957] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.231232][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 297.231251][ T29] audit: type=1400 audit(2000000110.573:12446): avc: denied { remove_name } for pid=10940 comm="syz-executor" name="file0" dev="tmpfs" ino=1788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 297.264499][ T29] audit: type=1400 audit(2000000110.573:12447): avc: denied { rmdir } for pid=10940 comm="syz-executor" name="file0" dev="tmpfs" ino=1788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 297.286989][ T29] audit: type=1400 audit(2000000110.573:12448): avc: denied { rmdir } for pid=10940 comm="syz-executor" name="333" dev="tmpfs" ino=1783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 297.433195][ T29] audit: type=1326 audit(2000000110.760:12449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 297.456905][ T29] audit: type=1326 audit(2000000110.760:12450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 297.545618][ T29] audit: type=1326 audit(2000000110.760:12451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 297.552221][T15541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.569603][ T29] audit: type=1326 audit(2000000110.760:12452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 297.598970][T15541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.601198][ T29] audit: type=1326 audit(2000000110.778:12453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 297.632693][ T29] audit: type=1326 audit(2000000110.778:12454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 297.656569][ T29] audit: type=1326 audit(2000000110.778:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.6.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 297.865264][T15550] tipc: Enabled bearer , priority 0 [ 297.865758][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.875111][T15550] €Â: renamed from syzkaller0 [ 297.887646][T15550] tipc: Disabling bearer [ 298.197405][T15566] __nla_validate_parse: 1 callbacks suppressed [ 298.197427][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4121'. [ 298.269701][T15571] tipc: Enabled bearer , priority 0 [ 298.278018][T15571] €Â: renamed from syzkaller0 [ 298.284364][T15571] tipc: Disabling bearer [ 298.407066][T15580] tipc: Enabled bearer , priority 0 [ 298.419182][T15580] €Â: renamed from syzkaller0 [ 298.427207][ T8950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.444394][T15580] tipc: Disabling bearer [ 298.637811][T15590] tipc: Enabled bearer , priority 0 [ 298.650725][T15590] €Â: renamed from syzkaller0 [ 298.657329][T15590] tipc: Disabling bearer [ 298.675780][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4134'. [ 298.756807][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4138'. [ 298.770391][T15601] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4136'. [ 298.779828][T15604] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4136'. [ 298.835946][T15608] loop5: detected capacity change from 0 to 512 [ 298.884806][T15608] EXT4-fs (loop5): 1 orphan inode deleted [ 298.904099][ T390] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 298.933882][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4135'. [ 298.949097][T15608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.963035][T15608] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.052478][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.228333][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4147'. [ 299.308743][T15632] loop7: detected capacity change from 0 to 1024 [ 299.323260][T15633] can: request_module (can-proto-0) failed. [ 299.339114][T15633] loop5: detected capacity change from 0 to 512 [ 299.348607][T15633] EXT4-fs: Ignoring removed orlov option [ 299.356468][T15633] EXT4-fs error (device loop5): dx_probe:793: inode #2: comm syz.5.4148: Attempting to read directory block (0) that is past i_size (256) [ 299.390173][T15633] EXT4-fs (loop5): Remounting filesystem read-only [ 299.405587][T15633] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 299.407450][T15632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.441005][T15632] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 299.465775][T15633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.491749][T15633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4148'. [ 299.515170][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.554256][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.571193][T15606] dummy0 speed is unknown, defaulting to 1000 [ 299.742319][T15649] netlink: 'syz.3.4155': attribute type 33 has an invalid length. [ 299.750332][T15649] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4155'. [ 299.772392][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'. [ 300.500862][ T3441] page_pool_release_retry() stalled pool shutdown: id 117, 1 inflight 60 sec [ 300.631689][T15693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.655232][T15693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.759134][T15693] loop7: detected capacity change from 0 to 2048 [ 300.807261][T15693] loop7: p1 < > p4 [ 300.811854][T15693] loop7: p4 size 8388608 extends beyond EOD, truncated [ 301.433553][T15706] loop5: detected capacity change from 0 to 512 [ 301.483237][T15706] EXT4-fs (loop5): 1 orphan inode deleted [ 301.493427][T15706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.507819][ T8957] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 301.519445][T15706] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.563502][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.612427][T15722] loop7: detected capacity change from 0 to 512 [ 301.626722][T15722] EXT4-fs: Ignoring removed orlov option [ 301.655804][T15722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a81ee098, mo2=0002] [ 301.674683][T15722] System zones: 1-12 [ 301.686893][T15722] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.4181: corrupted in-inode xattr: invalid ea_ino [ 301.719290][T15722] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.4181: couldn't read orphan inode 15 (err -117) [ 301.742315][T15722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.829435][T15722] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 301.836021][T15722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.843732][T15722] vhci_hcd vhci_hcd.0: Device attached [ 301.863156][ T8957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.048564][T15755] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.075791][T15758] pim6reg: entered allmulticast mode [ 302.081770][T15758] pim6reg: left allmulticast mode [ 302.131947][ T23] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 302.162867][T15755] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.253354][T15755] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.354084][T15755] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.489554][T15755] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.501785][T15739] vhci_hcd: connection reset by peer [ 302.509577][ T4773] vhci_hcd: stop threads [ 302.513872][ T4773] vhci_hcd: release socket [ 302.518422][ T4773] vhci_hcd: disconnect device [ 302.586839][T15755] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.638470][T15755] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.685603][T15735] syz.2.4186 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 302.699997][T15735] CPU: 0 UID: 0 PID: 15735 Comm: syz.2.4186 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 302.700029][T15735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.700044][T15735] Call Trace: [ 302.700052][T15735] [ 302.700091][T15735] dump_stack_lvl+0xf6/0x150 [ 302.700119][T15735] dump_stack+0x15/0x1a [ 302.700140][T15735] dump_header+0x83/0x2d0 [ 302.700179][T15735] oom_kill_process+0x341/0x4c0 [ 302.700280][T15735] out_of_memory+0x9d1/0xc20 [ 302.700320][T15735] mem_cgroup_out_of_memory+0x13f/0x190 [ 302.700365][T15735] try_charge_memcg+0x59f/0x820 [ 302.700546][T15735] obj_cgroup_charge_pages+0xc0/0x1a0 [ 302.700572][T15735] __memcg_kmem_charge_page+0x9d/0x170 [ 302.700601][T15735] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 302.700644][T15735] alloc_pages_mpol+0xb6/0x260 [ 302.700747][T15735] alloc_pages_noprof+0xe8/0x130 [ 302.700777][T15735] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 302.700876][T15735] __kvmalloc_node_noprof+0x311/0x520 [ 302.700970][T15735] ? ip_set_alloc+0x1f/0x30 [ 302.700991][T15735] ? ip_set_alloc+0x1f/0x30 [ 302.701015][T15735] ip_set_alloc+0x1f/0x30 [ 302.701035][T15735] hash_netiface_create+0x273/0x730 [ 302.701057][T15735] ? __nla_parse+0x40/0x60 [ 302.701124][T15735] ? __pfx_hash_netiface_create+0x10/0x10 [ 302.701151][T15735] ip_set_create+0x3b6/0x970 [ 302.701264][T15735] ? __nla_parse+0x40/0x60 [ 302.701299][T15735] nfnetlink_rcv_msg+0x4ba/0x580 [ 302.701365][T15735] netlink_rcv_skb+0x12f/0x230 [ 302.701473][T15735] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 302.701533][T15735] nfnetlink_rcv+0x187/0x1610 [ 302.701685][T15735] ? __kfree_skb+0x102/0x150 [ 302.701718][T15735] ? nlmon_xmit+0x51/0x60 [ 302.701758][T15735] ? __kfree_skb+0x102/0x150 [ 302.701787][T15735] ? consume_skb+0x49/0x160 [ 302.701852][T15735] ? nlmon_xmit+0x51/0x60 [ 302.701891][T15735] ? dev_hard_start_xmit+0x3d1/0x400 [ 302.701929][T15735] ? __dev_queue_xmit+0xb76/0x20b0 [ 302.701982][T15735] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 302.702022][T15735] ? should_fail_ex+0x31/0x270 [ 302.702119][T15735] ? ref_tracker_free+0x3b8/0x420 [ 302.702160][T15735] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 302.702196][T15735] netlink_unicast+0x605/0x6c0 [ 302.702306][T15735] netlink_sendmsg+0x609/0x720 [ 302.702405][T15735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.702481][T15735] __sock_sendmsg+0x140/0x180 [ 302.702511][T15735] ____sys_sendmsg+0x350/0x4e0 [ 302.702552][T15735] __sys_sendmsg+0x1a0/0x240 [ 302.702649][T15735] __x64_sys_sendmsg+0x46/0x50 [ 302.702740][T15735] x64_sys_call+0x26f3/0x2e10 [ 302.702769][T15735] do_syscall_64+0xc9/0x1c0 [ 302.702877][T15735] ? clear_bhb_loop+0x25/0x80 [ 302.702903][T15735] ? clear_bhb_loop+0x25/0x80 [ 302.702951][T15735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.702978][T15735] RIP: 0033:0x7ff31145e169 [ 302.702997][T15735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.703020][T15735] RSP: 002b:00007ff30fac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.703044][T15735] RAX: ffffffffffffffda RBX: 00007ff311685fa0 RCX: 00007ff31145e169 [ 302.703059][T15735] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 302.703074][T15735] RBP: 00007ff3114e0a68 R08: 0000000000000000 R09: 0000000000000000 [ 302.703090][T15735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.703184][T15735] R13: 0000000000000000 R14: 00007ff311685fa0 R15: 00007ffded72b128 [ 302.703203][T15735] [ 302.703212][T15735] memory: usage 307200kB, limit 307200kB, failcnt 370 [ 302.711662][T15755] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.715755][T15735] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 302.715814][T15735] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 302.715830][T15735] Memory cgroup stats for /syz2: [ 302.723199][T15735] cache 0 [ 302.756895][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 302.756914][ T29] audit: type=1326 audit(2000000115.727:12718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f225ae9e169 code=0x7ffc0000 [ 302.761151][T15735] rss 0 [ 302.761162][T15735] shmem 0 [ 302.761171][T15735] mapped_file 0 [ 302.761180][T15735] dirty 0 [ 302.766462][ T29] audit: type=1326 audit(2000000115.755:12719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f225ae3a359 code=0x7ffc0000 [ 302.771411][T15735] writeback 0 [ 302.771422][T15735] workingset_refault_anon 103 [ 302.771433][T15735] workingset_refault_file 299 [ 302.776962][ T29] audit: type=1326 audit(2000000115.755:12720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225ae9e169 code=0x7ffc0000 [ 302.782832][T15735] swap 208896 [ 302.787626][ T29] audit: type=1326 audit(2000000115.755:12721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225ae9e169 code=0x7ffc0000 [ 302.792539][T15735] swapcached 0 [ 302.818888][ T29] audit: type=1400 audit(2000000115.792:12722): avc: denied { read write } for pid=13719 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.822340][T15735] pgpgin 291651 [ 302.822429][T15735] pgpgout 291651 [ 302.826832][ T29] audit: type=1400 audit(2000000115.792:12723): avc: denied { open } for pid=13719 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.832484][T15735] pgfault 322483 [ 302.837082][ T29] audit: type=1400 audit(2000000115.792:12724): avc: denied { ioctl } for pid=13719 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.841514][T15735] pgmajfault 1119 [ 302.841523][T15735] inactive_anon 0 [ 302.841530][T15735] active_anon 0 [ 302.841538][T15735] inactive_file 0 [ 302.841548][T15735] active_file 0 [ 302.888781][ T29] audit: type=1400 audit(2000000115.867:12725): avc: denied { create } for pid=15764 comm="syz.5.4197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.890228][T15735] unevictable 0 [ 302.895894][T15767] FAULT_INJECTION: forcing a failure. [ 302.895894][T15767] name failslab, interval 1, probability 0, space 0, times 0 [ 302.900561][T15735] hierarchical_memory_limit 314572800 [ 302.900573][T15735] hierarchical_memsw_limit 9223372036854771712 [ 302.900585][T15735] total_cache 0 [ 302.905391][T15767] CPU: 1 UID: 0 PID: 15767 Comm: syz.5.4197 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 302.905431][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.905444][T15767] Call Trace: [ 302.905501][T15767] [ 302.905510][T15767] dump_stack_lvl+0xf6/0x150 [ 302.905542][T15767] dump_stack+0x15/0x1a [ 302.905566][T15767] should_fail_ex+0x261/0x270 [ 302.905615][T15767] should_failslab+0x8f/0xb0 [ 302.905655][T15767] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 302.905686][T15767] ? __alloc_skb+0x10d/0x320 [ 302.905717][T15767] __alloc_skb+0x10d/0x320 [ 302.905805][T15767] ? slow_avc_audit+0xff/0x140 [ 302.905913][T15767] pfkey_sendmsg+0x10f/0x950 [ 302.905941][T15767] ? avc_has_perm+0x124/0x150 [ 302.906045][T15767] ? avc_has_perm+0x145/0x150 [ 302.906080][T15767] ? selinux_socket_sendmsg+0x18a/0x1c0 [ 302.906127][T15767] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 302.906207][T15767] __sock_sendmsg+0x140/0x180 [ 302.906226][T15767] ____sys_sendmsg+0x350/0x4e0 [ 302.906317][T15767] __sys_sendmsg+0x1a0/0x240 [ 302.906369][T15767] __x64_sys_sendmsg+0x46/0x50 [ 302.906452][T15767] x64_sys_call+0x26f3/0x2e10 [ 302.906480][T15767] do_syscall_64+0xc9/0x1c0 [ 302.906518][T15767] ? clear_bhb_loop+0x25/0x80 [ 302.906603][T15767] ? clear_bhb_loop+0x25/0x80 [ 302.906629][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.906655][T15767] RIP: 0033:0x7fd22258e169 [ 302.906673][T15767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.906761][T15767] RSP: 002b:00007fd220bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.906810][T15767] RAX: ffffffffffffffda RBX: 00007fd2227b5fa0 RCX: 00007fd22258e169 [ 302.906825][T15767] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 302.906840][T15767] RBP: 00007fd220bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 302.906855][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.906869][T15767] R13: 0000000000000000 R14: 00007fd2227b5fa0 R15: 00007ffec2da6b68 [ 302.906892][T15767] [ 302.907035][ T29] audit: type=1400 audit(2000000115.876:12726): avc: denied { write } for pid=15764 comm="syz.5.4197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.910446][T15735] total_rss 0 [ 302.910457][T15735] total_shmem 0 [ 302.910466][T15735] total_mapped_file 0 [ 302.922114][ T29] audit: type=1400 audit(2000000115.895:12727): avc: denied { create } for pid=15765 comm="syz.3.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.925582][T15735] total_dirty 0 [ 303.215130][ T8950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.217494][T15735] total_writeback 0 [ 303.652772][T15735] total_workingset_refault_anon 103 [ 303.658076][T15735] total_workingset_refault_file 299 [ 303.663343][T15735] total_swap 208896 [ 303.667160][T15735] total_swapcached 0 [ 303.671254][T15735] total_pgpgin 291651 [ 303.675304][T15735] total_pgpgout 291651 [ 303.679362][T15735] total_pgfault 322483 [ 303.683443][T15735] total_pgmajfault 1119 [ 303.687599][T15735] total_inactive_anon 0 [ 303.691790][T15735] total_active_anon 0 [ 303.695827][T15735] total_inactive_file 0 [ 303.699978][T15735] total_active_file 0 [ 303.704002][T15735] total_unevictable 0 [ 303.707980][T15735] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4186,pid=15734,uid=0 [ 303.722707][T15735] Memory cgroup out of memory: Killed process 15734 (syz.2.4186) total-vm:93748kB, anon-rss:936kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 303.950797][T15782] loop5: detected capacity change from 0 to 512 [ 303.973259][T15782] EXT4-fs (loop5): 1 orphan inode deleted [ 303.979379][T15782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.998917][ T4780] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 304.011225][T15782] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.053926][T15788] __nla_validate_parse: 3 callbacks suppressed [ 304.053945][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4207'. [ 304.080155][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.084387][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.195983][T15804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.204445][T15804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.349245][T15822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22114 sclass=netlink_audit_socket pid=15822 comm=syz.3.4223 [ 304.362098][T15822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15822 comm=syz.3.4223 [ 304.404798][T15825] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4223'. [ 304.436708][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4224'. [ 304.533941][T15837] xt_connbytes: Forcing CT accounting to be enabled [ 304.544244][T15837] Cannot find add_set index 0 as target [ 304.581481][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.747744][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4237'. [ 304.849234][T15870] FAULT_INJECTION: forcing a failure. [ 304.849234][T15870] name failslab, interval 1, probability 0, space 0, times 0 [ 304.861969][T15870] CPU: 1 UID: 0 PID: 15870 Comm: +}[@ Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 304.862003][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.862017][T15870] Call Trace: [ 304.862025][T15870] [ 304.862032][T15870] dump_stack_lvl+0xf6/0x150 [ 304.862056][T15870] dump_stack+0x15/0x1a [ 304.862076][T15870] should_fail_ex+0x261/0x270 [ 304.862108][T15870] should_failslab+0x8f/0xb0 [ 304.862145][T15870] kmem_cache_alloc_noprof+0x59/0x340 [ 304.862167][T15870] ? mas_alloc_nodes+0x1f4/0x4a0 [ 304.862204][T15870] ? __mod_memcg_state+0x122/0x280 [ 304.862244][T15870] mas_alloc_nodes+0x1f4/0x4a0 [ 304.862284][T15870] mas_preallocate+0x48d/0x6b0 [ 304.862328][T15870] vma_link+0x8f/0x220 [ 304.862348][T15870] insert_vm_struct+0x15a/0x210 [ 304.862382][T15870] alloc_bprm+0x439/0x680 [ 304.862411][T15870] do_execveat_common+0x12b/0x7e0 [ 304.862440][T15870] ? getname_flags+0x15a/0x3b0 [ 304.862464][T15870] __x64_sys_execveat+0x75/0x90 [ 304.862500][T15870] x64_sys_call+0x2ac7/0x2e10 [ 304.862526][T15870] do_syscall_64+0xc9/0x1c0 [ 304.862556][T15870] ? clear_bhb_loop+0x25/0x80 [ 304.862578][T15870] ? clear_bhb_loop+0x25/0x80 [ 304.862599][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.862621][T15870] RIP: 0033:0x7f225ae9e169 [ 304.862639][T15870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.862660][T15870] RSP: 002b:00007f2259507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 304.862683][T15870] RAX: ffffffffffffffda RBX: 00007f225b0c5fa0 RCX: 00007f225ae9e169 [ 304.862698][T15870] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 304.862712][T15870] RBP: 00007f2259507090 R08: 0000000000001000 R09: 0000000000000000 [ 304.862727][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.862741][T15870] R13: 0000000000000000 R14: 00007f225b0c5fa0 R15: 00007ffed1d3b218 [ 304.862762][T15870] [ 305.090216][T15872] netlink: 'syz.7.4245': attribute type 1 has an invalid length. [ 305.112993][T15877] loop5: detected capacity change from 0 to 512 [ 305.131562][T15872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.142480][T15878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.152859][T15877] EXT4-fs: Ignoring removed nobh option [ 305.162616][T15878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.186858][T15877] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4246: corrupted inode contents [ 305.188047][T15879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.206728][T15879] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 305.217588][T15877] EXT4-fs (loop5): Remounting filesystem read-only [ 305.224496][T15877] EXT4-fs (loop5): 1 truncate cleaned up [ 305.230881][T15877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.245369][T15877] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.246448][ T4773] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 305.266664][ T4773] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 305.275208][T15879] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 305.278533][T15877] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.300331][T15877] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.311382][T15877] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.320607][ T4773] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 305.331178][T15888] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.341759][T15888] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.357511][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4249'. [ 305.433904][T15892] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4250'. [ 305.456221][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.479765][T15896] loop7: detected capacity change from 0 to 1024 [ 305.505269][T15898] netlink: 'syz.6.4254': attribute type 33 has an invalid length. [ 305.505467][T15896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.513230][T15898] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4254'. [ 305.537619][T15906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=15906 comm=syz.5.4255 [ 305.539826][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4254'. [ 305.553986][T15906] loop5: detected capacity change from 0 to 512 [ 305.579686][T15896] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 305.590378][T15909] loop6: detected capacity change from 0 to 512 [ 305.599427][T15906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.600938][T15909] EXT4-fs: dax option not supported [ 305.631129][T15906] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.643344][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.654239][T15906] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4255'. [ 305.711504][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.722366][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4261'. [ 305.761049][T15930] loop6: detected capacity change from 0 to 164 [ 305.767801][T15928] loop5: detected capacity change from 0 to 512 [ 305.774414][T15928] EXT4-fs: Ignoring removed nobh option [ 305.782157][T15930] +}[@: attempt to access beyond end of device [ 305.782157][T15930] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 305.795673][T15930] +}[@: attempt to access beyond end of device [ 305.795673][T15930] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 305.801683][T15928] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4262: corrupted inode contents [ 305.824522][T15928] EXT4-fs (loop5): Remounting filesystem read-only [ 305.831534][T15928] EXT4-fs (loop5): 1 truncate cleaned up [ 305.837996][T15928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.850655][T15928] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.861343][ T8950] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 305.872018][ T8950] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 305.880156][T15928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.886261][ T8950] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 305.895670][T15928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.913985][T15928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.924432][T15928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.933280][T15936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15936 comm=syz.6.4265 [ 305.933658][T15928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 305.945968][T15936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15936 comm=syz.6.4265 [ 306.017386][T15943] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 306.054062][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.137774][T15956] xt_TPROXY: Can be used only with -p tcp or -p udp [ 306.192745][T15956] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 306.211337][T15966] tipc: Enabled bearer , priority 0 [ 306.219549][T15966] €Â: renamed from syzkaller0 [ 306.221238][T15967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.236196][T15966] tipc: Disabling bearer [ 306.249023][T15967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.600144][T15988] ip6gre1: entered promiscuous mode [ 307.134933][T16018] loop7: detected capacity change from 0 to 512 [ 307.141587][T16018] EXT4-fs: Ignoring removed nobh option [ 307.159455][T16018] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #16: comm syz.7.4300: corrupted inode contents [ 307.171560][T16018] EXT4-fs (loop7): Remounting filesystem read-only [ 307.178309][T16018] EXT4-fs (loop7): 1 truncate cleaned up [ 307.184461][T16018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.197394][T16018] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.208110][ T8957] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 307.218759][ T8957] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 307.236265][ T8957] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 307.241216][T16018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 307.257170][T16018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 307.266808][T16018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 307.278353][T16018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 307.287753][T16018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 307.348232][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.406677][T16032] loop5: detected capacity change from 0 to 512 [ 307.436770][T16032] EXT4-fs (loop5): 1 orphan inode deleted [ 307.443662][T16032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.456982][T16032] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.467596][ T8957] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 307.489364][ T23] usb 15-1: enqueue for inactive port 0 [ 307.497230][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.503485][ T23] usb 15-1: enqueue for inactive port 0 [ 307.528111][T16039] tipc: Enabled bearer , priority 0 [ 307.538344][T16038] tipc: Disabling bearer [ 307.583930][ T23] vhci_hcd: vhci_device speed not set [ 307.646549][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.655171][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.001621][ T4773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.218119][ T29] kauditd_printk_skb: 486 callbacks suppressed [ 308.218137][ T29] audit: type=1400 audit(2000000120.853:13194): avc: denied { bind } for pid=16063 comm="syz.3.4317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.243929][ T29] audit: type=1400 audit(2000000120.853:13195): avc: denied { name_bind } for pid=16063 comm="syz.3.4317" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 308.265990][ T29] audit: type=1400 audit(2000000120.853:13196): avc: denied { node_bind } for pid=16063 comm="syz.3.4317" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 308.331424][T16068] tipc: Enabled bearer , priority 0 [ 308.355915][T16067] tipc: Disabling bearer [ 308.365137][ T29] audit: type=1400 audit(2000000120.993:13197): avc: denied { relabelfrom } for pid=16069 comm="syz.3.4320" name="" dev="pipefs" ino=55337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 308.400073][T16070] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 308.438128][ T29] audit: type=1400 audit(2000000121.021:13198): avc: denied { mac_admin } for pid=16069 comm="syz.3.4320" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.459480][ T29] audit: type=1400 audit(2000000121.030:13199): avc: denied { relabelto } for pid=16069 comm="syz.3.4320" name="" dev="pipefs" ino=55337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 308.541912][T16070] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 308.629412][ T29] audit: type=1400 audit(2000000121.236:13200): avc: denied { setopt } for pid=16089 comm="syz.7.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.648649][T16072] netlink: 'syz.5.4321': attribute type 3 has an invalid length. [ 308.730230][ T29] audit: type=1400 audit(2000000121.320:13201): avc: denied { ioctl } for pid=16093 comm="syz.7.4328" path="socket:[55387]" dev="sockfs" ino=55387 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 308.755612][ T29] audit: type=1326 audit(2000000121.330:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16093 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 308.779482][ T29] audit: type=1326 audit(2000000121.330:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16093 comm="syz.7.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c53e4e169 code=0x7ffc0000 [ 308.886833][T16098] loop7: detected capacity change from 0 to 512 [ 308.969493][T16098] EXT4-fs (loop7): 1 orphan inode deleted [ 308.984843][T16098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.005888][ T8957] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 309.027394][T16098] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.074740][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.334524][T16107] Cannot find add_set index 0 as target [ 309.354156][T16109] €Â: renamed from syzkaller0 [ 309.469385][T16114] Cannot find add_set index 0 as target [ 309.610420][T16132] netlink: 'syz.3.4343': attribute type 33 has an invalid length. [ 309.618315][T16132] __nla_validate_parse: 5 callbacks suppressed [ 309.618403][T16132] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4343'. [ 309.637750][T16132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4343'. [ 309.705639][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 309.755840][T16148] €Â: renamed from syzkaller0 [ 309.834040][T16157] loop5: detected capacity change from 0 to 512 [ 309.851605][T16163] loop7: detected capacity change from 0 to 512 [ 309.854297][T16157] EXT4-fs: Ignoring removed nobh option [ 309.858260][T16163] EXT4-fs: Ignoring removed nobh option [ 309.910860][T16163] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #16: comm syz.7.4356: corrupted inode contents [ 309.933108][T16163] EXT4-fs (loop7): Remounting filesystem read-only [ 309.933265][T16157] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4355: corrupted inode contents [ 309.956285][T16163] EXT4-fs (loop7): 1 truncate cleaned up [ 309.962553][T16163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.975306][T16157] EXT4-fs (loop5): Remounting filesystem read-only [ 309.984320][T16157] EXT4-fs (loop5): 1 truncate cleaned up [ 309.989760][ T4773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.990590][T16157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.004183][ T390] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 310.019757][T16163] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.023588][ T390] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 310.044872][ T390] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 310.057924][ T390] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 310.068509][ T390] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 310.081989][T16157] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.117917][T16157] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 310.137929][T16157] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 310.159191][T16157] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 310.173313][ T390] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 310.185269][T16163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 310.195926][T16163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 310.206778][T16163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 310.218364][T16163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 310.227503][T16163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 310.237429][T16157] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 310.246750][T16157] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 310.293726][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.359366][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.384847][T16173] netlink: 'syz.5.4357': attribute type 33 has an invalid length. [ 310.392719][T16173] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4357'. [ 310.407062][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4357'. [ 310.726195][T16196] loop5: detected capacity change from 0 to 1024 [ 310.800523][T16196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.812637][T16197] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 310.871065][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4371'. [ 310.963064][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.972427][T16215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4372'. [ 310.981539][T16215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4372'. [ 311.017979][T16215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4372'. [ 311.053648][T16225] xt_connbytes: Forcing CT accounting to be enabled [ 311.055204][T16215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4372'. [ 311.060444][T16225] Cannot find add_set index 0 as target [ 311.513043][T16253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.537695][T16253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.860778][T16258] loop6: detected capacity change from 0 to 764 [ 312.065600][T16278] netlink: 'syz.3.4398': attribute type 33 has an invalid length. [ 312.114704][T16276] loop6: detected capacity change from 0 to 2048 [ 312.123969][T16276] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.142503][T16276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.144320][T16287] Cannot find add_set index 0 as target [ 312.228441][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.298898][T16304] FAULT_INJECTION: forcing a failure. [ 312.298898][T16304] name failslab, interval 1, probability 0, space 0, times 0 [ 312.311640][T16304] CPU: 1 UID: 0 PID: 16304 Comm: syz.6.4407 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 312.311669][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.311681][T16304] Call Trace: [ 312.311687][T16304] [ 312.311695][T16304] dump_stack_lvl+0xf6/0x150 [ 312.311825][T16304] dump_stack+0x15/0x1a [ 312.311849][T16304] should_fail_ex+0x261/0x270 [ 312.311896][T16304] should_failslab+0x8f/0xb0 [ 312.311974][T16304] kmem_cache_alloc_noprof+0x59/0x340 [ 312.311996][T16304] ? __anon_vma_prepare+0xcf/0x310 [ 312.312030][T16304] __anon_vma_prepare+0xcf/0x310 [ 312.312086][T16304] ? do_wp_page+0x1861/0x24e0 [ 312.312130][T16304] do_wp_page+0x1869/0x24e0 [ 312.312163][T16304] ? __rcu_read_lock+0x36/0x50 [ 312.312194][T16304] handle_mm_fault+0xc6c/0x2e80 [ 312.312267][T16304] ? mas_walk+0x204/0x320 [ 312.312296][T16304] ? __rcu_read_unlock+0x4e/0x70 [ 312.312330][T16304] exc_page_fault+0x3b9/0x6a0 [ 312.312410][T16304] asm_exc_page_fault+0x26/0x30 [ 312.312434][T16304] RIP: 0033:0x7f546d530be3 [ 312.312452][T16304] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 312.312503][T16304] RSP: 002b:00007f546bcd63f0 EFLAGS: 00010202 [ 312.312522][T16304] RAX: 00000000000001c0 RBX: 00007f546bcd6490 RCX: 00007f54638b7000 [ 312.312534][T16304] RDX: 00007f546bcd6630 RSI: 0000000000000071 RDI: 00007f546bcd6530 [ 312.312545][T16304] RBP: 00000000000000bd R08: 0000000000000009 R09: 00000000000001a9 [ 312.312558][T16304] R10: 00000000000001d2 R11: 00007f546bcd6490 R12: 0000000000000001 [ 312.312572][T16304] R13: 00007f546d70bf40 R14: 0000000000000002 R15: 00007f546bcd6530 [ 312.312590][T16304] [ 312.312615][T16304] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 312.403074][T16302] bridge_slave_0: left allmulticast mode [ 312.456926][T16304] loop6: detected capacity change from 0 to 2048 [ 312.459756][T16302] bridge_slave_0: left promiscuous mode [ 312.459936][T16302] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.527720][T16304] GPT:first_usable_lbas don't match. [ 312.527899][T16302] bridge_slave_1: left allmulticast mode [ 312.533044][T16304] GPT:34 != 290 [ 312.538868][T16302] bridge_slave_1: left promiscuous mode [ 312.542200][T16304] GPT: Use GNU Parted to correct GPT errors. [ 312.542353][T16304] loop6: p1 p2 p3 [ 312.558312][T16302] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.558686][T16312] netlink: 'syz.2.4410': attribute type 33 has an invalid length. [ 312.576041][T16302] bond0: (slave bond_slave_0): Releasing backup interface [ 312.590356][T16302] bond0: (slave bond_slave_1): Releasing backup interface [ 312.604180][T16302] team0: Port device team_slave_0 removed [ 312.614587][T16302] team0: Port device team_slave_1 removed [ 312.622462][T16302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.629990][T16302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.639292][T16302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.646905][T16302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.668536][T16310] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.676639][T16322] netlink: 'syz.6.4413': attribute type 1 has an invalid length. [ 312.881754][T16356] netlink: 'syz.3.4426': attribute type 33 has an invalid length. [ 312.971113][T16370] FAULT_INJECTION: forcing a failure. [ 312.971113][T16370] name failslab, interval 1, probability 0, space 0, times 0 [ 312.983887][T16370] CPU: 1 UID: 0 PID: 16370 Comm: wg1 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 312.983915][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.984008][T16370] Call Trace: [ 312.984017][T16370] [ 312.984025][T16370] dump_stack_lvl+0xf6/0x150 [ 312.984048][T16370] dump_stack+0x15/0x1a [ 312.984134][T16370] should_fail_ex+0x261/0x270 [ 312.984163][T16370] should_failslab+0x8f/0xb0 [ 312.984199][T16370] kmem_cache_alloc_noprof+0x59/0x340 [ 312.984298][T16370] ? skb_clone+0x154/0x1f0 [ 312.984333][T16370] skb_clone+0x154/0x1f0 [ 312.984362][T16370] __netlink_deliver_tap+0x2bd/0x4f0 [ 312.984393][T16370] netlink_unicast+0x69e/0x6c0 [ 312.984442][T16370] netlink_sendmsg+0x609/0x720 [ 312.984544][T16370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.984573][T16370] __sock_sendmsg+0x140/0x180 [ 312.984596][T16370] ____sys_sendmsg+0x350/0x4e0 [ 312.984668][T16370] __sys_sendmsg+0x1a0/0x240 [ 312.984791][T16370] __x64_sys_sendmsg+0x46/0x50 [ 312.984871][T16370] x64_sys_call+0x26f3/0x2e10 [ 312.984896][T16370] do_syscall_64+0xc9/0x1c0 [ 312.984950][T16370] ? clear_bhb_loop+0x25/0x80 [ 312.984971][T16370] ? clear_bhb_loop+0x25/0x80 [ 312.984992][T16370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.985015][T16370] RIP: 0033:0x7f6c53e4e169 [ 312.985038][T16370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.985056][T16370] RSP: 002b:00007f6c524b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.985075][T16370] RAX: ffffffffffffffda RBX: 00007f6c54075fa0 RCX: 00007f6c53e4e169 [ 312.985089][T16370] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 312.985104][T16370] RBP: 00007f6c524b7090 R08: 0000000000000000 R09: 0000000000000000 [ 312.985196][T16370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.985210][T16370] R13: 0000000000000000 R14: 00007f6c54075fa0 R15: 00007fff2c3bdcf8 [ 312.985233][T16370] [ 313.017718][T16374] team0: entered promiscuous mode [ 313.198974][T16374] team_slave_0: entered promiscuous mode [ 313.204681][T16374] team_slave_1: entered promiscuous mode [ 313.233166][T16379] syzkaller0: entered promiscuous mode [ 313.238702][T16379] syzkaller0: entered allmulticast mode [ 313.248396][T16373] team0: left promiscuous mode [ 313.253354][T16373] team_slave_0: left promiscuous mode [ 313.258915][T16373] team_slave_1: left promiscuous mode [ 313.264687][T16384] netem: change failed [ 313.288108][T16386] Cannot find add_set index 0 as target [ 313.369727][T16390] netlink: 'syz.3.4439': attribute type 33 has an invalid length. [ 313.485421][ T8950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.486166][ T315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.610380][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 313.610397][ T29] audit: type=1400 audit(2000000125.894:13624): avc: denied { getopt } for pid=16418 comm="syz.3.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.711325][T16431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.730601][T16428] netlink: 'syz.6.4451': attribute type 33 has an invalid length. [ 313.735355][T16431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.782054][T16433] loop6: detected capacity change from 0 to 1024 [ 313.797772][T16433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.835689][T16433] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 313.895203][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.983362][T16443] FAULT_INJECTION: forcing a failure. [ 313.983362][T16443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.996554][T16443] CPU: 1 UID: 0 PID: 16443 Comm: syz.6.4457 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 313.996666][T16443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.996700][T16443] Call Trace: [ 313.996707][T16443] [ 313.996714][T16443] dump_stack_lvl+0xf6/0x150 [ 313.996799][T16443] dump_stack+0x15/0x1a [ 313.996851][T16443] should_fail_ex+0x261/0x270 [ 313.996884][T16443] should_fail+0xb/0x10 [ 313.996912][T16443] should_fail_usercopy+0x1a/0x20 [ 313.996948][T16443] _copy_from_iter+0xd8/0xd10 [ 313.997006][T16443] ? kmalloc_reserve+0x16e/0x190 [ 313.997035][T16443] ? __build_skb_around+0x199/0x1f0 [ 313.997124][T16443] ? __alloc_skb+0x227/0x320 [ 313.997147][T16443] ? __virt_addr_valid+0x1ed/0x250 [ 313.997170][T16443] ? __check_object_size+0x367/0x510 [ 313.997204][T16443] netlink_sendmsg+0x492/0x720 [ 313.997241][T16443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.997273][T16443] __sock_sendmsg+0x140/0x180 [ 313.997296][T16443] ____sys_sendmsg+0x350/0x4e0 [ 313.997390][T16443] __sys_sendmsg+0x1a0/0x240 [ 313.997449][T16443] __x64_sys_sendmsg+0x46/0x50 [ 313.997483][T16443] x64_sys_call+0x26f3/0x2e10 [ 313.997521][T16443] do_syscall_64+0xc9/0x1c0 [ 313.997575][T16443] ? clear_bhb_loop+0x25/0x80 [ 313.997602][T16443] ? clear_bhb_loop+0x25/0x80 [ 313.997666][T16443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.997723][T16443] RIP: 0033:0x7f546d66e169 [ 313.997741][T16443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.997763][T16443] RSP: 002b:00007f546bcd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.997781][T16443] RAX: ffffffffffffffda RBX: 00007f546d895fa0 RCX: 00007f546d66e169 [ 313.997793][T16443] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 313.997805][T16443] RBP: 00007f546bcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.997816][T16443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.997828][T16443] R13: 0000000000000000 R14: 00007f546d895fa0 R15: 00007ffd211d7458 [ 313.997979][T16443] [ 314.591757][T16439] dummy0 speed is unknown, defaulting to 1000 [ 314.710424][ T29] audit: type=1326 audit(2000000126.923:13625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 314.783208][ T29] audit: type=1326 audit(2000000126.951:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 314.806990][ T29] audit: type=1326 audit(2000000126.951:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 314.830957][ T29] audit: type=1326 audit(2000000126.951:13628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 314.854631][ T29] audit: type=1326 audit(2000000126.951:13629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 314.878341][ T29] audit: type=1326 audit(2000000126.951:13630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 314.902051][ T29] audit: type=1326 audit(2000000126.951:13631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 314.925704][ T29] audit: type=1326 audit(2000000126.951:13632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 314.949321][ T29] audit: type=1326 audit(2000000126.951:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.5.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22258e169 code=0x7ffc0000 [ 315.005965][T16473] __nla_validate_parse: 26 callbacks suppressed [ 315.005985][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4469'. [ 315.046744][T16475] loop5: detected capacity change from 0 to 512 [ 315.114909][T16475] EXT4-fs (loop5): 1 orphan inode deleted [ 315.132817][T16475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.133832][ T390] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 315.165815][T16475] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.196410][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.480597][T16511] loop7: detected capacity change from 0 to 512 [ 315.483076][T16456] dummy0 speed is unknown, defaulting to 1000 [ 315.495872][T16497] FAULT_INJECTION: forcing a failure. [ 315.495872][T16497] name failslab, interval 1, probability 0, space 0, times 0 [ 315.508643][T16497] CPU: 0 UID: 0 PID: 16497 Comm: syz.3.4477 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 315.508678][T16497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.508691][T16497] Call Trace: [ 315.508697][T16497] [ 315.508704][T16497] dump_stack_lvl+0xf6/0x150 [ 315.508783][T16497] dump_stack+0x15/0x1a [ 315.508803][T16497] should_fail_ex+0x261/0x270 [ 315.508893][T16497] should_failslab+0x8f/0xb0 [ 315.508927][T16497] __kmalloc_noprof+0xad/0x410 [ 315.508953][T16497] ? alloc_pipe_info+0x1cb/0x360 [ 315.509008][T16497] alloc_pipe_info+0x1cb/0x360 [ 315.509048][T16497] splice_direct_to_actor+0x621/0x680 [ 315.509085][T16497] ? __pfx_direct_splice_actor+0x10/0x10 [ 315.509140][T16497] ? __rcu_read_unlock+0x4e/0x70 [ 315.509175][T16497] ? avc_policy_seqno+0x15/0x20 [ 315.509204][T16497] ? selinux_file_permission+0x22d/0x360 [ 315.509290][T16497] do_splice_direct+0xd9/0x150 [ 315.509333][T16497] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 315.509375][T16497] do_sendfile+0x40a/0x690 [ 315.509421][T16497] __x64_sys_sendfile64+0x113/0x160 [ 315.509448][T16497] x64_sys_call+0xfc3/0x2e10 [ 315.509475][T16497] do_syscall_64+0xc9/0x1c0 [ 315.509534][T16497] ? clear_bhb_loop+0x25/0x80 [ 315.509636][T16497] ? clear_bhb_loop+0x25/0x80 [ 315.509663][T16497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.509689][T16497] RIP: 0033:0x7f225ae9e169 [ 315.509707][T16497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.509729][T16497] RSP: 002b:00007f2259507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 315.509808][T16497] RAX: ffffffffffffffda RBX: 00007f225b0c5fa0 RCX: 00007f225ae9e169 [ 315.509820][T16497] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 315.509832][T16497] RBP: 00007f2259507090 R08: 0000000000000000 R09: 0000000000000000 [ 315.509846][T16497] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 315.509860][T16497] R13: 0000000000000000 R14: 00007f225b0c5fa0 R15: 00007ffed1d3b218 [ 315.509883][T16497] [ 315.759271][T16511] EXT4-fs (loop7): 1 orphan inode deleted [ 315.773974][ T390] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 315.793947][T16511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.817272][T16515] FAULT_INJECTION: forcing a failure. [ 315.817272][T16515] name failslab, interval 1, probability 0, space 0, times 0 [ 315.829975][T16515] CPU: 0 UID: 0 PID: 16515 Comm: syz.3.4485 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 315.830084][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.830099][T16515] Call Trace: [ 315.830106][T16515] [ 315.830115][T16515] dump_stack_lvl+0xf6/0x150 [ 315.830208][T16515] dump_stack+0x15/0x1a [ 315.830228][T16515] should_fail_ex+0x261/0x270 [ 315.830284][T16515] should_failslab+0x8f/0xb0 [ 315.830325][T16515] __kmalloc_cache_noprof+0x55/0x320 [ 315.830351][T16515] ? newseg+0x1a1/0x6a0 [ 315.830385][T16515] ? __seccomp_filter+0x694/0x10e0 [ 315.830484][T16515] newseg+0x1a1/0x6a0 [ 315.830522][T16515] ipcget+0x3b8/0x500 [ 315.830636][T16515] __x64_sys_shmget+0xaa/0xd0 [ 315.830674][T16515] x64_sys_call+0x2ab3/0x2e10 [ 315.830697][T16515] do_syscall_64+0xc9/0x1c0 [ 315.830796][T16515] ? clear_bhb_loop+0x25/0x80 [ 315.830821][T16515] ? clear_bhb_loop+0x25/0x80 [ 315.830846][T16515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.830871][T16515] RIP: 0033:0x7f225ae9e169 [ 315.830942][T16515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.830963][T16515] RSP: 002b:00007f2259507038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 315.830986][T16515] RAX: ffffffffffffffda RBX: 00007f225b0c5fa0 RCX: 00007f225ae9e169 [ 315.831000][T16515] RDX: 0000000000000200 RSI: 0000000000004000 RDI: 00000000798dd820 [ 315.831015][T16515] RBP: 00007f2259507090 R08: 0000000000000000 R09: 0000000000000000 [ 315.831029][T16515] R10: 0000200000ffb000 R11: 0000000000000246 R12: 0000000000000001 [ 315.831044][T16515] R13: 0000000000000000 R14: 00007f225b0c5fa0 R15: 00007ffed1d3b218 [ 315.831141][T16515] [ 315.836750][T16511] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.068098][T12607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.410545][T16545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4496'. [ 316.442969][T16552] syzkaller0: entered promiscuous mode [ 316.448769][T16552] syzkaller0: entered allmulticast mode [ 316.463507][T16553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.474621][T16553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.830585][T16564] Cannot find add_set index 0 as target [ 316.926953][T16568] Cannot find add_set index 0 as target [ 317.320555][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4510'. [ 317.344289][T16578] FAULT_INJECTION: forcing a failure. [ 317.344289][T16578] name failslab, interval 1, probability 0, space 0, times 0 [ 317.357216][T16578] CPU: 0 UID: 0 PID: 16578 Comm: syz.7.4510 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 317.357249][T16578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.357265][T16578] Call Trace: [ 317.357273][T16578] [ 317.357281][T16578] dump_stack_lvl+0xf6/0x150 [ 317.357310][T16578] dump_stack+0x15/0x1a [ 317.357381][T16578] should_fail_ex+0x261/0x270 [ 317.357415][T16578] should_failslab+0x8f/0xb0 [ 317.357459][T16578] __kmalloc_cache_noprof+0x55/0x320 [ 317.357488][T16578] ? hsr_add_port+0x133/0x500 [ 317.357576][T16578] ? hsr_create_self_node+0x3e/0x130 [ 317.357607][T16578] hsr_add_port+0x133/0x500 [ 317.357640][T16578] ? netif_carrier_off+0x80/0x90 [ 317.357669][T16578] hsr_dev_finalize+0x2d8/0x640 [ 317.357703][T16578] hsr_newlink+0x515/0x5b0 [ 317.357792][T16578] ? __pfx_hsr_newlink+0x10/0x10 [ 317.357824][T16578] rtnl_newlink_create+0x1bb/0x640 [ 317.357892][T16578] ? __schedule+0x809/0xb70 [ 317.357965][T16578] ? __cond_resched+0x53/0x90 [ 317.357995][T16578] rtnl_newlink+0xf38/0x12d0 [ 317.358038][T16578] ? xa_load+0xbd/0xe0 [ 317.358114][T16578] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 317.358145][T16578] ? mod_objcg_state+0x3f9/0x530 [ 317.358172][T16578] ? __rcu_read_unlock+0x4e/0x70 [ 317.358206][T16578] ? avc_has_perm_noaudit+0x1cc/0x210 [ 317.358295][T16578] ? selinux_capable+0x1f9/0x260 [ 317.358398][T16578] ? security_capable+0x81/0x90 [ 317.358430][T16578] ? ns_capable+0x7d/0xb0 [ 317.358459][T16578] ? __pfx_rtnl_newlink+0x10/0x10 [ 317.358496][T16578] rtnetlink_rcv_msg+0x65a/0x740 [ 317.358535][T16578] ? should_fail_ex+0xd7/0x270 [ 317.358562][T16578] ? ref_tracker_free+0x3b8/0x420 [ 317.358598][T16578] netlink_rcv_skb+0x12f/0x230 [ 317.358636][T16578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.358684][T16578] rtnetlink_rcv+0x1c/0x30 [ 317.358718][T16578] netlink_unicast+0x605/0x6c0 [ 317.358745][T16578] netlink_sendmsg+0x609/0x720 [ 317.358844][T16578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.358874][T16578] __sock_sendmsg+0x140/0x180 [ 317.358894][T16578] ____sys_sendmsg+0x350/0x4e0 [ 317.358952][T16578] __sys_sendmsg+0x1a0/0x240 [ 317.359001][T16578] __x64_sys_sendmsg+0x46/0x50 [ 317.359044][T16578] x64_sys_call+0x26f3/0x2e10 [ 317.359072][T16578] do_syscall_64+0xc9/0x1c0 [ 317.359187][T16578] ? clear_bhb_loop+0x25/0x80 [ 317.359214][T16578] ? clear_bhb_loop+0x25/0x80 [ 317.359263][T16578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.359287][T16578] RIP: 0033:0x7f6c53e4e169 [ 317.359302][T16578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.359320][T16578] RSP: 002b:00007f6c524b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.359342][T16578] RAX: ffffffffffffffda RBX: 00007f6c54075fa0 RCX: 00007f6c53e4e169 [ 317.359357][T16578] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 317.359372][T16578] RBP: 00007f6c524b7090 R08: 0000000000000000 R09: 0000000000000000 [ 317.359387][T16578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.359428][T16578] R13: 0000000000000000 R14: 00007f6c54075fa0 R15: 00007fff2c3bdcf8 [ 317.359458][T16578] [ 317.758953][T16582] loop7: detected capacity change from 0 to 2048 [ 317.804732][T16582] loop7: p1 < > p3 [ 317.809099][T16582] loop7: p3 size 134217728 extends beyond EOD, truncated [ 317.830059][T16582] netlink: 'syz.7.4512': attribute type 4 has an invalid length. [ 317.844016][T16589] netlink: 'syz.6.4515': attribute type 33 has an invalid length. [ 317.847508][T16582] netlink: 'syz.7.4512': attribute type 4 has an invalid length. [ 317.851957][T16589] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4515'. [ 317.899442][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4515'. [ 317.911485][T16596] Cannot find add_set index 0 as target [ 317.927643][T16595] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4517'. [ 318.067527][T16604] €Â: renamed from syzkaller0 [ 318.187240][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 318.316633][T16633] netlink: 'syz.3.4533': attribute type 4 has an invalid length. [ 318.338130][T16633] netlink: 'syz.3.4533': attribute type 4 has an invalid length. [ 318.473536][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4542'. [ 318.653366][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4556'. [ 318.706015][T16698] FAULT_INJECTION: forcing a failure. [ 318.706015][T16698] name failslab, interval 1, probability 0, space 0, times 0 [ 318.718800][T16698] CPU: 1 UID: 0 PID: 16698 Comm: syz.5.4560 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 318.718832][T16698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.718845][T16698] Call Trace: [ 318.718851][T16698] [ 318.718860][T16698] dump_stack_lvl+0xf6/0x150 [ 318.718886][T16698] dump_stack+0x15/0x1a [ 318.718961][T16698] should_fail_ex+0x261/0x270 [ 318.718989][T16698] should_failslab+0x8f/0xb0 [ 318.719054][T16698] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 318.719079][T16698] ? sidtab_sid2str_get+0xb8/0x140 [ 318.719101][T16698] ? vsnprintf+0x84d/0x8a0 [ 318.719124][T16698] kmemdup_noprof+0x2b/0x70 [ 318.719147][T16698] sidtab_sid2str_get+0xb8/0x140 [ 318.719194][T16698] security_sid_to_context_core+0x1eb/0x2f0 [ 318.719219][T16698] security_sid_to_context+0x27/0x30 [ 318.719239][T16698] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 318.719341][T16698] security_lsmprop_to_secctx+0x40/0x80 [ 318.719372][T16698] audit_log_task_context+0x7a/0x180 [ 318.719398][T16698] audit_log_task+0xfb/0x250 [ 318.719438][T16698] audit_seccomp+0x68/0x130 [ 318.719458][T16698] __seccomp_filter+0x694/0x10e0 [ 318.719514][T16698] ? vfs_write+0x669/0x950 [ 318.719548][T16698] __secure_computing+0x7e/0x160 [ 318.719576][T16698] syscall_trace_enter+0xcf/0x1f0 [ 318.719640][T16698] do_syscall_64+0xaa/0x1c0 [ 318.719670][T16698] ? clear_bhb_loop+0x25/0x80 [ 318.719760][T16698] ? clear_bhb_loop+0x25/0x80 [ 318.719793][T16698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.719814][T16698] RIP: 0033:0x7fd22258e169 [ 318.719894][T16698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.719935][T16698] RSP: 002b:00007fd220bf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc [ 318.720015][T16698] RAX: ffffffffffffffda RBX: 00007fd2227b5fa0 RCX: 00007fd22258e169 [ 318.720026][T16698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 318.720039][T16698] RBP: 00007fd220bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 318.720051][T16698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.720062][T16698] R13: 0000000000000000 R14: 00007fd2227b5fa0 R15: 00007ffec2da6b68 [ 318.720081][T16698] [ 318.950349][ T315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.966396][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 318.966435][ T29] audit: type=1326 audit(2000000130.908:13974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 318.973090][T16692] netem: change failed [ 318.996341][ T29] audit: type=1326 audit(2000000130.908:13975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.032411][ T29] audit: type=1326 audit(2000000130.964:13976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.056203][ T29] audit: type=1326 audit(2000000130.964:13977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.079847][ T29] audit: type=1326 audit(2000000130.964:13978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.103469][ T29] audit: type=1326 audit(2000000130.964:13979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.127147][ T29] audit: type=1326 audit(2000000130.964:13980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.150848][ T29] audit: type=1326 audit(2000000130.964:13981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.174503][ T29] audit: type=1326 audit(2000000130.964:13982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.198208][ T29] audit: type=1326 audit(2000000130.964:13983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.6.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f546d66e169 code=0x7ffc0000 [ 319.253756][T16716] tipc: Enabled bearer , priority 0 [ 319.266313][T16716] €Â: renamed from syzkaller0 [ 319.274394][T16716] tipc: Disabling bearer [ 319.414719][T16731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.428377][T16732] tipc: Enabled bearer , priority 0 [ 319.436909][T16734] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.441380][T16731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.444282][T16734] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.480079][T16734] bridge0: entered allmulticast mode [ 319.492759][T16732] €Â: renamed from syzkaller0 [ 319.502592][T16732] tipc: Disabling bearer [ 319.509030][T16735] tipc: Enabled bearer , priority 0 [ 319.518454][T16735] €Â: renamed from syzkaller0 [ 319.524940][T16735] tipc: Disabling bearer [ 319.570955][T16734] bridge_slave_1: left allmulticast mode [ 319.576714][T16734] bridge_slave_1: left promiscuous mode [ 319.582682][T16734] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.603458][T16734] bridge_slave_0: left promiscuous mode [ 319.609435][T16734] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.643413][ T8957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.792144][T16760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4587'. [ 319.851861][T16767] tipc: Enabled bearer , priority 0 [ 319.860904][T16767] €Â: renamed from syzkaller0 [ 319.867947][T16767] tipc: Disabling bearer [ 319.946664][T16771] FAULT_INJECTION: forcing a failure. [ 319.946664][T16771] name failslab, interval 1, probability 0, space 0, times 0 [ 319.959459][T16771] CPU: 0 UID: 0 PID: 16771 Comm: syz.6.4591 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 319.959563][T16771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.959579][T16771] Call Trace: [ 319.959588][T16771] [ 319.959659][T16771] dump_stack_lvl+0xf6/0x150 [ 319.959686][T16771] dump_stack+0x15/0x1a [ 319.959703][T16771] should_fail_ex+0x261/0x270 [ 319.959730][T16771] should_failslab+0x8f/0xb0 [ 319.959767][T16771] kmem_cache_alloc_noprof+0x59/0x340 [ 319.959844][T16771] ? ep_ptable_queue_proc+0x4f/0x150 [ 319.959870][T16771] ep_ptable_queue_proc+0x4f/0x150 [ 319.959892][T16771] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 319.959922][T16771] tcp_poll+0x6b/0x810 [ 319.959982][T16771] sock_poll+0x22d/0x250 [ 319.960018][T16771] ? __pfx_tcp_poll+0x10/0x10 [ 319.960069][T16771] ? rb_insert_color+0x284/0x290 [ 319.960174][T16771] ? __pfx_sock_poll+0x10/0x10 [ 319.960280][T16771] ep_insert+0x950/0xcf0 [ 319.960305][T16771] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 319.960335][T16771] do_epoll_ctl+0x604/0x920 [ 319.960356][T16771] __x64_sys_epoll_ctl+0xcb/0xf0 [ 319.960377][T16771] x64_sys_call+0x2789/0x2e10 [ 319.960440][T16771] do_syscall_64+0xc9/0x1c0 [ 319.960475][T16771] ? clear_bhb_loop+0x25/0x80 [ 319.960502][T16771] ? clear_bhb_loop+0x25/0x80 [ 319.960608][T16771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.960628][T16771] RIP: 0033:0x7f546d66e169 [ 319.960643][T16771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.960663][T16771] RSP: 002b:00007f546bcd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 319.960682][T16771] RAX: ffffffffffffffda RBX: 00007f546d895fa0 RCX: 00007f546d66e169 [ 319.960694][T16771] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 319.960706][T16771] RBP: 00007f546bcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.960776][T16771] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 319.960790][T16771] R13: 0000000000000000 R14: 00007f546d895fa0 R15: 00007ffd211d7458 [ 319.960813][T16771] [ 320.186701][T16773] loop6: detected capacity change from 0 to 128 [ 320.193431][T16773] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 320.229071][T16773] loop6: detected capacity change from 0 to 8192 [ 320.239003][T16773] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.251380][T16773] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 320.260163][T16773] SELinux: failed to load policy [ 320.401152][T16791] Set syz1 is full, maxelem 65536 reached [ 320.409726][T16791] netlink: 'syz.2.4599': attribute type 10 has an invalid length. [ 320.423788][T16791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.432062][T16791] team0: Port device bond0 added [ 320.493877][T16801] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 320.516573][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4603'. [ 320.526595][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4603'. [ 320.575504][T16783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.584036][T16783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.820703][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.837013][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4613'. [ 320.839564][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.027952][T16837] netlink: 'syz.7.4616': attribute type 33 has an invalid length. [ 321.035906][T16837] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4616'. [ 321.065060][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4616'. [ 321.140474][T16846] loop7: detected capacity change from 0 to 1024 [ 321.173517][T16846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.201421][T16846] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 321.219575][T16846] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 321.232018][T16846] EXT4-fs (loop7): This should not happen!! Data will be lost [ 321.232018][T16846] [ 321.241810][T16846] EXT4-fs (loop7): Total free blocks count 0 [ 321.247863][T16846] EXT4-fs (loop7): Free/Dirty block details [ 321.253788][T16846] EXT4-fs (loop7): free_blocks=68451041280 [ 321.259811][T16846] EXT4-fs (loop7): dirty_blocks=96 [ 321.264986][T16846] EXT4-fs (loop7): Block reservation details [ 321.271100][T16846] EXT4-fs (loop7): i_reserved_data_blocks=6 [ 321.292875][ T390] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 321.335948][T16860] €Â: renamed from syzkaller0 [ 321.564992][T16884] ipvlan2: entered promiscuous mode [ 321.570440][T16884] ipvlan2: entered allmulticast mode [ 321.576335][T16884] bridge0: entered allmulticast mode [ 321.641832][T16890] loop5: detected capacity change from 0 to 1024 [ 321.667800][T16890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.690713][T16888] dummy0 speed is unknown, defaulting to 1000 [ 321.698172][T16895] loop6: detected capacity change from 0 to 512 [ 321.715643][T16890] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 321.755884][T16895] EXT4-fs (loop6): 1 orphan inode deleted [ 321.769638][T16895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.782577][ T8957] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 321.794469][T16895] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.827404][T10940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.841514][T16904] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 321.841514][T16904] program syz.3.4639 not setting count and/or reply_len properly [ 321.871608][T13719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.905734][T16907] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 321.947845][T16915] xt_connbytes: Forcing CT accounting to be enabled [ 321.966036][T16918] loop6: detected capacity change from 0 to 512 [ 321.972600][T16915] Cannot find add_set index 0 as target [ 321.980076][T16905] ================================================================== [ 321.988193][T16905] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 321.994899][T16905] [ 321.997243][T16905] write to 0xffff8881292c2790 of 8 bytes by task 16913 on cpu 1: [ 322.004981][T16905] __dentry_kill+0x13e/0x4c0 [ 322.009585][T16905] dput+0x5c/0xd0 [ 322.013224][T16905] step_into+0x226/0x860 [ 322.017472][T16905] path_openat+0x141f/0x2000 [ 322.022076][T16905] do_filp_open+0x115/0x240 [ 322.026589][T16905] io_openat2+0x284/0x3a0 [ 322.030930][T16905] io_openat+0x1a/0x30 [ 322.035007][T16905] io_issue_sqe+0x1a9/0xaf0 [ 322.039521][T16905] io_wq_submit_work+0x3fb/0x550 [ 322.044471][T16905] io_worker_handle_work+0x487/0x9f0 [ 322.049770][T16905] io_wq_worker+0x277/0x850 [ 322.054291][T16905] ret_from_fork+0x4b/0x60 [ 322.058714][T16905] ret_from_fork_asm+0x1a/0x30 [ 322.063486][T16905] [ 322.065819][T16905] read to 0xffff8881292c2790 of 8 bytes by task 16905 on cpu 0: [ 322.073452][T16905] fast_dput+0x67/0x310 [ 322.077613][T16905] dput+0x24/0xd0 [ 322.081249][T16905] step_into+0x226/0x860 [ 322.085497][T16905] path_openat+0x141f/0x2000 [ 322.090101][T16905] do_filp_open+0x115/0x240 [ 322.094613][T16905] io_openat2+0x284/0x3a0 [ 322.098948][T16905] io_openat+0x1a/0x30 [ 322.103023][T16905] io_issue_sqe+0x1a9/0xaf0 [ 322.107537][T16905] io_wq_submit_work+0x3fb/0x550 [ 322.112487][T16905] io_worker_handle_work+0x487/0x9f0 [ 322.117791][T16905] io_wq_worker+0x277/0x850 [ 322.122304][T16905] ret_from_fork+0x4b/0x60 [ 322.126724][T16905] ret_from_fork_asm+0x1a/0x30 [ 322.131498][T16905] [ 322.133827][T16905] value changed: 0xffff888237a3f720 -> 0x0000000000000000 [ 322.140933][T16905] [ 322.143263][T16905] Reported by Kernel Concurrency Sanitizer on: [ 322.149414][T16905] CPU: 0 UID: 0 PID: 16905 Comm: iou-wrk-16894 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 322.162188][T16905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.172335][T16905] ================================================================== [ 322.200892][T16894] loop7: detected capacity change from 0 to 2048 [ 322.202682][T16918] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 322.222515][T16918] EXT4-fs (loop6): mount failed [ 324.336772][ T315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.791322][ T390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.537809][ T1055] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.895638][ T315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.579828][ T315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration