last executing test programs: 2m50.204908039s ago: executing program 4 (id=2586): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x34, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x10, "4e4ada56aa11df633e0000000000"}, {0x0, 0x11, "9606053d0006ff00800000b61af93a"}]}, @lsrr={0x83, 0x7, 0x0, [@dev]}]}}}}}}}, 0x0) 2m50.180084919s ago: executing program 4 (id=2588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) (fail_nth: 1) 2m49.901205612s ago: executing program 4 (id=2590): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) 2m49.853152883s ago: executing program 4 (id=2592): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x1, 0x7, 0x1, @remote, @remote, 0x20, 0x10, 0x7, 0x42}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', '', [{0x20, '#${^%'}, {0x20, 'GPL\x00'}], 0xa, "072f6711d89ae58224ac96105e90f94a833301bd7b15de317035c39e48d5dcfd73550eabbfc285f9a5c2f7ff3d1c13845ffc9a0bf45aa1bbdd394b3551d8022e1a0ee0a6317a64131c731b4d6a5bb177ac8427c9"}, 0x63) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000007000000feffffff0100000000000000", @ANYRES32=0x1, @ANYBLOB="0001006fab9f85de6ab980881951b430cec1f800", @ANYRES32=r0, @ANYRES32=r1, @ANYRES64=r0], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x192}, 0x18) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') sendfile(r8, r8, 0x0, 0x1000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r5, @ANYRES8=r4], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x2}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 2m49.773933284s ago: executing program 4 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) 2m48.833952707s ago: executing program 4 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x48) r1 = memfd_secret(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000080)={0x6, 0x6}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) recvmsg(0xffffffffffffffff, 0x0, 0x20001f23) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0xfe, 0x6, 0x0, 0x0, 0x0, 0x2030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x7fc, 0x3, 0x4, 0x0, 0xb6, 0xfffd, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x6276, 0x43, 0xe, 0x8}, {0x10, 0x4, 0x2, 0x6}, {0xf, 0x2, 0xf4, 0x401}, {0x6, 0x98, 0x80, 0x80000000}]}, 0x10) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind(r8, &(0x7f0000000240)=@ethernet={0x1, @broadcast}, 0x80) 2m48.833564227s ago: executing program 32 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x48) r1 = memfd_secret(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000080)={0x6, 0x6}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) recvmsg(0xffffffffffffffff, 0x0, 0x20001f23) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0xfe, 0x6, 0x0, 0x0, 0x0, 0x2030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x7fc, 0x3, 0x4, 0x0, 0xb6, 0xfffd, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x6276, 0x43, 0xe, 0x8}, {0x10, 0x4, 0x2, 0x6}, {0xf, 0x2, 0xf4, 0x401}, {0x6, 0x98, 0x80, 0x80000000}]}, 0x10) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind(r8, &(0x7f0000000240)=@ethernet={0x1, @broadcast}, 0x80) 2m0.08518648s ago: executing program 2 (id=3682): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10000, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}], 0x3, 0x60cd894) close_range(r3, 0xffffffffffffffff, 0x0) 2m0.002778011s ago: executing program 2 (id=3684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e00000000000000000008000300030000001400038010"], 0x48}}, 0x0) 1m59.970054641s ago: executing program 2 (id=3686): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x3b) r2 = signalfd4(r0, &(0x7f0000000340)={[0xfffffffffffffff8]}, 0x8, 0x80000) sendmsg$tipc(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="2de037f3a58c", 0x6}, {&(0x7f0000000500)="325dd4f8ba868c08c1373d029ed6b389f682e902e96624aed4266faeb92bc764d70a04efc3a62ac32740259a59a1959abe66325ee977004431f797fb1fa6fc23a9147815abf7852b3fdce5c909986f42279c9a830d9065b03e58b429b70a5d29671b438641b6b422f284b6daac", 0x6d}], 0x2, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x70, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xf006}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1m59.759222535s ago: executing program 2 (id=3692): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000080), 0xfe, 0x574, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000000640)='./file2\x00', 0x102, 0x11e) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000020000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000001b00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) mq_open(&(0x7f0000000480)='\x04:{!\x18+*:*!+#\x00', 0x800, 0x23, &(0x7f00000004c0)={0x6, 0x7, 0x3, 0x3}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) close_range(r5, r8, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r1, 0x0, 0x2, &(0x7f0000000500)='^\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000740)="0b00000000000000f51ccaf98c0995b8b644ae34634c43ba509fa88838df0500000083442c0c2d2a640736e49079a1cf20b0004c5b938e6acd760b1bb47b87a4b28922b445aed877ffc55fcea6dbb6960868a12298f4ce7843c25d25fbb29ab7fad85b5c3efba3c74e08fba317742e06000000a4a948ae2d0d8b843e27053814249c91554362d439c24a691fa08568f2112aa3fe46d244b47d59f7fe66c981fa179bb59f43caace99430a26334ca840403c119b91ce955672a4d1787e4f128ec67a5ca8559797a3c8749be286ca793648824275cedc29fd4eded2c7077d6e2d09ca5cf79527359ec7fc39337a2b601ff94e3d04231d28d5e284dcec7ef903f7b99064c079b04220951457be6b7538b0b62105eff9c9c36ab26ea1e128a8787468202c5196cd65baa587db4397bf4c091cc8dcefde79707eacb32d48db38e4879dea08217bf94726689d7", 0xfffffffffffffcc9) 1m59.300411631s ago: executing program 2 (id=3702): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x3b) r2 = signalfd4(r0, &(0x7f0000000340)={[0xfffffffffffffff8]}, 0x8, 0x80000) sendmsg$tipc(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="2de037f3a58c", 0x6}, {&(0x7f0000000500)="325dd4f8ba868c08c1373d029ed6b389f682e902e96624aed4266faeb92bc764d70a04efc3a62ac32740259a59a1959abe66325ee977004431f797fb1fa6fc23a9147815abf7852b3fdce5c909986f42279c9a830d9065b03e58b429b70a5d29671b438641b6b422f284b6daac", 0x6d}], 0x2, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x70, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xf006}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1m58.482475692s ago: executing program 2 (id=3713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000000c0)={0x80, 0xc6, 0x6, 0x9, 0xfffffffe, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffed9) (async) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002980)={'wg2\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000002a80)={&(0x7f00000014c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002900)=[{&(0x7f0000001600)="88e50baea78cf66ffb6f86844851755469759bca4765e88ae98eff6b684dcf5707956eb948ee18efad0092a56d162c9855375b723db562b5da38777d6543efaa0189b03c776caf689e6ed1f24dab5c9770ed615e81b39ba724325589ca86fe5eb5c6410281f6eac86dde06f3c74e9e8e89b1f40439566ce328c74aea6a427f007886885c4285a4163936b116f651e74962864488", 0x94}, {&(0x7f0000001500)="cc55284826f82c3fe432d6b40267abe1aa6bdc1fa5d5bc24ab402a282f7ed2e862a72658d7739b3e35e91eb52ab27596589ed74374", 0x35}, {&(0x7f00000016c0)="a764e9b44160501877d86dac41a72a9c778811a22be1f5c4d82f16", 0x1b}, {&(0x7f0000001700)="2c2c93be822b0fe92b855e8d0422035342be33cc2c2e248f5fa503b07e3a77b54d5890a49400b386c31885c3e5f88eb54f8832149fd8cdf64a186f64184c63f1a4350300b393770afef0ac89ca263e1c930dcd80a43af48dd5a66db85cdc69ed2fb1ff711b094c10303682ee409d0cd96449dc21f9718e28341bac2bdcbf58534fd1f722aeab970778ca1263acb3f9d74938ce7256a335a50d4219a0c60d404a88ce4d50c799fc07f4f6ac9c4cb8e736791ad9e5e9b0d9628afaac91252f4617046d6a85decfc55589293e79e6e1b6cbd6a810b42d70047921447a8980f3a5892d1ac73bcebe159bfe09bd", 0xeb}, {&(0x7f0000001800)="ed22fc09752acca9b6b325caaae4646b2a2366568b1a2023ce09d28b1d7a46447326c5124f305d9c5b63534bb34aaee88e7ad6d1c73cde9c68899b91973300bdd5f260834f6ad8f9958988b4acab2eddc7c69d1e3701c4852e341ac92f93476f4b43670fc5eb79efa846a34a6820dd9207220bfbddbfbe5463fec06a50f0eb45f014dcc339e57cc9b1d8069f31f274c5e65e4eb8b252bcc3b9f311bf043b2b4827a622a6d88d9067f48520677812f552200f03e18d05cdc9e1eb07c31d51174472833a33cfd600031069b75c941b6d3f059393108ac74647328dfe321edfe7aefacc16622230c7e050bc4052971c7fd9a9046a6532c1a832a95ae5056d42d46a5de7092d924ec32a019b401542f39174c93f09456cfb6f554857e9f11fd22c8a6457634b8961ce238b79ea7df7f999ec1a2f4a705379598d1a2e4bb6f2daa2865b2ab80bbae6f2094fdd20f4306f77750f1d0e08e7381e1a59e5a2ff8c1a586f84f16314a648a4f06623f9f2f94504385a7770fbcd481788d8d4cc02d76c43e0e549e13fc70aeee2e3c3a4c31ace2b62fa3d6d6c67cee5305074f08b6316ea027a35e680cd512a8aba030c80231c878f39cbdc26a78c210872f276ccf14239346eb31cd161323fc256b691747b792e8131a23539a4eae04d13419f394ad5b87a1869dc6f318338d47067a8ab5efb9e3f02499d0e85d1dc5ee8c98652b543cf78b0f23c38d88965ded7b69dffa5344f14b5e6b5577e5ae8c032f591edb18fac79aa4359e32b55ac48b8d3529683440172a168c4cdd06731947914a329f6dddb50b8f1d85a2581ea5d063c73c63f73cd470f8844804689a408a54de6ded38e4264970b278332b4e1d5ce7faf4ce3f0858293eb47ef2fc76c73f939af166d408a775e1f8abf2b2be473ec2c20804c8655d25bbb1ba97ca6a7566c7f553bf71b8b01555bc0bcd740c87abad8289d3791f4b1c918541d8291d759bfd4cd3b136b8bd3d2a1daa111207bca4f153ddeedcfd540577aaefa911f86a3c01721e16567be1e950e656e1f21b392251ae0d12bbf9a9ed867228fc1ee47f1c88126ade68943c5e624f0769b1638d1e30830ff65ab96f087b4d4ca3da65246c9df79ba50bd78c298f019842e7f5df829e95226081fceb10c3e54e3aa719ddfd6b60570756af3fc3fb7cbe7fe97478250b9663b4576b7845422560a1cceb393b8eb41e10813de2b2f19b6d7ce0ab4a5a3e56229d165020ca4a151947fa10a2a2db771ce1f107aead9f636d051fdeaf7ede4b7a610072da4a7a990dd3984b8ffa137e2135aee0cb0fc14c7d58f6eb0f6348d7385aa6e909b1f6463a8f4f65a225f5cd7b5b78f0179a22c2dfa6627813e7db8c7c78018a4e54a429ca8ea29a9549e1b17154b31b0ba8a38b976057f02696764da3cb090cab95c037acd3d0452030616a644e815c215d4bfe8efe0ec7901f5d4024aca6e197d91c24a9702bc1eaac45ad522419edf04a3a48635fc7d68a8fd5b54f5347f3eaa65cd2abe6f0ecc713ac9229dfcc09ae71be8ae8667e3450d467f61646c13a9f645ddc550b8dbf6304bd70c1c7e15ee6777915a2e9381ac8b4955ebe71558289311e4703531b6cae69b35d214b97ddead4ffd847cea2ceac2fd7f4ef41321821c529ec407378291630c900dae84eb57e5957f03b55e23e1bf3b15fe228628361c3941940e5f347655431a6b4713edd328a746e8965dd6cb28a10ea9bba63d129464e91b5cc2d29a7b772cce34070a8f0305d402c7d4ce9c9580be9b649ba0030b76a5e1351cacd56ee9bca0d2573c911f141dbf510e057e0cdc2fb3ddd5dcc68b2d28dd6b81b84538d6c30f16b55641eb1e6c635cb87e866dc00138c3f217df377e529f1755822028c01e3db95cf39dd4b8cb3c49e022a0f28b1a9a4e5c965f724e3e776f74afd50d8f6c2c48eeafd98f1a36546167f1acda387cd671c71405761c4b5b98d5e6c7766ac3103ba58d1bc0842b699eb48faff4d0ed5cda33872feaeba4e02fee870bc07803f0c35e071dc1d31e86c39f7f04e21c72cc52243b70ac08eb8a1f8312b69aab7cf6063564536635f018621813da1a3ba5443cad16fa77c9f8db67386700f8e012ddc9cb2127ec8b9bba6c5aacca875f2fd3de3b34af37ac96b23b4c8dce3ecd63d1f653a751001f3e7b71a3cca209fb5d424b40e8d7b08477c6b4486927de68b3e56b6dd65568b85a23439202f6c2f09d8a902e593c8b2ebb154d8561d22589d81684f4a2d1696f37c8a59658ec878d9a5aed4926acfad73399794d3226a708325f82631eac3332372d585cedb0cae291b6f7b6072c6a5165ce571e859b70340e9f1810a619a81ba28058153d8fc4d2bfb845bbe338808eaee9d9ad8000e9bdf28a589bce6f4bd3992a481333955140da675cd708fd639f996e3f9e95af50b9288e4a6812a3e73d631a1ea0309d00ef96640b5f5ef8654ba6264a19e3f975500dbafdba8bc349744e75c5932229fe782e06f0ea4e3d7a8a4fa2f2efeb0fd6186ddd57ca931a44b6af4b105e2e4c0953cb85581e8ac38a41b34cdaa51a21e62467a5553813117ef76c0e238a1392c8ec126f8ba8806bba52d4b7e5162d7e6eefbfd2919bbe5c42603082e91c22f653e4253cb224f8ad480e516de4516cc6d6442d6cb229db46c0179785a77ecc3e02d6bc10345f29aada5c0fa2ae11a226878df1a76c4ef8f24bd7b5c186d5a5f35c726cd1912fefde97fabab9d6da36664fe30f78153859b8f04bcaf7c9fc4e728c045740e7effb41be894b099ef7e84124be6d23560cb0981899f3fad6304a6fe8cc8f9a555f6d89bf3299fbf00468a608c300d209997a1e7c90b445dad9c8d7c963ace8ed85ea75afee557e634d9fe3a20268f265f80810119811124272f4ce2c48e4c001923b3f223041cecf2315c8f7864ad1bbbc72f0f97b5a1664ed80345c8c69a3526c328bdb77d2d4468b8b0c72dbcadb3aaccf6cf7550d411192e0b5de9dc29d0ec64af508d8136bcf77ea60c4b6b61b8f5975f9cc868ac310b0f476c2338678ad9a018cca38de4ccd10a5aaa7b6bc277d0bb5926235805335b1086516251882d5c58a842106ec0347e7a7ca7d3488f1c63300584dcfc35f502ec7bdf3e93dfcc23be4539023e54345fb22f67bbf63daa4059b2f73f5b7a4668ca8b323b57564da5d381bea7d674a195bccbba3f66ba7aafc7915a462b3f2102d932d78c77c458dedd1fbac2a798ef35bdab294bced0484bcf4354949189d9197e2f0237c6ac4c96ef56bafaa0750b1d822448755d72f281435237d854b5f6f00c115b88deb563119b5d73ba0a1a42f47e7f5846a46675edd307c0029ec986869b58a85a1e2bac589e949f746f8ff30fda2b6cd4b7a1a68a2e18facb72423cafdc3f4b48f3c0e39191d003a80d264682bd2db9b29d8dcb1c1ac7f83374602d7e1a26e97b92647cffe7770e536ec666a62307655d5f7aa1e9321cce45289d62069defbafa2713a15bee149679f3ca7b1bdf59d012156f0269d82a56b28a88cc2113a25cc38cf983aceb0768c839866b508b32f41155de1b2d25083f3a03fee1fbe4f282d10c8fdd69ada10105f1b8acd4693e2118840917ee6a6c2477722438a41ce67b6ecfdd4f47ffdb3bf9453b69579d907ae91a0c0d07a060d05a2a5dd80fc470a1016f02d8f959df55617813b63d8a7cad9b95ff4f0ac383168f0e57c7df71eb159315334ed4853e06a55a850e5074c578ced9447b3cd99fae209593b7124cbceffb20b7caca4e103bfed86f447dfc6ba7bff60f8cbac0a177b94963752e95f2f6704cd2a48e34c87f7560b8d8d62ed1549619461f39e6b6ec5f277fdf84a170e141773067069892aa4f8bd584d0bcaa2b265bd01948bb7aecff1624d58a633b8d08799038b28294dde4974769c67bbe1dc895f4da4f06112ab0cd7cd18bd6ec954599832a63d56718ae0a486d6c789cc5db6018e31d7f228e0d4bf6cb9940487cc4f8502cc623936e52cba673fac384a261ac6a2da90ae70a87639ba433d2dfdbd23f57a1d0995f18b6dedbe394db7eb017cbe9a2908ab42570a099168f6061f9155feece1c1a7e55ce27ed9d757a9b36e4635d7f0e27e9c2a82f33ae7c8f770d4f6b25db6a83948a5e9590b1393685224d6e23490e2c75e890a4cf6f408f57e4867559212808345b71d39c57e39dee499ad6c2c0878604cb0e3ef74f643ed73b72b1c5aeadde863b5bef2a7fa9a01e55a8f32dca851f835e2c91c885611007f32ee74f71bb28bf22ea256cb782b82cee2a9634ac537a8ad84254c4b573fd6539b02d02e4b1b604649977241304834c39f4c03b6c6c80a3bc313b6c4f0b5c2396ecef0174c12205ac81d7c7029ae3206a9223fab9f4f08a55f8eb97d797ad20582f5b201708a063af440ddeec2f66c6e121a04a84c6d8d8892ca5b0d7d8876e5fcc97994350419bca17394d6d8fcd917a8d2e67cd28784ef5c7f25081ba6bf609f6c1b2a57ed953d317d3989b4c0d0a60174b782d7bdb63eeb4ac7da075b9e7969140371c92ed81d760a45b0cf9bd2ce38a85b453e4bb2ec359d99b6bd9deb3715ede259745b58caa25934d57b439a7a604b73cf2883d8cb6c0ff963ccc5690198660bdf808955b72369bd63671dcc7c7e92e73fa325c90787c5d9a8b4d85ae9d2afd4ac2e11be9f0490b2daae45551fb43063c4cdb6892639c0946b8c485748db1352741f4ff2af33816c04d0bb58759e2ccf85a204c0f04c2b6ad4175c67028e4226cad3c99ce6efd30455e5355bae8ee14256f1d29db147cc0ef5ac31c0c1c7ab4dabe5a2df1768365031d40755d39bfe57aa6c282dfa9060df4e6add84a5662dd4b3df0cbe6a1b17e765b553f0e57a660ef6ba065e3db46a377dc6e1be8ecaf7eed48c6dae41abd8090027bf479ff527af2d7a74702f277f9caea7d5bb642336953d07e5300fceb376710e6750597e4bc5d23bf2f8834d96931c9e73b46e7112a9297862cb7eb4c51a0df735188dd87a9a9cc148e8dec2705fb16b5c9b14e3d425fac0276a8124c08a57e293bdf3973fdbdc258e5e6f83f404a81d9bb80c4bd08a4da2b6193fe42b688f058e2eb1d70deffac61785d4784f09c215d03b8a641323ea372df6ef92a2f7e3ff992b49acf18deb017c77210c3b1f5c95bb88f7b05e108d725119e648ba0d3f3de0f4600dcb611373efdea32b1ffa41e69740c3a28c15a4bd8c82f6170cd109fd9ce32dc8a5d87402e8b11df9d49460df875872db2d677f81c041537e9159fa74334fd1a8cfa03b4219f5400c07e587899da443696fbbe432943011a2bc5575ab80ed63360ab367c58bd58c8ef4bb9217cec7efc59a751cc0d0302a00861f47dd6e19b6e3289580e72ea0b6c97ca0216895ae81a2dbec63cb9a655ee808202f4c3d2ad4bc3e19634573139f1fbe7748f5cdcbd3e17a9850387e5901c8b7c980ecb7161857bea0b3d07b81864ede8f35556f8fc617e3ec70841bcfa83d35b271dfe14cb91d4b52c70f00357eb46b4aabbc5983fef9809ebcfdbf1b7cb2be15cda1eadb3c271323de44fc7752a7dd259a889429cf73603f8163659e11259724cbfc3e0cdfef7211b7a87e7dce2182e1e865649f7170ee70ac3e9fcfa0f1fd2a79963b35e6541d8459511e71881f8d86052b35f4167cf67a86de22315e775d38ba8ede713f42c11a280c608ec172820bc0522f2554900bbd937483f5f1a3755970e508b34255d4902f231f0ee4943804e6289bfce3add2fd21ee95704c8fd37dc7e0af35a4a8510966d83cc98dde", 0x1000}, {&(0x7f0000002800)="0507a24e0b517c20497582e253962f86af45274a1fa64cd3433101a6975cd367f3a026872b01e818159cf9364c68eb866a6dfd6740b180aeb86dfa92189de71ecd7bf6308e424513ee7a825a3e3fc32c3f794d1b3dd55dc34a5b2e9e70b667326959f7260db261c5945e3b5c7e106d2b28b64601dd635a0599e83a17602f5a399b38c970f2135d48e59f6d0f701866e08291ae4c63feda7128b5c1dbdc105ac0341e32e64464abf6aa6a05ba432dccc4e6209502e1de09ed75bcc65c7e729e1f51cea213cb5765", 0xc7}], 0x6, &(0x7f00000029c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@noop, @rr={0x7, 0xf, 0xa6, [@loopback, @multicast1, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010100, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0xa8}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f0000001540)=0x10, 0x0) (async, rerun: 32) prctl$PR_GET_IO_FLUSHER(0x3a) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x2, 0x80000000, 0x18, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x7, 0x400, 0x80}}) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (rerun: 64) flock(r5, 0x5) (async) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x9) flock(r6, 0x2) dup3(r6, r5, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r7, &(0x7f0000000740)=""/384, 0x200008c0) (async, rerun: 64) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r8}, 0x10) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async, rerun: 32) r11 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',dfltgiTw', @ANYRESHEX=r12, @ANYBLOB=',\x00']) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 1m58.455215972s ago: executing program 33 (id=3713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000000c0)={0x80, 0xc6, 0x6, 0x9, 0xfffffffe, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffed9) (async) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002980)={'wg2\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000002a80)={&(0x7f00000014c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002900)=[{&(0x7f0000001600)="88e50baea78cf66ffb6f86844851755469759bca4765e88ae98eff6b684dcf5707956eb948ee18efad0092a56d162c9855375b723db562b5da38777d6543efaa0189b03c776caf689e6ed1f24dab5c9770ed615e81b39ba724325589ca86fe5eb5c6410281f6eac86dde06f3c74e9e8e89b1f40439566ce328c74aea6a427f007886885c4285a4163936b116f651e74962864488", 0x94}, {&(0x7f0000001500)="cc55284826f82c3fe432d6b40267abe1aa6bdc1fa5d5bc24ab402a282f7ed2e862a72658d7739b3e35e91eb52ab27596589ed74374", 0x35}, {&(0x7f00000016c0)="a764e9b44160501877d86dac41a72a9c778811a22be1f5c4d82f16", 0x1b}, {&(0x7f0000001700)="2c2c93be822b0fe92b855e8d0422035342be33cc2c2e248f5fa503b07e3a77b54d5890a49400b386c31885c3e5f88eb54f8832149fd8cdf64a186f64184c63f1a4350300b393770afef0ac89ca263e1c930dcd80a43af48dd5a66db85cdc69ed2fb1ff711b094c10303682ee409d0cd96449dc21f9718e28341bac2bdcbf58534fd1f722aeab970778ca1263acb3f9d74938ce7256a335a50d4219a0c60d404a88ce4d50c799fc07f4f6ac9c4cb8e736791ad9e5e9b0d9628afaac91252f4617046d6a85decfc55589293e79e6e1b6cbd6a810b42d70047921447a8980f3a5892d1ac73bcebe159bfe09bd", 0xeb}, {&(0x7f0000001800)="ed22fc09752acca9b6b325caaae4646b2a2366568b1a2023ce09d28b1d7a46447326c5124f305d9c5b63534bb34aaee88e7ad6d1c73cde9c68899b91973300bdd5f260834f6ad8f9958988b4acab2eddc7c69d1e3701c4852e341ac92f93476f4b43670fc5eb79efa846a34a6820dd9207220bfbddbfbe5463fec06a50f0eb45f014dcc339e57cc9b1d8069f31f274c5e65e4eb8b252bcc3b9f311bf043b2b4827a622a6d88d9067f48520677812f552200f03e18d05cdc9e1eb07c31d51174472833a33cfd600031069b75c941b6d3f059393108ac74647328dfe321edfe7aefacc16622230c7e050bc4052971c7fd9a9046a6532c1a832a95ae5056d42d46a5de7092d924ec32a019b401542f39174c93f09456cfb6f554857e9f11fd22c8a6457634b8961ce238b79ea7df7f999ec1a2f4a705379598d1a2e4bb6f2daa2865b2ab80bbae6f2094fdd20f4306f77750f1d0e08e7381e1a59e5a2ff8c1a586f84f16314a648a4f06623f9f2f94504385a7770fbcd481788d8d4cc02d76c43e0e549e13fc70aeee2e3c3a4c31ace2b62fa3d6d6c67cee5305074f08b6316ea027a35e680cd512a8aba030c80231c878f39cbdc26a78c210872f276ccf14239346eb31cd161323fc256b691747b792e8131a23539a4eae04d13419f394ad5b87a1869dc6f318338d47067a8ab5efb9e3f02499d0e85d1dc5ee8c98652b543cf78b0f23c38d88965ded7b69dffa5344f14b5e6b5577e5ae8c032f591edb18fac79aa4359e32b55ac48b8d3529683440172a168c4cdd06731947914a329f6dddb50b8f1d85a2581ea5d063c73c63f73cd470f8844804689a408a54de6ded38e4264970b278332b4e1d5ce7faf4ce3f0858293eb47ef2fc76c73f939af166d408a775e1f8abf2b2be473ec2c20804c8655d25bbb1ba97ca6a7566c7f553bf71b8b01555bc0bcd740c87abad8289d3791f4b1c918541d8291d759bfd4cd3b136b8bd3d2a1daa111207bca4f153ddeedcfd540577aaefa911f86a3c01721e16567be1e950e656e1f21b392251ae0d12bbf9a9ed867228fc1ee47f1c88126ade68943c5e624f0769b1638d1e30830ff65ab96f087b4d4ca3da65246c9df79ba50bd78c298f019842e7f5df829e95226081fceb10c3e54e3aa719ddfd6b60570756af3fc3fb7cbe7fe97478250b9663b4576b7845422560a1cceb393b8eb41e10813de2b2f19b6d7ce0ab4a5a3e56229d165020ca4a151947fa10a2a2db771ce1f107aead9f636d051fdeaf7ede4b7a610072da4a7a990dd3984b8ffa137e2135aee0cb0fc14c7d58f6eb0f6348d7385aa6e909b1f6463a8f4f65a225f5cd7b5b78f0179a22c2dfa6627813e7db8c7c78018a4e54a429ca8ea29a9549e1b17154b31b0ba8a38b976057f02696764da3cb090cab95c037acd3d0452030616a644e815c215d4bfe8efe0ec7901f5d4024aca6e197d91c24a9702bc1eaac45ad522419edf04a3a48635fc7d68a8fd5b54f5347f3eaa65cd2abe6f0ecc713ac9229dfcc09ae71be8ae8667e3450d467f61646c13a9f645ddc550b8dbf6304bd70c1c7e15ee6777915a2e9381ac8b4955ebe71558289311e4703531b6cae69b35d214b97ddead4ffd847cea2ceac2fd7f4ef41321821c529ec407378291630c900dae84eb57e5957f03b55e23e1bf3b15fe228628361c3941940e5f347655431a6b4713edd328a746e8965dd6cb28a10ea9bba63d129464e91b5cc2d29a7b772cce34070a8f0305d402c7d4ce9c9580be9b649ba0030b76a5e1351cacd56ee9bca0d2573c911f141dbf510e057e0cdc2fb3ddd5dcc68b2d28dd6b81b84538d6c30f16b55641eb1e6c635cb87e866dc00138c3f217df377e529f1755822028c01e3db95cf39dd4b8cb3c49e022a0f28b1a9a4e5c965f724e3e776f74afd50d8f6c2c48eeafd98f1a36546167f1acda387cd671c71405761c4b5b98d5e6c7766ac3103ba58d1bc0842b699eb48faff4d0ed5cda33872feaeba4e02fee870bc07803f0c35e071dc1d31e86c39f7f04e21c72cc52243b70ac08eb8a1f8312b69aab7cf6063564536635f018621813da1a3ba5443cad16fa77c9f8db67386700f8e012ddc9cb2127ec8b9bba6c5aacca875f2fd3de3b34af37ac96b23b4c8dce3ecd63d1f653a751001f3e7b71a3cca209fb5d424b40e8d7b08477c6b4486927de68b3e56b6dd65568b85a23439202f6c2f09d8a902e593c8b2ebb154d8561d22589d81684f4a2d1696f37c8a59658ec878d9a5aed4926acfad73399794d3226a708325f82631eac3332372d585cedb0cae291b6f7b6072c6a5165ce571e859b70340e9f1810a619a81ba28058153d8fc4d2bfb845bbe338808eaee9d9ad8000e9bdf28a589bce6f4bd3992a481333955140da675cd708fd639f996e3f9e95af50b9288e4a6812a3e73d631a1ea0309d00ef96640b5f5ef8654ba6264a19e3f975500dbafdba8bc349744e75c5932229fe782e06f0ea4e3d7a8a4fa2f2efeb0fd6186ddd57ca931a44b6af4b105e2e4c0953cb85581e8ac38a41b34cdaa51a21e62467a5553813117ef76c0e238a1392c8ec126f8ba8806bba52d4b7e5162d7e6eefbfd2919bbe5c42603082e91c22f653e4253cb224f8ad480e516de4516cc6d6442d6cb229db46c0179785a77ecc3e02d6bc10345f29aada5c0fa2ae11a226878df1a76c4ef8f24bd7b5c186d5a5f35c726cd1912fefde97fabab9d6da36664fe30f78153859b8f04bcaf7c9fc4e728c045740e7effb41be894b099ef7e84124be6d23560cb0981899f3fad6304a6fe8cc8f9a555f6d89bf3299fbf00468a608c300d209997a1e7c90b445dad9c8d7c963ace8ed85ea75afee557e634d9fe3a20268f265f80810119811124272f4ce2c48e4c001923b3f223041cecf2315c8f7864ad1bbbc72f0f97b5a1664ed80345c8c69a3526c328bdb77d2d4468b8b0c72dbcadb3aaccf6cf7550d411192e0b5de9dc29d0ec64af508d8136bcf77ea60c4b6b61b8f5975f9cc868ac310b0f476c2338678ad9a018cca38de4ccd10a5aaa7b6bc277d0bb5926235805335b1086516251882d5c58a842106ec0347e7a7ca7d3488f1c63300584dcfc35f502ec7bdf3e93dfcc23be4539023e54345fb22f67bbf63daa4059b2f73f5b7a4668ca8b323b57564da5d381bea7d674a195bccbba3f66ba7aafc7915a462b3f2102d932d78c77c458dedd1fbac2a798ef35bdab294bced0484bcf4354949189d9197e2f0237c6ac4c96ef56bafaa0750b1d822448755d72f281435237d854b5f6f00c115b88deb563119b5d73ba0a1a42f47e7f5846a46675edd307c0029ec986869b58a85a1e2bac589e949f746f8ff30fda2b6cd4b7a1a68a2e18facb72423cafdc3f4b48f3c0e39191d003a80d264682bd2db9b29d8dcb1c1ac7f83374602d7e1a26e97b92647cffe7770e536ec666a62307655d5f7aa1e9321cce45289d62069defbafa2713a15bee149679f3ca7b1bdf59d012156f0269d82a56b28a88cc2113a25cc38cf983aceb0768c839866b508b32f41155de1b2d25083f3a03fee1fbe4f282d10c8fdd69ada10105f1b8acd4693e2118840917ee6a6c2477722438a41ce67b6ecfdd4f47ffdb3bf9453b69579d907ae91a0c0d07a060d05a2a5dd80fc470a1016f02d8f959df55617813b63d8a7cad9b95ff4f0ac383168f0e57c7df71eb159315334ed4853e06a55a850e5074c578ced9447b3cd99fae209593b7124cbceffb20b7caca4e103bfed86f447dfc6ba7bff60f8cbac0a177b94963752e95f2f6704cd2a48e34c87f7560b8d8d62ed1549619461f39e6b6ec5f277fdf84a170e141773067069892aa4f8bd584d0bcaa2b265bd01948bb7aecff1624d58a633b8d08799038b28294dde4974769c67bbe1dc895f4da4f06112ab0cd7cd18bd6ec954599832a63d56718ae0a486d6c789cc5db6018e31d7f228e0d4bf6cb9940487cc4f8502cc623936e52cba673fac384a261ac6a2da90ae70a87639ba433d2dfdbd23f57a1d0995f18b6dedbe394db7eb017cbe9a2908ab42570a099168f6061f9155feece1c1a7e55ce27ed9d757a9b36e4635d7f0e27e9c2a82f33ae7c8f770d4f6b25db6a83948a5e9590b1393685224d6e23490e2c75e890a4cf6f408f57e4867559212808345b71d39c57e39dee499ad6c2c0878604cb0e3ef74f643ed73b72b1c5aeadde863b5bef2a7fa9a01e55a8f32dca851f835e2c91c885611007f32ee74f71bb28bf22ea256cb782b82cee2a9634ac537a8ad84254c4b573fd6539b02d02e4b1b604649977241304834c39f4c03b6c6c80a3bc313b6c4f0b5c2396ecef0174c12205ac81d7c7029ae3206a9223fab9f4f08a55f8eb97d797ad20582f5b201708a063af440ddeec2f66c6e121a04a84c6d8d8892ca5b0d7d8876e5fcc97994350419bca17394d6d8fcd917a8d2e67cd28784ef5c7f25081ba6bf609f6c1b2a57ed953d317d3989b4c0d0a60174b782d7bdb63eeb4ac7da075b9e7969140371c92ed81d760a45b0cf9bd2ce38a85b453e4bb2ec359d99b6bd9deb3715ede259745b58caa25934d57b439a7a604b73cf2883d8cb6c0ff963ccc5690198660bdf808955b72369bd63671dcc7c7e92e73fa325c90787c5d9a8b4d85ae9d2afd4ac2e11be9f0490b2daae45551fb43063c4cdb6892639c0946b8c485748db1352741f4ff2af33816c04d0bb58759e2ccf85a204c0f04c2b6ad4175c67028e4226cad3c99ce6efd30455e5355bae8ee14256f1d29db147cc0ef5ac31c0c1c7ab4dabe5a2df1768365031d40755d39bfe57aa6c282dfa9060df4e6add84a5662dd4b3df0cbe6a1b17e765b553f0e57a660ef6ba065e3db46a377dc6e1be8ecaf7eed48c6dae41abd8090027bf479ff527af2d7a74702f277f9caea7d5bb642336953d07e5300fceb376710e6750597e4bc5d23bf2f8834d96931c9e73b46e7112a9297862cb7eb4c51a0df735188dd87a9a9cc148e8dec2705fb16b5c9b14e3d425fac0276a8124c08a57e293bdf3973fdbdc258e5e6f83f404a81d9bb80c4bd08a4da2b6193fe42b688f058e2eb1d70deffac61785d4784f09c215d03b8a641323ea372df6ef92a2f7e3ff992b49acf18deb017c77210c3b1f5c95bb88f7b05e108d725119e648ba0d3f3de0f4600dcb611373efdea32b1ffa41e69740c3a28c15a4bd8c82f6170cd109fd9ce32dc8a5d87402e8b11df9d49460df875872db2d677f81c041537e9159fa74334fd1a8cfa03b4219f5400c07e587899da443696fbbe432943011a2bc5575ab80ed63360ab367c58bd58c8ef4bb9217cec7efc59a751cc0d0302a00861f47dd6e19b6e3289580e72ea0b6c97ca0216895ae81a2dbec63cb9a655ee808202f4c3d2ad4bc3e19634573139f1fbe7748f5cdcbd3e17a9850387e5901c8b7c980ecb7161857bea0b3d07b81864ede8f35556f8fc617e3ec70841bcfa83d35b271dfe14cb91d4b52c70f00357eb46b4aabbc5983fef9809ebcfdbf1b7cb2be15cda1eadb3c271323de44fc7752a7dd259a889429cf73603f8163659e11259724cbfc3e0cdfef7211b7a87e7dce2182e1e865649f7170ee70ac3e9fcfa0f1fd2a79963b35e6541d8459511e71881f8d86052b35f4167cf67a86de22315e775d38ba8ede713f42c11a280c608ec172820bc0522f2554900bbd937483f5f1a3755970e508b34255d4902f231f0ee4943804e6289bfce3add2fd21ee95704c8fd37dc7e0af35a4a8510966d83cc98dde", 0x1000}, {&(0x7f0000002800)="0507a24e0b517c20497582e253962f86af45274a1fa64cd3433101a6975cd367f3a026872b01e818159cf9364c68eb866a6dfd6740b180aeb86dfa92189de71ecd7bf6308e424513ee7a825a3e3fc32c3f794d1b3dd55dc34a5b2e9e70b667326959f7260db261c5945e3b5c7e106d2b28b64601dd635a0599e83a17602f5a399b38c970f2135d48e59f6d0f701866e08291ae4c63feda7128b5c1dbdc105ac0341e32e64464abf6aa6a05ba432dccc4e6209502e1de09ed75bcc65c7e729e1f51cea213cb5765", 0xc7}], 0x6, &(0x7f00000029c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@noop, @rr={0x7, 0xf, 0xa6, [@loopback, @multicast1, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010100, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0xa8}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f0000001540)=0x10, 0x0) (async, rerun: 32) prctl$PR_GET_IO_FLUSHER(0x3a) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x2, 0x80000000, 0x18, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x7, 0x400, 0x80}}) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (rerun: 64) flock(r5, 0x5) (async) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x9) flock(r6, 0x2) dup3(r6, r5, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r7, &(0x7f0000000740)=""/384, 0x200008c0) (async, rerun: 64) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r8}, 0x10) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async, rerun: 32) r11 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',dfltgiTw', @ANYRESHEX=r12, @ANYBLOB=',\x00']) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 1m36.887256591s ago: executing program 1 (id=4186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m36.863327251s ago: executing program 1 (id=4187): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x0) 1m35.992707943s ago: executing program 1 (id=4219): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x3b) r2 = signalfd4(r0, &(0x7f0000000340)={[0xfffffffffffffff8]}, 0x8, 0x80000) sendmsg$tipc(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="2de037f3a58c235c", 0x8}, {&(0x7f0000000500)="325dd4f8ba868c08c1373d029ed6b389f682e902e96624aed4266faeb92bc764d70a04efc3a62ac32740259a59a1959abe66325ee977004431f797fb1fa6fc23a9147815abf7852b3fdce5c909986f42279c9a830d9065b03e58b429b70a5d29671b438641b6b422f284b6daac", 0x6d}], 0x2, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1m35.718041227s ago: executing program 1 (id=4223): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000280)='./control\x00', 0xd) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) mkdir(&(0x7f0000000280)='./control\x00', 0xd) (async) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) (async) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) (async) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) (async) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) (async) 1m35.670360168s ago: executing program 1 (id=4225): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x2021000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m35.295260382s ago: executing program 1 (id=4232): socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xafd, 0x0, @perf_bp={0x0, 0x8}, 0x110a, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r1) 1m35.266972553s ago: executing program 34 (id=4232): socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xafd, 0x0, @perf_bp={0x0, 0x8}, 0x110a, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r1) 18.247456015s ago: executing program 7 (id=5625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 18.222657905s ago: executing program 7 (id=5627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf00000000fefbdf250800"], 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 18.061773037s ago: executing program 7 (id=5632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 18.060637937s ago: executing program 7 (id=5634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000500000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 17.968089519s ago: executing program 7 (id=5635): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r3, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) fallocate(r2, 0x0, 0x803, 0x2000404) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r4}, 0x18) 17.939205589s ago: executing program 7 (id=5637): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xb, [@typedef={0xc}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1d, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0xa, 0x4}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x1}]}, @func={0x7, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x0, 0x0, 0x30, 0x62239e4bceb6542b, 0x0, 0x61]}}, &(0x7f0000000140)=""/141, 0x87, 0x8d, 0x1, 0x7, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @alu={0x7, 0x0, 0x0, 0x9, 0x1, 0xfffffffffffffeb7, 0xfffffffffffffff0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x2e0, 0xc, &(0x7f0000000380)=""/12, 0x40f00, 0x75, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x3, 0x6, 0x7671}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[r0, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000480)=[{0x5, 0x5, 0x7}, {0x2, 0x5, 0xf, 0x9}, {0x2, 0x1, 0x10, 0x7}, {0x1, 0x3, 0x9, 0x1}, {0x4, 0x1, 0xf, 0x1}, {0x2, 0x2, 0x6, 0x7}], 0x10, 0x7, @void, @value}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x8, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) 2.91447986s ago: executing program 35 (id=5637): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xb, [@typedef={0xc}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1d, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0xa, 0x4}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x1}]}, @func={0x7, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x0, 0x0, 0x30, 0x62239e4bceb6542b, 0x0, 0x61]}}, &(0x7f0000000140)=""/141, 0x87, 0x8d, 0x1, 0x7, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @alu={0x7, 0x0, 0x0, 0x9, 0x1, 0xfffffffffffffeb7, 0xfffffffffffffff0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x2e0, 0xc, &(0x7f0000000380)=""/12, 0x40f00, 0x75, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x3, 0x6, 0x7671}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[r0, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000480)=[{0x5, 0x5, 0x7}, {0x2, 0x5, 0xf, 0x9}, {0x2, 0x1, 0x10, 0x7}, {0x1, 0x3, 0x9, 0x1}, {0x4, 0x1, 0xf, 0x1}, {0x2, 0x2, 0x6, 0x7}], 0x10, 0x7, @void, @value}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x8, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) 1.844380695s ago: executing program 0 (id=5909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000001418110040", @ANYRES32=r1, @ANYBLOB="af4830fb9873ca74f28a4f0df460ab3e661296158889cd59d92ce063bf8d1e77b6df2abb470983b2154eb5dbe76b904423c754a9ef00df1f0f90f382094070a0856155d9580995146c5b50529e33282c44d79eedb4b61258e2abbf7105e7ac8830b0c4a5893c6eb07a2ae069fbc1bdde61774ef70f3753ae835839522399ebaf183525c04819e1e5d5cc3515c89a3231bc26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xbd, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xaf, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6583000000ffffffec0001"], 0x28}}, 0x0) 1.762378896s ago: executing program 0 (id=5912): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) wait4(0x0, 0x0, 0x2, &(0x7f0000000100)) 1.686588367s ago: executing program 0 (id=5914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.670777997s ago: executing program 0 (id=5916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000000340)={'system_u:object_r:dhcpd_var_run_t:s0', 0x20, 'system_u:object_r:pam_exec_t:s0', 0x20, 0x4dc, 0x20, '/usr/sbin/ntpd\x00'}, 0x69) connect$can_bcm(r3, &(0x7f0000000080)={0x1d, r2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x28, r6, 0xa98286efdde39995, 0x70bd29, 0x259fdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000b00)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x2200) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) brk(0x200000001000) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.545989929s ago: executing program 6 (id=5920): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@name={'name', 0x3d, 'kfree\x00'}}]}) (async) mount$cgroup(0x0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@name={'name', 0x3d, 'kfree\x00'}}]}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10044081}, 0x0) 1.298134942s ago: executing program 6 (id=5922): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r2 = syz_io_uring_setup(0x749, &(0x7f0000000500)={0x0, 0x6666, 0x400, 0xfff, 0x5cc}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000, 0x0, 0x2000c081}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000680)={0x8, &(0x7f00000006c0)=[{0x2ca, 0x8, 0x3, 0x300}, {0x5, 0x5, 0x6, 0xfed2}, {0x5, 0x0, 0x6, 0x9}, {0x1, 0x3, 0x1, 0xba7}, {0x27, 0x6, 0x1, 0x4}, {0x8, 0xa2, 0x10, 0x89d}, {0x5, 0x7, 0xf4, 0x3000000}, {0x5, 0x5, 0x3, 0x3}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x5, &(0x7f0000000300)={0x77359400}, 0x1, 0x14, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) brk(0x5d555ede6000) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x72, @time={0x211}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000780)=ANY=[@ANYRES8=r3, @ANYRESHEX=r3, @ANYRES32=r1], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 1.024412876s ago: executing program 8 (id=5884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000001000000000c001800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="41fa93a509e0d2852c68460e3b01b7b540b4350c6e4defe649bed544a98aaddd1e6e1a61085321a5fc8b2fe3b1c9717c6d17b9e2c23f71f14309fd38117c455c095cc4bc77b34d04f50000007f3851fb21817595d2a09558b7dcc15182f7124ed9d6a1984161db4fd0adcc7b7669d0003e4ce5e98f4b1a724af7517056eb307423c49e"], 0x28}}, 0x0) 997.563756ms ago: executing program 8 (id=5923): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x2021000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 923.685847ms ago: executing program 8 (id=5924): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) wait4(0x0, 0x0, 0x2, &(0x7f0000000100)) 884.116958ms ago: executing program 8 (id=5925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 883.363828ms ago: executing program 8 (id=5926): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0xfe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f00000005c0)='nogrpid', r3) r4 = open$dir(&(0x7f0000000340)='./bus\x00', 0x105000, 0x122) mkdirat(r4, &(0x7f0000000380)='./bus\x00', 0x62) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="180100000000000000965a68cc000000850000006d00000098110000bb55bad6360229cf3e0d2d729c4c6c9f2da3718fdc483a0277b82be14d6728244a26260a17d3e4df9491b81ef9757b7924766201458fc524cf9b6a16880e54ad924102776aa89c58665b72d58eb6e8f98af44c2a1d6e2f25ed9fa91479fa1bfa7ae0681005f28e666c698b396135a58dcabeb8", @ANYRES32=r10, @ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff6d) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r13, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r11}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r14}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) pipe2(&(0x7f0000000000), 0x0) finit_module(r7, &(0x7f0000000d00)='user_xattr', 0x1) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@debug}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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") sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10, 0x0}, 0x0) 806.250559ms ago: executing program 0 (id=5927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) 730.54046ms ago: executing program 3 (id=5928): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 711.42809ms ago: executing program 3 (id=5929): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = epoll_create1(0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x10000000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0xd402, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 671.979351ms ago: executing program 3 (id=5930): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 658.391831ms ago: executing program 0 (id=5931): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1414aa0000000000000000000000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000110000000000000000048000200656362286369706865725f6e756c6c290000"], 0x154}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0xfffffffc, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4010) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r7, 0x8, &(0x7f0000000100)=0x7) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x4, 0x8000, 0x8, 0x6, 0x1, "fad50893c5e40ec22848d3f94720170dec3143"}) 552.435522ms ago: executing program 3 (id=5933): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) 504.268563ms ago: executing program 3 (id=5936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 434.835324ms ago: executing program 5 (id=5937): r0 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 434.209924ms ago: executing program 6 (id=5938): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r4 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) brk(0x200000ffc000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) 433.430054ms ago: executing program 3 (id=5939): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e6b876c1d0048007ea60864160af36504001d00380012001931a0e69ee517d3bc06000000a705255dbf7c851e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d0018d4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000440)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000380)={[{@errors_remount}, {@sysvgroups}, {@oldalloc}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r3 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r3, 0x10, 0x2, 0x7000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x4, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = geteuid() mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x1000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@cache_readahead}, {@cache_mmap}, {@version_9p2000}, {@access_client}, {@nodevmap}, {@loose}, {@cache_readahead}, {@cache_readahead}], [{@appraise}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, r6}}]}}) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) ioprio_set$pid(0x1, 0x0, 0x2000) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x14) 416.592654ms ago: executing program 5 (id=5940): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 374.873735ms ago: executing program 6 (id=5941): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = epoll_create1(0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x10000000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0xd402, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 374.547785ms ago: executing program 5 (id=5942): socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r1, 0x0) 218.316337ms ago: executing program 6 (id=5943): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/udplite6\x00') fcntl$setownex(r0, 0xf, &(0x7f0000003880)={0x1}) fcntl$getflags(r0, 0xb) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x1, 0x0, 0x3, 0x5f51, 0x10000001}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") fspick(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0) open(0x0, 0x40100, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 204.784987ms ago: executing program 5 (id=5944): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 69.347639ms ago: executing program 5 (id=5945): ioperm(0xe, 0x101, 0x1000) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x400) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.01908ms ago: executing program 8 (id=5946): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) wait4(0x0, 0x0, 0x2, &(0x7f0000000100)) 565.569µs ago: executing program 6 (id=5947): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) 0s ago: executing program 5 (id=5948): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x24008840) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000f59ffc)=0x20024, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x4000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2, @mcast2, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000009a00000079109000000000006200000e88c300000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001800dd8d000000000200000002000000000000060000000006001500040000001400168010000880"], 0x38}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r8, &(0x7f0000000380)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0}}], 0x1, 0x1) r9 = socket$inet6(0xa, 0x80001, 0x0) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000300)) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) kernel console output (not intermixed with test programs): -executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 278.546472][ T29] audit: type=1326 audit(2000000660.881:16918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.6.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 278.581664][T16974] netlink: 'syz.0.5180': attribute type 13 has an invalid length. [ 278.604984][T16977] loop5: detected capacity change from 0 to 1024 [ 278.622764][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5182'. [ 278.636725][T16974] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.643949][T16974] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.651158][T16977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.666250][T16977] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 278.682797][T16977] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 278.695846][T16977] EXT4-fs (loop5): This should not happen!! Data will be lost [ 278.695846][T16977] [ 278.705978][T16977] EXT4-fs (loop5): Total free blocks count 0 [ 278.712031][T16977] EXT4-fs (loop5): Free/Dirty block details [ 278.717952][T16977] EXT4-fs (loop5): free_blocks=68451041280 [ 278.723850][T16977] EXT4-fs (loop5): dirty_blocks=32 [ 278.729001][T16977] EXT4-fs (loop5): Block reservation details [ 278.734994][T16977] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 278.761805][T16974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.772184][T16974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.800496][T16986] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5182'. [ 278.815878][T16974] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.824357][T16974] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.833033][T16974] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.841546][T16974] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.902365][T16995] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 278.912852][T16997] loop7: detected capacity change from 0 to 512 [ 278.930699][T16997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 278.943739][T16997] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 278.996842][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 279.065302][T17008] loop7: detected capacity change from 0 to 128 [ 279.112220][T17010] program syz.7.5190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.142607][T17012] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 279.151367][T17012] ref_ctr increment failed for inode: 0x5a9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116ddb180 [ 279.217646][T17019] netlink: 'syz.6.5194': attribute type 2 has an invalid length. [ 279.218499][T17020] netlink: 'syz.6.5194': attribute type 2 has an invalid length. [ 279.225544][T17019] netlink: 'syz.6.5194': attribute type 1 has an invalid length. [ 279.233167][T17020] netlink: 'syz.6.5194': attribute type 1 has an invalid length. [ 279.233181][T17020] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.5194'. [ 279.241002][T17019] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.5194'. [ 279.251637][T17020] netlink: 'syz.6.5194': attribute type 1 has an invalid length. [ 279.275544][T17020] netlink: 'syz.6.5194': attribute type 2 has an invalid length. [ 279.283474][T17020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5194'. [ 279.345083][T17026] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 279.371594][T17028] loop7: detected capacity change from 0 to 512 [ 279.390224][T17028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 279.402895][T17028] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.436634][T15148] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 279.470441][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 279.480527][T17033] loop6: detected capacity change from 0 to 128 [ 279.589378][T17043] loop7: detected capacity change from 0 to 8192 [ 279.596982][T17043] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.861921][T17058] program syz.0.5208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.127382][T17065] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 280.216686][T17073] loop7: detected capacity change from 0 to 128 [ 280.314619][T17077] IPVS: set_ctl: invalid protocol: 14228 172.20.20.187:20001 [ 280.385532][T17081] loop5: detected capacity change from 0 to 1024 [ 280.421115][T17081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.895059][T16604] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 280.903697][T16604] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.936871][T17100] program syz.3.5221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.116406][T17102] loop7: detected capacity change from 0 to 512 [ 281.130179][T17102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 281.143142][T17102] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 281.185402][T17106] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 281.201991][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 281.224307][T10184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.280156][T17110] loop7: detected capacity change from 0 to 8192 [ 281.287973][T17110] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.578407][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5229'. [ 281.738580][T17129] loop7: detected capacity change from 0 to 128 [ 281.771186][T17129] vhci_hcd: invalid port number 96 [ 281.776357][T17129] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 281.867000][T17133] program syz.7.5233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.098891][T17137] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 282.113856][T17139] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5236'. [ 282.123257][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5236'. [ 282.132439][T17139] netlink: 31 bytes leftover after parsing attributes in process `syz.7.5236'. [ 282.133107][T17141] loop5: detected capacity change from 0 to 128 [ 282.141575][T17139] netlink: 'syz.7.5236': attribute type 3 has an invalid length. [ 282.155614][T17139] netlink: 'syz.7.5236': attribute type 2 has an invalid length. [ 282.166713][T17139] syzkaller0: entered promiscuous mode [ 282.172378][T17139] syzkaller0: entered allmulticast mode [ 282.246285][T17149] FAULT_INJECTION: forcing a failure. [ 282.246285][T17149] name failslab, interval 1, probability 0, space 0, times 0 [ 282.259166][T17149] CPU: 0 UID: 0 PID: 17149 Comm: syz.6.5241 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 282.259197][T17149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 282.259213][T17149] Call Trace: [ 282.259222][T17149] [ 282.259232][T17149] __dump_stack+0x1d/0x30 [ 282.259259][T17149] dump_stack_lvl+0xe8/0x140 [ 282.259351][T17149] dump_stack+0x15/0x1b [ 282.259372][T17149] should_fail_ex+0x265/0x280 [ 282.259409][T17149] should_failslab+0x8c/0xb0 [ 282.259493][T17149] kmem_cache_alloc_noprof+0x50/0x310 [ 282.259529][T17149] ? audit_log_start+0x365/0x6c0 [ 282.259589][T17149] audit_log_start+0x365/0x6c0 [ 282.259631][T17149] audit_seccomp+0x48/0x100 [ 282.259661][T17149] ? __seccomp_filter+0x68c/0x10d0 [ 282.259688][T17149] __seccomp_filter+0x69d/0x10d0 [ 282.259759][T17149] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 282.259793][T17149] ? vfs_write+0x75e/0x8d0 [ 282.259853][T17149] __secure_computing+0x82/0x150 [ 282.259879][T17149] syscall_trace_enter+0xcf/0x1e0 [ 282.259910][T17149] do_syscall_64+0xaa/0x1a0 [ 282.260009][T17149] ? clear_bhb_loop+0x25/0x80 [ 282.260037][T17149] ? clear_bhb_loop+0x25/0x80 [ 282.260065][T17149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.260089][T17149] RIP: 0033:0x7ff4f950e969 [ 282.260103][T17149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.260188][T17149] RSP: 002b:00007ff4f7b77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 282.260212][T17149] RAX: ffffffffffffffda RBX: 00007ff4f9735fa0 RCX: 00007ff4f950e969 [ 282.260224][T17149] RDX: 0000000000000000 RSI: ffffffff80000400 RDI: ffffffffffffffff [ 282.260235][T17149] RBP: 00007ff4f7b77090 R08: 0000000000000000 R09: 0000000000000000 [ 282.260250][T17149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.260266][T17149] R13: 0000000000000000 R14: 00007ff4f9735fa0 R15: 00007ffd03aaeb78 [ 282.260291][T17149] [ 282.314325][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 282.314346][ T29] audit: type=1326 audit(2000000664.731:17092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2500b7e969 code=0x7ffc0000 [ 282.495513][ T29] audit: type=1326 audit(2000000664.731:17093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2500b7e969 code=0x7ffc0000 [ 282.519373][ T29] audit: type=1326 audit(2000000664.731:17094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f2500b7e969 code=0x7ffc0000 [ 282.524299][T17167] program syz.0.5245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.543056][ T29] audit: type=1326 audit(2000000664.731:17095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2500b7e969 code=0x7ffc0000 [ 282.576228][ T29] audit: type=1326 audit(2000000664.731:17096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.7.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2500b7e969 code=0x7ffc0000 [ 282.600364][ T29] audit: type=1400 audit(2000000664.771:17097): avc: denied { create } for pid=17154 comm="syz.6.5243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 282.620108][ T29] audit: type=1326 audit(2000000664.781:17098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.6.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 282.643778][ T29] audit: type=1326 audit(2000000664.781:17099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.6.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 282.667504][ T29] audit: type=1326 audit(2000000664.781:17100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.6.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 282.691351][ T29] audit: type=1326 audit(2000000664.781:17101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.6.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 282.727720][T17153] __nla_validate_parse: 1 callbacks suppressed [ 282.727739][T17153] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5242'. [ 282.771654][T17171] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 282.949755][T17191] loop7: detected capacity change from 0 to 1024 [ 282.971648][T17191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.986790][T17191] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 283.003068][T17191] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 283.015831][T17191] EXT4-fs (loop7): This should not happen!! Data will be lost [ 283.015831][T17191] [ 283.025735][T17191] EXT4-fs (loop7): Total free blocks count 0 [ 283.031822][T17191] EXT4-fs (loop7): Free/Dirty block details [ 283.037796][T17191] EXT4-fs (loop7): free_blocks=68451041280 [ 283.043781][T17191] EXT4-fs (loop7): dirty_blocks=32 [ 283.049027][T17191] EXT4-fs (loop7): Block reservation details [ 283.055105][T17191] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 283.261448][T17207] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 283.294637][T17209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5259'. [ 283.835114][T17219] program syz.6.5263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.362824][T15145] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 284.398897][T17233] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 284.506041][T17244] loop6: detected capacity change from 0 to 512 [ 284.517758][T17246] loop9: detected capacity change from 0 to 7 [ 284.524263][T17246] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.532941][T17246] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.540870][T17246] loop9: unable to read partition table [ 284.547492][T17246] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 284.547492][T17246] U) failed (rc=-5) [ 284.562886][T17244] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.621004][T17256] program syz.7.5277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.770963][T17267] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 284.867647][T17277] FAULT_INJECTION: forcing a failure. [ 284.867647][T17277] name failslab, interval 1, probability 0, space 0, times 0 [ 284.873450][T17279] netlink: 596 bytes leftover after parsing attributes in process `syz.7.5287'. [ 284.880568][T17277] CPU: 0 UID: 0 PID: 17277 Comm: syz.5.5286 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 284.880608][T17277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 284.880624][T17277] Call Trace: [ 284.880632][T17277] [ 284.880643][T17277] __dump_stack+0x1d/0x30 [ 284.880671][T17277] dump_stack_lvl+0xe8/0x140 [ 284.880765][T17277] dump_stack+0x15/0x1b [ 284.880787][T17277] should_fail_ex+0x265/0x280 [ 284.880847][T17277] should_failslab+0x8c/0xb0 [ 284.880904][T17277] kmem_cache_alloc_node_noprof+0x57/0x320 [ 284.880982][T17277] ? __alloc_skb+0x101/0x320 [ 284.881022][T17277] __alloc_skb+0x101/0x320 [ 284.881058][T17277] ? audit_log_start+0x365/0x6c0 [ 284.881112][T17277] audit_log_start+0x380/0x6c0 [ 284.881155][T17277] audit_seccomp+0x48/0x100 [ 284.881186][T17277] ? __seccomp_filter+0x68c/0x10d0 [ 284.881237][T17277] __seccomp_filter+0x69d/0x10d0 [ 284.881266][T17277] ? getname_flags+0x2be/0x3b0 [ 284.881342][T17277] ? kmem_cache_free+0xdd/0x2f0 [ 284.881377][T17277] __secure_computing+0x82/0x150 [ 284.881403][T17277] syscall_trace_enter+0xcf/0x1e0 [ 284.881442][T17277] do_syscall_64+0xaa/0x1a0 [ 284.881515][T17277] ? clear_bhb_loop+0x25/0x80 [ 284.881543][T17277] ? clear_bhb_loop+0x25/0x80 [ 284.881571][T17277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.881598][T17277] RIP: 0033:0x7fa11447d37c [ 284.881619][T17277] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.881708][T17277] RSP: 002b:00007fa112ae7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.881733][T17277] RAX: ffffffffffffffda RBX: 00007fa1146a5fa0 RCX: 00007fa11447d37c [ 284.881749][T17277] RDX: 000000000000000f RSI: 00007fa112ae70a0 RDI: 0000000000000004 [ 284.881765][T17277] RBP: 00007fa112ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 284.881781][T17277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.881799][T17277] R13: 0000000000000000 R14: 00007fa1146a5fa0 R15: 00007ffd9d5b9058 [ 284.881826][T17277] [ 285.128612][T17283] program syz.5.5288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.387607][T17304] x_tables: duplicate underflow at hook 2 [ 285.477174][T17312] loop6: detected capacity change from 0 to 512 [ 285.486187][T17298] loop5: detected capacity change from 0 to 32768 [ 285.500845][T17312] EXT4-fs mount: 2 callbacks suppressed [ 285.500865][T17312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 285.543765][T17312] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 285.580293][T17320] program syz.3.5301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.592330][T17318] loop5: p1 p2 p3 < > [ 285.596611][T17318] loop5: p1 size 242222080 extends beyond EOD, truncated [ 285.625377][T17318] loop5: p2 start 4294967295 is beyond EOD, truncated [ 285.662084][T13064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 285.693066][T17298] loop5: p1 p2 p3 < > [ 285.719046][T17298] loop5: p1 size 242222080 extends beyond EOD, truncated [ 285.731052][T17298] loop5: p2 start 4294967295 is beyond EOD, truncated [ 286.128198][T17335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5308'. [ 286.137405][T17335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5308'. [ 286.154702][T17337] FAULT_INJECTION: forcing a failure. [ 286.154702][T17337] name failslab, interval 1, probability 0, space 0, times 0 [ 286.167477][T17337] CPU: 1 UID: 0 PID: 17337 Comm: syz.3.5307 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 286.167540][T17337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 286.167557][T17337] Call Trace: [ 286.167606][T17337] [ 286.167616][T17337] __dump_stack+0x1d/0x30 [ 286.167698][T17337] dump_stack_lvl+0xe8/0x140 [ 286.167790][T17337] dump_stack+0x15/0x1b [ 286.167812][T17337] should_fail_ex+0x265/0x280 [ 286.167853][T17337] should_failslab+0x8c/0xb0 [ 286.167885][T17337] __kvmalloc_node_noprof+0x126/0x4d0 [ 286.167987][T17337] ? io_alloc_cache_init+0x31/0xa0 [ 286.168091][T17337] io_alloc_cache_init+0x31/0xa0 [ 286.168123][T17337] io_rsrc_cache_init+0x43/0x50 [ 286.168148][T17337] io_ring_ctx_alloc+0x346/0x650 [ 286.168181][T17337] io_uring_create+0x10f/0x610 [ 286.168229][T17337] __se_sys_io_uring_setup+0x1f7/0x210 [ 286.168276][T17337] __x64_sys_io_uring_setup+0x31/0x40 [ 286.168319][T17337] x64_sys_call+0x184b/0x2fb0 [ 286.168344][T17337] do_syscall_64+0xd0/0x1a0 [ 286.168365][T17337] ? clear_bhb_loop+0x25/0x80 [ 286.168408][T17337] ? clear_bhb_loop+0x25/0x80 [ 286.168436][T17337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.168463][T17337] RIP: 0033:0x7fa372a2e969 [ 286.168482][T17337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.168505][T17337] RSP: 002b:00007fa371096fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 286.168577][T17337] RAX: ffffffffffffffda RBX: 00007fa372c55fa0 RCX: 00007fa372a2e969 [ 286.168594][T17337] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000001714 [ 286.168606][T17337] RBP: 0000200000000300 R08: 0000000000000000 R09: 0000200000000080 [ 286.168622][T17337] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 286.168637][T17337] R13: 0000200000000100 R14: 0000000000001714 R15: 0000200000000080 [ 286.168663][T17337] [ 286.387014][T17339] loop7: detected capacity change from 0 to 1024 [ 286.404414][T17339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.440768][T17339] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 286.456624][T17339] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 286.469082][T17339] EXT4-fs (loop7): This should not happen!! Data will be lost [ 286.469082][T17339] [ 286.478996][T17339] EXT4-fs (loop7): Total free blocks count 0 [ 286.482292][T17350] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5312'. [ 286.484987][T17339] EXT4-fs (loop7): Free/Dirty block details [ 286.485004][T17339] EXT4-fs (loop7): free_blocks=68451041280 [ 286.485018][T17339] EXT4-fs (loop7): dirty_blocks=32 [ 286.485031][T17339] EXT4-fs (loop7): Block reservation details [ 286.485041][T17339] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 286.546553][T17352] loop5: detected capacity change from 0 to 512 [ 286.560726][T17352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 286.584477][T17352] ext4 filesystem being mounted at /536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.633938][T17358] loop6: detected capacity change from 0 to 1764 [ 286.658848][T10184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 286.828254][T17360] pim6reg1: entered promiscuous mode [ 286.834387][T17360] pim6reg1: entered allmulticast mode [ 286.929660][T17366] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 287.234998][T15148] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 287.378906][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 287.378926][ T29] audit: type=1326 audit(2000000669.731:17309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa372a2e969 code=0x7fc00000 [ 287.467269][ T29] audit: type=1400 audit(2000000669.841:17310): avc: denied { listen } for pid=17370 comm="syz.3.5321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.527117][ T29] audit: type=1326 audit(2000000669.951:17311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.0.5325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6699bde969 code=0x0 [ 287.670469][T17391] tipc: Enabled bearer , priority 0 [ 287.678617][T17390] tipc: Resetting bearer [ 287.697717][T17390] tipc: Disabling bearer [ 287.715303][ T29] audit: type=1400 audit(2000000670.141:17312): avc: denied { ioctl } for pid=17382 comm="syz.7.5326" path="socket:[59111]" dev="sockfs" ino=59111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.740441][T17393] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5326'. [ 287.749522][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5326'. [ 287.807262][T17398] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5330'. [ 287.930796][ T29] audit: type=1400 audit(2000000670.361:17313): avc: denied { bind } for pid=17410 comm="syz.6.5335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.980330][ T29] audit: type=1326 audit(2000000670.381:17314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17414 comm="syz.6.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 288.004290][ T29] audit: type=1326 audit(2000000670.381:17315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17414 comm="syz.6.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 288.028076][ T29] audit: type=1326 audit(2000000670.381:17316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17414 comm="syz.6.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 288.051996][ T29] audit: type=1326 audit(2000000670.381:17317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17414 comm="syz.6.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 288.075826][ T29] audit: type=1326 audit(2000000670.381:17318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17414 comm="syz.6.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 288.140769][T17421] loop6: detected capacity change from 0 to 1024 [ 288.895850][T17446] program syz.3.5349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.929839][T17444] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5348'. [ 288.960672][T17421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.275478][T13064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.357450][T17464] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 289.366226][T17464] ref_ctr increment failed for inode: 0x92b offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101493c80 [ 289.510477][T17479] program syz.0.5360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.857629][T17491] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 289.866429][T17491] ref_ctr increment failed for inode: 0x529 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116ddcd00 [ 289.927588][T17501] loop5: detected capacity change from 0 to 512 [ 289.935782][T17501] EXT4-fs (loop5): orphan cleanup on readonly fs [ 289.942844][T17501] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.5368: bad orphan inode 13 [ 289.953513][T17501] ext4_test_bit(bit=12, block=18) = 1 [ 289.959057][T17501] is_bad_inode(inode)=0 [ 289.963240][T17501] NEXT_ORPHAN(inode)=2130706432 [ 289.968173][T17501] max_ino=32 [ 289.971421][T17501] i_nlink=1 [ 289.975350][T17501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.981124][T17509] program syz.7.5371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.992515][T17501] EXT4-fs error (device loop5): ext4_lookup:1793: inode #2: comm syz.5.5368: deleted inode referenced: 12 [ 290.020708][T17501] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 290.039896][T17501] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5368: bg 0: block 248: padding at end of block bitmap is not set [ 290.055958][T17501] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5368: Failed to acquire dquot type 1 [ 290.059006][T17514] loop7: detected capacity change from 0 to 512 [ 290.073763][T17501] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 290.100391][T17514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 290.113182][T17514] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.175678][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 290.210184][T10184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.280287][T17528] netlink: 596 bytes leftover after parsing attributes in process `+}[@'. [ 290.474106][T17539] program syz.6.5382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.194946][T17568] loop7: detected capacity change from 0 to 1024 [ 291.231238][T17568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.303262][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5392'. [ 291.316815][T17576] vlan2: entered allmulticast mode [ 291.326958][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5392'. [ 291.330733][T17578] program syz.5.5394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.435986][T17594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5401'. [ 291.465233][T17597] loop6: detected capacity change from 0 to 1024 [ 291.472977][T17597] ext4: Unknown parameter 'dont_appraise' [ 291.505853][T17602] 9pnet_fd: Insufficient options for proto=fd [ 291.544339][T17611] program syz.6.5407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.583646][T17615] sctp: [Deprecated]: syz.3.5406 (pid 17615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.583646][T17615] Use struct sctp_sack_info instead [ 291.604364][T17617] loop6: detected capacity change from 0 to 512 [ 291.620449][T17617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 291.633178][T17617] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 291.686601][T13064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 291.708171][T17621] netlink: 'syz.6.5410': attribute type 27 has an invalid length. [ 291.716362][T17621] lo: left allmulticast mode [ 291.721234][T17621] tunl0: left allmulticast mode [ 291.726209][T17621] gre0: left allmulticast mode [ 291.731216][T17621] gretap0: left allmulticast mode [ 291.736566][T17621] erspan0: left allmulticast mode [ 291.741769][T17621] ip_vti0: left allmulticast mode [ 291.746925][T17621] ip6_vti0: left allmulticast mode [ 291.752192][T17621] sit0: left allmulticast mode [ 291.757094][T17621] ip6tnl0: left allmulticast mode [ 291.762230][T17621] ip6gre0: left allmulticast mode [ 291.767383][T17621] syz_tun: left allmulticast mode [ 291.772617][T17621] ip6gretap0: left allmulticast mode [ 291.778066][T17621] bridge0: left allmulticast mode [ 291.783247][T17621] vcan0: left allmulticast mode [ 291.788171][T17621] bond0: left allmulticast mode [ 291.793231][T17621] team0: left allmulticast mode [ 291.798745][T17621] dummy0: left allmulticast mode [ 291.803818][T17621] nlmon0: left allmulticast mode [ 291.808881][T17621] caif0: left allmulticast mode [ 291.814040][T17621] batadv0: left allmulticast mode [ 291.819314][T17621] veth0: left allmulticast mode [ 291.824258][T17621] veth1: left allmulticast mode [ 291.829273][T17621] wg0: left allmulticast mode [ 291.834072][T17621] wg1: left allmulticast mode [ 291.838946][T17621] wg2: left allmulticast mode [ 291.843864][T17621] veth0_to_bridge: left allmulticast mode [ 291.849780][T17621] bridge_slave_0: left promiscuous mode [ 291.855559][T17621] veth1_to_bridge: left allmulticast mode [ 291.861467][T17621] bridge_slave_1: left allmulticast mode [ 291.867258][T17621] veth0_to_bond: left allmulticast mode [ 291.872957][T17621] bond_slave_0: left allmulticast mode [ 291.878705][T17621] veth1_to_bond: left allmulticast mode [ 291.884368][T17621] bond_slave_1: left allmulticast mode [ 291.890025][T17621] veth0_to_team: left allmulticast mode [ 291.895652][T17621] team_slave_0: left allmulticast mode [ 291.901264][T17621] veth1_to_team: left allmulticast mode [ 291.906962][T17621] team_slave_1: left allmulticast mode [ 291.912583][T17621] veth0_to_batadv: left allmulticast mode [ 291.918466][T17621] batadv_slave_0: left allmulticast mode [ 291.924215][T17621] veth1_to_batadv: left allmulticast mode [ 291.930027][T17621] batadv_slave_1: left allmulticast mode [ 291.935737][T17621] xfrm0: left allmulticast mode [ 291.940749][T17621] veth0_to_hsr: left allmulticast mode [ 291.946314][T17621] veth1_to_hsr: left allmulticast mode [ 291.951949][T17621] hsr0: left allmulticast mode [ 291.956713][T17621] hsr_slave_0: left allmulticast mode [ 291.962106][T17621] hsr_slave_1: left allmulticast mode [ 291.967698][T17621] veth1_virt_wifi: left allmulticast mode [ 291.973583][T17621] veth0_virt_wifi: left allmulticast mode [ 291.979547][T17621] veth1_vlan: left allmulticast mode [ 291.985006][T17621] vlan0: left allmulticast mode [ 291.990209][T17621] vlan1: left allmulticast mode [ 291.995330][T17621] macvlan0: left allmulticast mode [ 292.000611][T17621] macvlan1: left allmulticast mode [ 292.005812][T17621] ipvlan0: left allmulticast mode [ 292.010972][T17621] ipvlan1: left allmulticast mode [ 292.016015][T17621] veth0_vlan: left allmulticast mode [ 292.021485][T17621] veth1_macvtap: left allmulticast mode [ 292.027322][T17621] veth0_macvtap: left allmulticast mode [ 292.032996][T17621] macvtap0: left allmulticast mode [ 292.038340][T17621] macsec0: left allmulticast mode [ 292.043525][T17621] geneve0: left allmulticast mode [ 292.048640][T17621] geneve1: left allmulticast mode [ 292.055017][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.097473][T17631] loop7: detected capacity change from 0 to 128 [ 292.108096][T17631] wޣ: attempt to access beyond end of device [ 292.108096][T17631] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 292.127238][T17631] pim6reg: entered allmulticast mode [ 292.231648][T17637] FAULT_INJECTION: forcing a failure. [ 292.231648][T17637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.245008][T17637] CPU: 0 UID: 0 PID: 17637 Comm: syz.5.5415 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 292.245036][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 292.245048][T17637] Call Trace: [ 292.245054][T17637] [ 292.245064][T17637] __dump_stack+0x1d/0x30 [ 292.245148][T17637] dump_stack_lvl+0xe8/0x140 [ 292.245172][T17637] dump_stack+0x15/0x1b [ 292.245193][T17637] should_fail_ex+0x265/0x280 [ 292.245274][T17637] should_fail+0xb/0x20 [ 292.245318][T17637] should_fail_usercopy+0x1a/0x20 [ 292.245341][T17637] _copy_from_user+0x1c/0xb0 [ 292.245367][T17637] sock_do_ioctl+0xe6/0x220 [ 292.245393][T17637] sock_ioctl+0x41b/0x610 [ 292.245474][T17637] ? __pfx_sock_ioctl+0x10/0x10 [ 292.245538][T17637] __se_sys_ioctl+0xcb/0x140 [ 292.245566][T17637] __x64_sys_ioctl+0x43/0x50 [ 292.245585][T17637] x64_sys_call+0x19a8/0x2fb0 [ 292.245607][T17637] do_syscall_64+0xd0/0x1a0 [ 292.245762][T17637] ? clear_bhb_loop+0x25/0x80 [ 292.245798][T17637] ? clear_bhb_loop+0x25/0x80 [ 292.245819][T17637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.245917][T17637] RIP: 0033:0x7fa11447e969 [ 292.245937][T17637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.245959][T17637] RSP: 002b:00007fa112ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.246024][T17637] RAX: ffffffffffffffda RBX: 00007fa1146a5fa0 RCX: 00007fa11447e969 [ 292.246041][T17637] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000005 [ 292.246056][T17637] RBP: 00007fa112ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.246094][T17637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.246178][T17637] R13: 0000000000000000 R14: 00007fa1146a5fa0 R15: 00007ffd9d5b9058 [ 292.246240][T17637] [ 292.487649][T17645] program syz.5.5419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.497414][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 292.497432][ T29] audit: type=1400 audit(2000000674.911:17577): avc: denied { read write } for pid=17646 comm="syz.3.5420" name="event3" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 292.527550][ T29] audit: type=1400 audit(2000000674.911:17578): avc: denied { open } for pid=17646 comm="syz.3.5420" path="/dev/input/event3" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 292.551903][ T29] audit: type=1400 audit(2000000674.911:17579): avc: denied { ioctl } for pid=17646 comm="syz.3.5420" path="/dev/input/event3" dev="devtmpfs" ino=253 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 292.562650][T17652] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8218 sclass=netlink_xfrm_socket pid=17652 comm=syz.5.5422 [ 292.577772][ T29] audit: type=1400 audit(2000000674.911:17580): avc: granted { setsecparam } for pid=17646 comm="syz.3.5420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 292.614386][T17649] loop7: detected capacity change from 0 to 1024 [ 292.631184][T17649] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.956704][T17667] loop6: detected capacity change from 0 to 1024 [ 292.980007][T17667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.994540][T17667] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 293.009594][T17667] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 293.022154][T17667] EXT4-fs (loop6): This should not happen!! Data will be lost [ 293.022154][T17667] [ 293.031842][T17667] EXT4-fs (loop6): Total free blocks count 0 [ 293.037831][T17667] EXT4-fs (loop6): Free/Dirty block details [ 293.043831][T17667] EXT4-fs (loop6): free_blocks=68451041280 [ 293.050769][T17667] EXT4-fs (loop6): dirty_blocks=32 [ 293.055888][T17667] EXT4-fs (loop6): Block reservation details [ 293.061969][T17667] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 293.336723][ T29] audit: type=1326 audit(2000000675.761:17581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.0.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 293.354071][T17673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5427'. [ 293.362493][ T29] audit: type=1326 audit(2000000675.771:17582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.0.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 293.375395][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.393551][ T29] audit: type=1326 audit(2000000675.771:17583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.0.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 293.426205][ T29] audit: type=1326 audit(2000000675.771:17584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.0.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 293.449859][ T29] audit: type=1326 audit(2000000675.771:17585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.0.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 293.473377][ T29] audit: type=1326 audit(2000000675.771:17586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.0.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 293.529158][T17677] loop7: detected capacity change from 0 to 512 [ 293.540724][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5430'. [ 293.550727][T17677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.563453][T17677] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.577757][T17684] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5431'. [ 293.579545][T17677] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.5428: corrupted inode contents [ 293.590277][T17684] FAULT_INJECTION: forcing a failure. [ 293.590277][T17684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.600147][T17677] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.5428: mark_inode_dirty error [ 293.611681][T17684] CPU: 0 UID: 0 PID: 17684 Comm: syz.0.5431 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 293.611785][T17684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 293.611803][T17684] Call Trace: [ 293.611812][T17684] [ 293.611822][T17684] __dump_stack+0x1d/0x30 [ 293.611852][T17684] dump_stack_lvl+0xe8/0x140 [ 293.611944][T17684] dump_stack+0x15/0x1b [ 293.611991][T17684] should_fail_ex+0x265/0x280 [ 293.612114][T17684] should_fail+0xb/0x20 [ 293.612151][T17684] should_fail_usercopy+0x1a/0x20 [ 293.612176][T17684] strncpy_from_user+0x25/0x230 [ 293.612251][T17684] ? kmem_cache_alloc_noprof+0x186/0x310 [ 293.612294][T17684] ? getname_flags+0x80/0x3b0 [ 293.612335][T17684] getname_flags+0xae/0x3b0 [ 293.612437][T17684] __x64_sys_linkat+0x73/0xa0 [ 293.612472][T17684] x64_sys_call+0x2cfe/0x2fb0 [ 293.612507][T17684] do_syscall_64+0xd0/0x1a0 [ 293.612537][T17684] ? clear_bhb_loop+0x25/0x80 [ 293.612566][T17684] ? clear_bhb_loop+0x25/0x80 [ 293.612663][T17684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.612691][T17684] RIP: 0033:0x7f6699bde969 [ 293.612712][T17684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.612734][T17684] RSP: 002b:00007f6698247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 293.612759][T17684] RAX: ffffffffffffffda RBX: 00007f6699e05fa0 RCX: 00007f6699bde969 [ 293.612776][T17684] RDX: ffffffffffffffff RSI: 00002000000012c0 RDI: ffffffffffffffff [ 293.612792][T17684] RBP: 00007f6698247090 R08: 0000000000001000 R09: 0000000000000000 [ 293.612836][T17684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.612852][T17684] R13: 0000000000000000 R14: 00007f6699e05fa0 R15: 00007ffe6f65bd48 [ 293.612878][T17684] [ 293.695663][T17687] SELinux: policydb magic number 0x5f737973 does not match expected magic number 0xf97cff8c [ 293.740589][T17677] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.5428: corrupted inode contents [ 293.756056][T17691] program syz.5.5429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.764261][T17677] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.5428: mark_inode_dirty error [ 293.816955][T17687] SELinux: failed to load policy [ 293.856180][T17687] x_tables: duplicate underflow at hook 2 [ 293.878754][T15139] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 293.911723][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.948691][T17699] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 294.013833][T17704] FAULT_INJECTION: forcing a failure. [ 294.013833][T17704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.027068][T17704] CPU: 0 UID: 0 PID: 17704 Comm: syz.6.5434 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 294.027163][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 294.027179][T17704] Call Trace: [ 294.027188][T17704] [ 294.027196][T17704] __dump_stack+0x1d/0x30 [ 294.027217][T17704] dump_stack_lvl+0xe8/0x140 [ 294.027236][T17704] dump_stack+0x15/0x1b [ 294.027251][T17704] should_fail_ex+0x265/0x280 [ 294.027369][T17704] should_fail+0xb/0x20 [ 294.027404][T17704] should_fail_usercopy+0x1a/0x20 [ 294.027422][T17704] _copy_from_user+0x1c/0xb0 [ 294.027444][T17704] get_timespec64+0x4c/0x100 [ 294.027470][T17704] __se_sys_ppoll+0x75/0x200 [ 294.027537][T17704] ? fput+0x8f/0xc0 [ 294.027584][T17704] __x64_sys_ppoll+0x67/0x80 [ 294.027617][T17704] x64_sys_call+0x2de5/0x2fb0 [ 294.027683][T17704] do_syscall_64+0xd0/0x1a0 [ 294.027704][T17704] ? clear_bhb_loop+0x25/0x80 [ 294.027731][T17704] ? clear_bhb_loop+0x25/0x80 [ 294.027831][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.027852][T17704] RIP: 0033:0x7ff4f950e969 [ 294.027868][T17704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.027968][T17704] RSP: 002b:00007ff4f7b77038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 294.027989][T17704] RAX: ffffffffffffffda RBX: 00007ff4f9735fa0 RCX: 00007ff4f950e969 [ 294.028001][T17704] RDX: 0000200000000300 RSI: 0000000000000025 RDI: 0000200000000d40 [ 294.028012][T17704] RBP: 00007ff4f7b77090 R08: 0000000000000000 R09: 0000000000000000 [ 294.028024][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.028035][T17704] R13: 0000000000000000 R14: 00007ff4f9735fa0 R15: 00007ffd03aaeb78 [ 294.028060][T17704] [ 294.261139][T17715] loop6: detected capacity change from 0 to 512 [ 294.312903][T17715] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5441: Failed to acquire dquot type 1 [ 294.412425][T17715] EXT4-fs (loop6): 1 truncate cleaned up [ 294.421778][T17715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.435654][T17715] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.087834][T17715] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.098078][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5447'. [ 295.123180][T17739] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 295.210022][T17750] loop6: detected capacity change from 0 to 1024 [ 295.233363][T17750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.315944][T17765] loop8: detected capacity change from 0 to 1 [ 295.322210][T17765] Buffer I/O error on dev loop8, logical block 0, async page read [ 295.330128][T17765] Buffer I/O error on dev loop8, logical block 0, async page read [ 295.337965][T17765] loop8: unable to read partition table [ 295.343816][T17765] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 295.427429][T17769] loop5: detected capacity change from 0 to 256 [ 295.456698][T17769] vfat: Unknown parameter 'dont_measure' [ 295.687222][T17769] loop5: detected capacity change from 0 to 256 [ 295.697960][T17769] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.203761][T13064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.397382][T17804] loop6: detected capacity change from 0 to 1024 [ 296.439557][T17804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.462729][T17813] veth0_vlan: entered allmulticast mode [ 296.469933][T17813] veth0_vlan: left promiscuous mode [ 296.470852][T17804] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 296.475587][T17813] veth0_vlan: entered promiscuous mode [ 296.513081][T17804] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 296.525564][T17804] EXT4-fs (loop6): This should not happen!! Data will be lost [ 296.525564][T17804] [ 296.535469][T17804] EXT4-fs (loop6): Total free blocks count 0 [ 296.541731][T17804] EXT4-fs (loop6): Free/Dirty block details [ 296.547716][T17804] EXT4-fs (loop6): free_blocks=68451041280 [ 296.547737][T17804] EXT4-fs (loop6): dirty_blocks=32 [ 296.547753][T17804] EXT4-fs (loop6): Block reservation details [ 296.547791][T17804] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 296.675148][T17829] FAULT_INJECTION: forcing a failure. [ 296.675148][T17829] name failslab, interval 1, probability 0, space 0, times 0 [ 296.687885][T17829] CPU: 1 UID: 0 PID: 17829 Comm: syz.7.5483 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 296.687921][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 296.687938][T17829] Call Trace: [ 296.687945][T17829] [ 296.687955][T17829] __dump_stack+0x1d/0x30 [ 296.688057][T17829] dump_stack_lvl+0xe8/0x140 [ 296.688084][T17829] dump_stack+0x15/0x1b [ 296.688106][T17829] should_fail_ex+0x265/0x280 [ 296.688171][T17829] should_failslab+0x8c/0xb0 [ 296.688253][T17829] kmem_cache_alloc_noprof+0x50/0x310 [ 296.688293][T17829] ? _sctp_make_chunk+0xbf/0x210 [ 296.688332][T17829] _sctp_make_chunk+0xbf/0x210 [ 296.688434][T17829] sctp_make_abort_user+0x4c/0x3a0 [ 296.688631][T17829] ? sctp_epaddr_lookup_transport+0x9e/0x130 [ 296.688659][T17829] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 296.688804][T17829] sctp_sendmsg+0x75f/0x18d0 [ 296.688840][T17829] ? __pfx_sctp_sendmsg+0x10/0x10 [ 296.688877][T17829] inet_sendmsg+0xc2/0xd0 [ 296.688983][T17829] __sock_sendmsg+0x102/0x180 [ 296.689019][T17829] ____sys_sendmsg+0x345/0x4e0 [ 296.689098][T17829] ___sys_sendmsg+0x17b/0x1d0 [ 296.689137][T17829] __sys_sendmmsg+0x178/0x300 [ 296.689178][T17829] __x64_sys_sendmmsg+0x57/0x70 [ 296.689204][T17829] x64_sys_call+0x2f2f/0x2fb0 [ 296.689227][T17829] do_syscall_64+0xd0/0x1a0 [ 296.689304][T17829] ? clear_bhb_loop+0x25/0x80 [ 296.689330][T17829] ? clear_bhb_loop+0x25/0x80 [ 296.689356][T17829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.689426][T17829] RIP: 0033:0x7f2500b7e969 [ 296.689451][T17829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.689474][T17829] RSP: 002b:00007f24ff1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.689496][T17829] RAX: ffffffffffffffda RBX: 00007f2500da5fa0 RCX: 00007f2500b7e969 [ 296.689510][T17829] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 296.689526][T17829] RBP: 00007f24ff1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 296.689616][T17829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.689631][T17829] R13: 0000000000000000 R14: 00007f2500da5fa0 R15: 00007ffe08e08c98 [ 296.689651][T17829] [ 297.326221][T17845] loop5: detected capacity change from 0 to 512 [ 297.377312][T17845] EXT4-fs: Ignoring removed oldalloc option [ 297.431608][T15148] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 297.469296][T17845] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.5488: Parent and EA inode have the same ino 15 [ 297.513696][T17845] EXT4-fs (loop5): Remounting filesystem read-only [ 297.546442][T17845] EXT4-fs (loop5): 1 orphan inode deleted [ 297.565758][T17845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.605009][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 297.605026][ T29] audit: type=1326 audit(2000000680.031:17850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 297.680011][T17858] netlink: 'syz.7.5493': attribute type 12 has an invalid length. [ 297.716865][T10184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.748027][ T29] audit: type=1326 audit(2000000680.061:17851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 297.771690][ T29] audit: type=1326 audit(2000000680.061:17852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 297.795334][ T29] audit: type=1326 audit(2000000680.061:17853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 297.819013][ T29] audit: type=1326 audit(2000000680.061:17854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 297.842639][ T29] audit: type=1326 audit(2000000680.061:17855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 297.866420][ T29] audit: type=1326 audit(2000000680.061:17856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 297.890154][ T29] audit: type=1326 audit(2000000680.061:17857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x7ffc0000 [ 297.935571][T17870] loop6: detected capacity change from 0 to 1024 [ 297.970079][T17870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.984311][T17870] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 297.999710][T17870] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 298.012496][T17870] EXT4-fs (loop6): This should not happen!! Data will be lost [ 298.012496][T17870] [ 298.017484][T17872] loop7: detected capacity change from 0 to 512 [ 298.022437][T17870] EXT4-fs (loop6): Total free blocks count 0 [ 298.034620][T17870] EXT4-fs (loop6): Free/Dirty block details [ 298.040934][T17870] EXT4-fs (loop6): free_blocks=68451041280 [ 298.046783][T17870] EXT4-fs (loop6): dirty_blocks=32 [ 298.052021][T17870] EXT4-fs (loop6): Block reservation details [ 298.058030][T17870] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 298.065192][T17872] EXT4-fs: inline encryption not supported [ 298.069411][ T29] audit: type=1326 audit(2000000680.481:17858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17880 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 298.094670][ T29] audit: type=1326 audit(2000000680.481:17859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17880 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 298.119464][T17872] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 298.140527][T17872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 298.153628][T17872] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.179006][T17888] veth0_vlan: entered allmulticast mode [ 298.190610][T17888] veth0_vlan: left promiscuous mode [ 298.198321][T17888] veth0_vlan: entered promiscuous mode [ 298.696443][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 298.819518][T15145] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 299.126795][T17923] netlink: 'syz.6.5517': attribute type 298 has an invalid length. [ 299.442431][T17933] loop6: detected capacity change from 0 to 512 [ 299.484416][T17933] ext4: Unknown parameter 'obj_type' [ 299.796708][T17954] loop5: detected capacity change from 0 to 1024 [ 299.819467][T17958] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 299.821102][T17954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.844709][T17954] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 299.850884][T17961] loop7: detected capacity change from 0 to 128 [ 299.859998][T17954] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 299.878566][T17954] EXT4-fs (loop5): This should not happen!! Data will be lost [ 299.878566][T17954] [ 299.888374][T17954] EXT4-fs (loop5): Total free blocks count 0 [ 299.894472][T17954] EXT4-fs (loop5): Free/Dirty block details [ 299.900408][T17954] EXT4-fs (loop5): free_blocks=68451041280 [ 299.906218][T17954] EXT4-fs (loop5): dirty_blocks=32 [ 299.911538][T17954] EXT4-fs (loop5): Block reservation details [ 299.917564][T17954] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 299.946317][T17964] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 299.955126][T17964] ref_ctr increment failed for inode: 0x5e8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116dd8580 [ 300.569375][T17988] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 300.729812][T15148] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 300.813044][T17990] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 300.943224][T17997] netlink: 1240 bytes leftover after parsing attributes in process `syz.7.5546'. [ 301.166857][T18003] loop7: detected capacity change from 0 to 1024 [ 301.183340][T18003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.201852][T18003] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 301.217084][T18003] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 301.229611][T18003] EXT4-fs (loop7): This should not happen!! Data will be lost [ 301.229611][T18003] [ 301.239267][T18003] EXT4-fs (loop7): Total free blocks count 0 [ 301.245261][T18003] EXT4-fs (loop7): Free/Dirty block details [ 301.251407][T18003] EXT4-fs (loop7): free_blocks=68451041280 [ 301.257496][T18003] EXT4-fs (loop7): dirty_blocks=32 [ 301.262805][T18003] EXT4-fs (loop7): Block reservation details [ 301.268965][T18003] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 301.287368][T18013] loop5: detected capacity change from 0 to 128 [ 301.303688][T18015] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 301.738159][T18044] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 301.937311][T18047] loop6: detected capacity change from 0 to 128 [ 302.051652][T15139] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 302.160191][T18051] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5567'. [ 302.585438][T18067] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 302.722034][T18078] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8218 sclass=netlink_xfrm_socket pid=18078 comm=syz.3.5577 [ 302.746335][T18080] loop6: detected capacity change from 0 to 1024 [ 302.765006][T18080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.784086][T18080] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 302.802535][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 302.802553][ T29] audit: type=1326 audit(2000000685.231:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.3.5580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa372a2e969 code=0x0 [ 302.813012][T18080] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 302.844358][T18080] EXT4-fs (loop6): This should not happen!! Data will be lost [ 302.844358][T18080] [ 302.854272][T18080] EXT4-fs (loop6): Total free blocks count 0 [ 302.860434][T18080] EXT4-fs (loop6): Free/Dirty block details [ 302.866363][T18080] EXT4-fs (loop6): free_blocks=68451041280 [ 302.872239][T18080] EXT4-fs (loop6): dirty_blocks=32 [ 302.877371][T18080] EXT4-fs (loop6): Block reservation details [ 302.880283][T18094] loop7: detected capacity change from 0 to 512 [ 302.883526][T18080] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 302.910039][T18094] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 302.920141][T18094] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 302.935203][T18094] EXT4-fs (loop7): mount failed [ 303.215815][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5583'. [ 303.224908][T18101] FAULT_INJECTION: forcing a failure. [ 303.224908][T18101] name failslab, interval 1, probability 0, space 0, times 0 [ 303.237681][T18101] CPU: 0 UID: 0 PID: 18101 Comm: syz.5.5583 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 303.237712][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 303.237728][T18101] Call Trace: [ 303.237737][T18101] [ 303.237746][T18101] __dump_stack+0x1d/0x30 [ 303.237785][T18101] dump_stack_lvl+0xe8/0x140 [ 303.237871][T18101] dump_stack+0x15/0x1b [ 303.237888][T18101] should_fail_ex+0x265/0x280 [ 303.237926][T18101] should_failslab+0x8c/0xb0 [ 303.237961][T18101] __kvmalloc_node_noprof+0x126/0x4d0 [ 303.238045][T18101] ? alloc_netdev_mqs+0x8b7/0xab0 [ 303.238072][T18101] alloc_netdev_mqs+0x8b7/0xab0 [ 303.238099][T18101] rtnl_create_link+0x239/0x710 [ 303.238137][T18101] rtnl_newlink_create+0x151/0x630 [ 303.238197][T18101] ? __schedule+0x6a2/0xb20 [ 303.238238][T18101] rtnl_newlink+0xf29/0x12d0 [ 303.238279][T18101] ? xas_load+0x413/0x430 [ 303.238308][T18101] ? __rcu_read_unlock+0x4f/0x70 [ 303.238352][T18101] ? xa_load+0xb1/0xe0 [ 303.238380][T18101] ? __rcu_read_unlock+0x4f/0x70 [ 303.238411][T18101] ? avc_has_perm_noaudit+0x1b1/0x200 [ 303.238452][T18101] ? selinux_capable+0x1f9/0x270 [ 303.238501][T18101] ? security_capable+0x83/0x90 [ 303.238542][T18101] ? ns_capable+0x7d/0xb0 [ 303.238585][T18101] ? __pfx_rtnl_newlink+0x10/0x10 [ 303.238614][T18101] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 303.238643][T18101] ? avc_has_perm_noaudit+0x1b1/0x200 [ 303.238684][T18101] netlink_rcv_skb+0x120/0x220 [ 303.238791][T18101] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.238880][T18101] rtnetlink_rcv+0x1c/0x30 [ 303.238897][T18101] netlink_unicast+0x59e/0x670 [ 303.238927][T18101] netlink_sendmsg+0x58b/0x6b0 [ 303.239116][T18101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.239144][T18101] __sock_sendmsg+0x142/0x180 [ 303.239173][T18101] ____sys_sendmsg+0x31e/0x4e0 [ 303.239193][T18101] ___sys_sendmsg+0x17b/0x1d0 [ 303.239224][T18101] __x64_sys_sendmsg+0xd4/0x160 [ 303.239282][T18101] x64_sys_call+0x2999/0x2fb0 [ 303.239383][T18101] do_syscall_64+0xd0/0x1a0 [ 303.239401][T18101] ? clear_bhb_loop+0x25/0x80 [ 303.239482][T18101] ? clear_bhb_loop+0x25/0x80 [ 303.239500][T18101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.239562][T18101] RIP: 0033:0x7fa11447e969 [ 303.239585][T18101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.239675][T18101] RSP: 002b:00007fa112ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.239700][T18101] RAX: ffffffffffffffda RBX: 00007fa1146a5fa0 RCX: 00007fa11447e969 [ 303.239717][T18101] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 303.239728][T18101] RBP: 00007fa112ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.239739][T18101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.239750][T18101] R13: 0000000000000000 R14: 00007fa1146a5fa0 R15: 00007ffd9d5b9058 [ 303.239806][T18101] [ 303.562598][ T29] audit: type=1400 audit(2000000685.991:18038): avc: denied { getopt } for pid=18102 comm="syz.0.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.601460][T15148] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 303.614476][T18107] wireguard0: entered promiscuous mode [ 303.620085][T18107] wireguard0: entered allmulticast mode [ 303.656947][T18112] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 303.702244][T18114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18114 comm=syz.3.5589 [ 303.909691][T18127] loop7: detected capacity change from 0 to 1024 [ 303.952847][T18127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.026210][T18127] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 304.207364][T18127] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 304.219967][T18127] EXT4-fs (loop7): This should not happen!! Data will be lost [ 304.219967][T18127] [ 304.229649][T18127] EXT4-fs (loop7): Total free blocks count 0 [ 304.235640][T18127] EXT4-fs (loop7): Free/Dirty block details [ 304.241659][T18127] EXT4-fs (loop7): free_blocks=68451041280 [ 304.247519][T18127] EXT4-fs (loop7): dirty_blocks=32 [ 304.252664][T18127] EXT4-fs (loop7): Block reservation details [ 304.258719][T18127] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 304.381396][T18139] loop5: detected capacity change from 0 to 1024 [ 304.395595][T18137] SELinux: failed to load policy [ 304.400843][ T29] audit: type=1400 audit(2000000686.781:18039): avc: denied { read } for pid=18140 comm="syz.6.5598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 304.420320][ T29] audit: type=1400 audit(2000000686.821:18040): avc: denied { create } for pid=18140 comm="syz.6.5598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 304.484299][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5598'. [ 304.493257][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5598'. [ 304.513148][T18141] random: crng reseeded on system resumption [ 304.601206][T18139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.614904][ T29] audit: type=1400 audit(2000000686.941:18041): avc: denied { write } for pid=18140 comm="syz.6.5598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 304.636862][ T29] audit: type=1326 audit(2000000687.041:18042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.6.5598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4f950e969 code=0x0 [ 304.666603][ T29] audit: type=1326 audit(2000000687.091:18043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18148 comm="syz.0.5600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6699bde969 code=0x0 [ 304.689918][T18139] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 304.705342][T18139] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 304.717875][T18139] EXT4-fs (loop5): This should not happen!! Data will be lost [ 304.717875][T18139] [ 304.727626][T18139] EXT4-fs (loop5): Total free blocks count 0 [ 304.733806][T18139] EXT4-fs (loop5): Free/Dirty block details [ 304.739855][T18139] EXT4-fs (loop5): free_blocks=68451041280 [ 304.745693][T18139] EXT4-fs (loop5): dirty_blocks=32 [ 304.750967][T18139] EXT4-fs (loop5): Block reservation details [ 304.756975][T18139] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 304.799420][ T29] audit: type=1326 audit(2000000687.231:18044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.3.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa372a2e969 code=0x7ffc0000 [ 304.823147][ T29] audit: type=1326 audit(2000000687.231:18045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.3.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa372a2e969 code=0x7ffc0000 [ 304.959088][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 305.190619][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 305.524536][T18184] loop6: detected capacity change from 0 to 128 [ 305.944896][T18198] loop6: detected capacity change from 0 to 1024 [ 305.969844][T18198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.004356][T18206] FAULT_INJECTION: forcing a failure. [ 306.004356][T18206] name failslab, interval 1, probability 0, space 0, times 0 [ 306.017062][T18206] CPU: 1 UID: 0 PID: 18206 Comm: syz.3.5623 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 306.017167][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 306.017180][T18206] Call Trace: [ 306.017187][T18206] [ 306.017197][T18206] __dump_stack+0x1d/0x30 [ 306.017223][T18206] dump_stack_lvl+0xe8/0x140 [ 306.017242][T18206] dump_stack+0x15/0x1b [ 306.017260][T18206] should_fail_ex+0x265/0x280 [ 306.017294][T18206] ? alloc_mnt_ns+0x72/0x270 [ 306.017316][T18206] should_failslab+0x8c/0xb0 [ 306.017345][T18206] __kmalloc_cache_noprof+0x4c/0x320 [ 306.017371][T18206] ? inc_ucount+0xcb/0x140 [ 306.017470][T18206] alloc_mnt_ns+0x72/0x270 [ 306.017497][T18206] __se_sys_fsmount+0x398/0x580 [ 306.017530][T18206] __x64_sys_fsmount+0x43/0x50 [ 306.017614][T18206] x64_sys_call+0x2a6a/0x2fb0 [ 306.017642][T18206] do_syscall_64+0xd0/0x1a0 [ 306.017670][T18206] ? clear_bhb_loop+0x25/0x80 [ 306.017695][T18206] ? clear_bhb_loop+0x25/0x80 [ 306.017773][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.017793][T18206] RIP: 0033:0x7fa372a2e969 [ 306.017807][T18206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.017827][T18206] RSP: 002b:00007fa371097038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 306.017850][T18206] RAX: ffffffffffffffda RBX: 00007fa372c55fa0 RCX: 00007fa372a2e969 [ 306.017866][T18206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 306.017918][T18206] RBP: 00007fa371097090 R08: 0000000000000000 R09: 0000000000000000 [ 306.017929][T18206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.017940][T18206] R13: 0000000000000000 R14: 00007fa372c55fa0 R15: 00007fff5e500dd8 [ 306.017961][T18206] [ 306.238871][T18198] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 306.258736][T18216] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5627'. [ 306.270622][T18198] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 306.283097][T18198] EXT4-fs (loop6): This should not happen!! Data will be lost [ 306.283097][T18198] [ 306.292810][T18198] EXT4-fs (loop6): Total free blocks count 0 [ 306.298939][T18198] EXT4-fs (loop6): Free/Dirty block details [ 306.304877][T18198] EXT4-fs (loop6): free_blocks=68451041280 [ 306.310778][T18198] EXT4-fs (loop6): dirty_blocks=32 [ 306.315904][T18198] EXT4-fs (loop6): Block reservation details [ 306.322119][T18198] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 306.329488][T18216] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 306.337756][T18216] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 306.400262][T18229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5633'. [ 306.409444][T18229] netlink: 'syz.0.5633': attribute type 7 has an invalid length. [ 306.417282][T18229] netlink: 'syz.0.5633': attribute type 8 has an invalid length. [ 306.425087][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5633'. [ 306.449718][T18236] loop7: detected capacity change from 0 to 512 [ 306.461866][T18236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.474606][T18236] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.516792][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5636'. [ 306.516904][T14415] EXT4-fs error (device loop7): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /301/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 306.563392][T18246] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 306.572316][T18246] ref_ctr increment failed for inode: 0xa92 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116ddbc80 [ 306.748569][T18257] netlink: 'syz.0.5643': attribute type 4 has an invalid length. [ 306.756362][T18257] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5643'. [ 306.776845][T15145] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 306.792509][T18257] : renamed from $H [ 306.809416][T18261] loop6: detected capacity change from 0 to 128 [ 306.972619][T18273] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5648'. [ 307.073698][T18280] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 307.082598][T18280] ref_ctr increment failed for inode: 0xabb offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116dd8b00 [ 307.175567][T18291] loop6: detected capacity change from 0 to 1024 [ 307.191955][T18289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5654'. [ 307.277239][T18297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.289695][T18300] No such timeout policy "syz0" [ 307.306347][T18302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5660'. [ 307.336099][T18304] bridge0: port 3(gretap0) entered blocking state [ 307.342771][T18304] bridge0: port 3(gretap0) entered disabled state [ 307.378416][T18304] gretap0: entered allmulticast mode [ 307.384720][T18304] gretap0: entered promiscuous mode [ 307.384817][T18297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.411956][T18291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.424232][T18308] gretap0: left allmulticast mode [ 307.429347][T18308] gretap0: left promiscuous mode [ 307.432574][T18291] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 307.434395][T18308] bridge0: port 3(gretap0) entered disabled state [ 307.450682][T18291] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 307.468156][T18291] EXT4-fs (loop6): This should not happen!! Data will be lost [ 307.468156][T18291] [ 307.477907][T18291] EXT4-fs (loop6): Total free blocks count 0 [ 307.484000][T18291] EXT4-fs (loop6): Free/Dirty block details [ 307.489930][T18291] EXT4-fs (loop6): free_blocks=68451041280 [ 307.495828][T18291] EXT4-fs (loop6): dirty_blocks=32 [ 307.500958][T18291] EXT4-fs (loop6): Block reservation details [ 307.506992][T18291] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 307.562882][T18314] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 307.571658][T18314] ref_ctr increment failed for inode: 0xad7 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101496e00 [ 307.765244][T18334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5672'. [ 307.846169][T18340] FAULT_INJECTION: forcing a failure. [ 307.846169][T18340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.859600][T18340] CPU: 0 UID: 0 PID: 18340 Comm: syz.0.5675 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 307.859632][T18340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 307.859701][T18340] Call Trace: [ 307.859708][T18340] [ 307.859716][T18340] __dump_stack+0x1d/0x30 [ 307.859739][T18340] dump_stack_lvl+0xe8/0x140 [ 307.859764][T18340] dump_stack+0x15/0x1b [ 307.859785][T18340] should_fail_ex+0x265/0x280 [ 307.859934][T18340] should_fail_alloc_page+0xf2/0x100 [ 307.859966][T18340] __alloc_frozen_pages_noprof+0xff/0x360 [ 307.860003][T18340] alloc_pages_mpol+0xb3/0x250 [ 307.860073][T18340] folio_alloc_mpol_noprof+0x39/0x80 [ 307.860096][T18340] shmem_get_folio_gfp+0x3cf/0xd40 [ 307.860128][T18340] ? simple_xattr_get+0xb9/0x120 [ 307.860193][T18340] shmem_write_begin+0xa8/0x190 [ 307.860236][T18340] generic_perform_write+0x181/0x490 [ 307.860280][T18340] shmem_file_write_iter+0xc5/0xf0 [ 307.860334][T18340] do_iter_readv_writev+0x41e/0x4c0 [ 307.860402][T18340] vfs_writev+0x2c9/0x870 [ 307.860447][T18340] __se_sys_pwritev2+0xfc/0x1c0 [ 307.860496][T18340] __x64_sys_pwritev2+0x67/0x80 [ 307.860524][T18340] x64_sys_call+0x1cea/0x2fb0 [ 307.860544][T18340] do_syscall_64+0xd0/0x1a0 [ 307.860639][T18340] ? clear_bhb_loop+0x25/0x80 [ 307.860665][T18340] ? clear_bhb_loop+0x25/0x80 [ 307.860692][T18340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.860718][T18340] RIP: 0033:0x7f6699bde969 [ 307.860748][T18340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.860765][T18340] RSP: 002b:00007f6698247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 307.860822][T18340] RAX: ffffffffffffffda RBX: 00007f6699e05fa0 RCX: 00007f6699bde969 [ 307.860838][T18340] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 307.860854][T18340] RBP: 00007f6698247090 R08: 0000000000000000 R09: 0000000000000000 [ 307.860869][T18340] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000001 [ 307.860885][T18340] R13: 0000000000000000 R14: 00007f6699e05fa0 R15: 00007ffe6f65bd48 [ 307.860904][T18340] [ 308.114974][T15148] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 308.159504][T18347] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 308.168291][T18347] ref_ctr increment failed for inode: 0x795 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116dd8580 [ 308.267449][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 308.267468][ T29] audit: type=1326 audit(2000000690.691:18296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.297512][ T29] audit: type=1326 audit(2000000690.691:18297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.321130][ T29] audit: type=1326 audit(2000000690.691:18298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.344882][ T29] audit: type=1326 audit(2000000690.691:18299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.368526][ T29] audit: type=1326 audit(2000000690.691:18300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.392397][ T29] audit: type=1326 audit(2000000690.691:18301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.416331][ T29] audit: type=1326 audit(2000000690.691:18302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.439968][ T29] audit: type=1326 audit(2000000690.691:18303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.463697][ T29] audit: type=1326 audit(2000000690.691:18304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6699bde969 code=0x7ffc0000 [ 308.487373][ T29] audit: type=1326 audit(2000000690.691:18305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18357 comm="syz.0.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6699bde9a3 code=0x7ffc0000 [ 309.143610][T18386] vhci_hcd: invalid port number 96 [ 309.148942][T18386] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 309.213743][T18394] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 309.222648][T18394] ref_ctr increment failed for inode: 0xafc offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101497380 [ 309.389445][T18407] SELinux: failed to load policy [ 309.499963][T18412] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 309.587924][T18417] SELinux: policydb version 0 does not match my version range 15-34 [ 309.599310][T18417] SELinux: failed to load policy [ 309.620685][T18416] vhci_hcd: invalid port number 96 [ 309.625868][T18416] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 309.714553][T18428] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 309.723352][T18428] ref_ctr increment failed for inode: 0xb2e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101496300 [ 310.134779][T18447] veth0_vlan: left promiscuous mode [ 310.140097][T18447] veth0_vlan: entered allmulticast mode [ 310.146389][T18447] veth0_vlan: entered promiscuous mode [ 310.174735][T18449] loop6: detected capacity change from 0 to 128 [ 310.211429][T18449] vhci_hcd: invalid port number 96 [ 310.216635][T18449] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 310.312801][T18458] loop6: detected capacity change from 0 to 128 [ 310.381343][T18461] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 310.390185][T18461] ref_ctr increment failed for inode: 0xc78 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101496880 [ 310.622152][T18476] syzkaller0: refused to change device tx_queue_len [ 310.747206][T18483] vhci_hcd: invalid port number 96 [ 310.752647][T18483] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 310.774464][T18492] FAULT_INJECTION: forcing a failure. [ 310.774464][T18492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.787698][T18492] CPU: 0 UID: 0 PID: 18492 Comm: syz.0.5732 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 310.787732][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 310.787748][T18492] Call Trace: [ 310.787757][T18492] [ 310.787768][T18492] __dump_stack+0x1d/0x30 [ 310.787792][T18492] dump_stack_lvl+0xe8/0x140 [ 310.787874][T18492] dump_stack+0x15/0x1b [ 310.787893][T18492] should_fail_ex+0x265/0x280 [ 310.788007][T18492] should_fail+0xb/0x20 [ 310.788043][T18492] should_fail_usercopy+0x1a/0x20 [ 310.788081][T18492] strncpy_from_user+0x25/0x230 [ 310.788110][T18492] ? kstrtoull+0x111/0x140 [ 310.788150][T18492] bpf_raw_tp_link_attach+0x148/0x3f0 [ 310.788179][T18492] ? kstrtouint+0x76/0xc0 [ 310.788248][T18492] bpf_raw_tracepoint_open+0x131/0x2b0 [ 310.788287][T18492] ? security_bpf+0x2b/0x90 [ 310.788353][T18492] __sys_bpf+0x321/0x790 [ 310.788435][T18492] __x64_sys_bpf+0x41/0x50 [ 310.788496][T18492] x64_sys_call+0x2478/0x2fb0 [ 310.788525][T18492] do_syscall_64+0xd0/0x1a0 [ 310.788552][T18492] ? clear_bhb_loop+0x25/0x80 [ 310.788579][T18492] ? clear_bhb_loop+0x25/0x80 [ 310.788605][T18492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.788706][T18492] RIP: 0033:0x7f6699bde969 [ 310.788725][T18492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.788779][T18492] RSP: 002b:00007f6698247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.788802][T18492] RAX: ffffffffffffffda RBX: 00007f6699e05fa0 RCX: 00007f6699bde969 [ 310.788818][T18492] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 310.788834][T18492] RBP: 00007f6698247090 R08: 0000000000000000 R09: 0000000000000000 [ 310.788850][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.788865][T18492] R13: 0000000000000000 R14: 00007f6699e05fa0 R15: 00007ffe6f65bd48 [ 310.788890][T18492] [ 311.039978][T18496] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 311.048803][T18496] ref_ctr increment failed for inode: 0x7f3 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101494780 [ 311.139130][T18507] loop6: detected capacity change from 0 to 1024 [ 311.161328][T18507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.189356][T18507] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 311.214516][T18507] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 311.227015][T18507] EXT4-fs (loop6): This should not happen!! Data will be lost [ 311.227015][T18507] [ 311.236720][T18507] EXT4-fs (loop6): Total free blocks count 0 [ 311.242761][T18507] EXT4-fs (loop6): Free/Dirty block details [ 311.248689][T18507] EXT4-fs (loop6): free_blocks=68451041280 [ 311.254577][T18507] EXT4-fs (loop6): dirty_blocks=32 [ 311.259738][T18507] EXT4-fs (loop6): Block reservation details [ 311.265803][T18507] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 311.548882][T18515] __nla_validate_parse: 8 callbacks suppressed [ 311.548900][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.564083][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.573114][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.626709][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.635861][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.644909][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.681463][T18520] chnl_net:caif_netlink_parms(): no params data found [ 311.726441][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.735592][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.744689][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5741'. [ 311.799284][T18520] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.806468][T18520] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.818570][T18520] bridge_slave_0: entered allmulticast mode [ 311.825314][T18520] bridge_slave_0: entered promiscuous mode [ 311.833616][T18538] vhci_hcd: invalid port number 96 [ 311.838826][T18538] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 311.847150][T18520] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.854505][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.861869][T18520] bridge_slave_1: entered allmulticast mode [ 311.868588][T18520] bridge_slave_1: entered promiscuous mode [ 311.892849][T18520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.912057][T18520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.967331][T18520] team0: Port device team_slave_0 added [ 311.974518][T18520] team0: Port device team_slave_1 added [ 312.010067][T15139] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 312.024009][T18520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.031195][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.057172][T18520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.097816][T18520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.104934][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.129603][T18553] SELinux: syz.0.5745 (18553) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 312.130846][T18520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.182584][T18557] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 312.191385][T18557] ref_ctr increment failed for inode: 0x804 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101492100 [ 312.238770][T18520] hsr_slave_0: entered promiscuous mode [ 312.244845][T18520] hsr_slave_1: entered promiscuous mode [ 312.260100][T18520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.267752][T18520] Cannot create hsr debugfs directory [ 312.299671][T18563] vhci_hcd: invalid port number 96 [ 312.304865][T18563] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 312.356767][T15159] bridge_slave_1: left allmulticast mode [ 312.362562][T15159] bridge_slave_1: left promiscuous mode [ 312.368338][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.382422][T15159] bridge_slave_0: left promiscuous mode [ 312.388311][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.530541][T15159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.539915][T15159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.550264][T15159] bond0 (unregistering): Released all slaves [ 312.595906][T15159] tipc: Left network mode [ 312.612483][T15159] hsr_slave_0: left promiscuous mode [ 312.621663][T15159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.638698][T15159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.656905][T15159] pimreg (unregistering): left allmulticast mode [ 312.701887][T15159] team0 (unregistering): Port device team_slave_1 removed [ 312.712362][T15159] team0 (unregistering): Port device team_slave_0 removed [ 312.761702][T18582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5760'. [ 312.850877][T18585] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 312.859609][T18585] xt_TCPMSS: Only works on TCP SYN packets [ 312.939799][T18591] cgroup: Need name or subsystem set [ 313.001858][T18593] vhci_hcd: invalid port number 96 [ 313.007073][T18593] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 313.132100][T18520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.148072][T18520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.169917][T18520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.991158][T18520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.005170][T18611] bond0: entered promiscuous mode [ 314.011186][T18611] batadv0: entered promiscuous mode [ 314.016851][T18611] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 314.026764][T18611] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 314.053034][T18611] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 314.070934][T18611] bond0: left promiscuous mode [ 314.080611][T18611] batadv0: left promiscuous mode [ 314.159325][T18617] loop6: detected capacity change from 0 to 128 [ 314.164782][T18520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.182570][T18520] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.213837][T18520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.224411][T18520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.243632][T18617] vhci_hcd: invalid port number 96 [ 314.245564][T15139] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.248923][T18617] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 314.255895][T15139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.293799][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.301062][T15139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.416057][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 314.416075][ T29] audit: type=1400 audit(2000000696.841:18558): avc: denied { egress } for pid=3391 comm="kworker/1:4" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 314.461043][T18520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.478052][ T29] audit: type=1400 audit(2000000696.841:18559): avc: denied { sendto } for pid=3391 comm="kworker/1:4" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 314.650313][T18520] veth0_vlan: entered promiscuous mode [ 314.659761][T18520] veth1_vlan: entered promiscuous mode [ 314.678329][T18520] veth0_macvtap: entered promiscuous mode [ 314.685909][T18520] veth1_macvtap: entered promiscuous mode [ 314.697819][T18520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.708361][T18520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.720882][T18520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.731429][T18520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.742167][T18520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.754941][T18520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.765106][T18520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.774232][T18520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.783138][T18520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.791938][T18520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.816856][ T29] audit: type=1400 audit(2000000697.241:18560): avc: denied { mounton } for pid=18520 comm="syz-executor" path="/root/syzkaller.SkkFC3/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 314.846881][ T29] audit: type=1400 audit(2000000697.271:18561): avc: denied { mount } for pid=18520 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 314.869189][ T29] audit: type=1400 audit(2000000697.271:18562): avc: denied { mounton } for pid=18520 comm="syz-executor" path="/root/syzkaller.SkkFC3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 314.896243][ T29] audit: type=1400 audit(2000000697.271:18563): avc: denied { mounton } for pid=18520 comm="syz-executor" path="/root/syzkaller.SkkFC3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=64540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 314.925513][ T29] audit: type=1400 audit(2000000697.361:18564): avc: denied { mounton } for pid=18520 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 314.948622][ T29] audit: type=1400 audit(2000000697.361:18565): avc: denied { mount } for pid=18520 comm="syz-executor" name="/" dev="gadgetfs" ino=3634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 314.983850][ T29] audit: type=1326 audit(2000000697.411:18566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.5.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 315.013952][T18659] loop5: detected capacity change from 0 to 128 [ 315.038249][ T29] audit: type=1326 audit(2000000697.411:18567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18656 comm="syz.5.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 315.116415][T18663] veth0_vlan: entered allmulticast mode [ 316.290165][T18685] loop6: detected capacity change from 0 to 128 [ 316.332436][T18687] netlink: 'syz.0.5796': attribute type 6 has an invalid length. [ 316.650284][T18708] loop5: detected capacity change from 0 to 8192 [ 316.657914][T18708] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.719493][T18712] __nla_validate_parse: 6 callbacks suppressed [ 316.719531][T18712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5805'. [ 316.819645][T18715] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 316.828456][T18715] ref_ctr increment failed for inode: 0xbe5 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101493c80 [ 317.323728][T18739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18739 comm=syz.3.5816 [ 317.347074][T18742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18742 comm=syz.3.5816 [ 317.385381][T18737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5813'. [ 317.431484][T18746] loop6: detected capacity change from 0 to 128 [ 317.477092][T18752] loop5: detected capacity change from 0 to 512 [ 317.505336][T18752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 317.518537][T18752] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.602602][T18520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 317.667574][T18762] loop6: detected capacity change from 0 to 8192 [ 317.676506][T18762] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.748004][T18774] loop6: detected capacity change from 0 to 512 [ 317.756161][T18774] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 317.769492][T18774] EXT4-fs (loop6): 1 truncate cleaned up [ 317.775723][T18774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.017066][T18784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5832'. [ 318.047993][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5833'. [ 318.056937][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5833'. [ 318.603742][T13064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.673895][T18816] loop6: detected capacity change from 0 to 8192 [ 318.713092][T18822] loop5: detected capacity change from 0 to 1024 [ 318.741624][T18822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.741815][T18824] loop6: detected capacity change from 0 to 512 [ 318.763367][T18822] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 318.780313][T18822] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 318.792884][T18822] EXT4-fs (loop5): This should not happen!! Data will be lost [ 318.792884][T18822] [ 318.802691][T18822] EXT4-fs (loop5): Total free blocks count 0 [ 318.808733][T18822] EXT4-fs (loop5): Free/Dirty block details [ 318.814677][T18822] EXT4-fs (loop5): free_blocks=68451041280 [ 318.820609][T18822] EXT4-fs (loop5): dirty_blocks=32 [ 318.825732][T18822] EXT4-fs (loop5): Block reservation details [ 318.831990][T18822] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 318.844150][T18824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 318.857014][T18824] ext4 filesystem being mounted at /405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 318.922534][T13064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 318.988150][T18833] loop6: detected capacity change from 0 to 8192 [ 318.995774][T18833] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.042170][T18835] loop6: detected capacity change from 0 to 1024 [ 319.070852][T18835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.087288][T18835] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 319.103807][T18835] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 319.116224][T18835] EXT4-fs (loop6): This should not happen!! Data will be lost [ 319.116224][T18835] [ 319.125943][T18835] EXT4-fs (loop6): Total free blocks count 0 [ 319.131988][T18835] EXT4-fs (loop6): Free/Dirty block details [ 319.137902][T18835] EXT4-fs (loop6): free_blocks=68451041280 [ 319.143731][T18835] EXT4-fs (loop6): dirty_blocks=32 [ 319.148936][T18835] EXT4-fs (loop6): Block reservation details [ 319.154984][T18835] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 319.569182][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 319.569201][ T29] audit: type=1400 audit(2000000702.001:18782): avc: denied { write } for pid=18847 comm="syz.0.5856" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 319.607008][ T29] audit: type=1400 audit(2000000702.001:18783): avc: denied { checkpoint_restore } for pid=18847 comm="syz.0.5856" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.608092][T15139] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 319.676625][T18850] wireguard0: entered promiscuous mode [ 319.682278][T18850] wireguard0: entered allmulticast mode [ 319.759383][ T29] audit: type=1326 audit(2000000702.191:18784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.5.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 319.808421][ T23] IPVS: starting estimator thread 0... [ 319.823258][ T29] audit: type=1326 audit(2000000702.191:18785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.5.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 319.847016][ T29] audit: type=1326 audit(2000000702.191:18786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.5.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 319.870806][ T29] audit: type=1326 audit(2000000702.191:18787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.5.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 319.894628][ T29] audit: type=1326 audit(2000000702.191:18788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.5.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 319.918373][ T29] audit: type=1326 audit(2000000702.191:18789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.5.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 319.942097][ T29] audit: type=1326 audit(2000000702.191:18790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.5.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 319.966017][ T29] audit: type=1326 audit(2000000702.191:18791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.5.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781652e969 code=0x7ffc0000 [ 319.968253][T18856] IPVS: using max 1968 ests per chain, 98400 per kthread [ 320.079982][T15139] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 320.123844][T18864] loop6: detected capacity change from 0 to 128 [ 320.159128][T18866] loop5: detected capacity change from 0 to 1024 [ 320.183204][T18866] ext4: Unknown parameter 'nouser_xattr' [ 320.234241][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5864'. [ 320.292120][T18874] loop6: detected capacity change from 0 to 1024 [ 320.336367][T18874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.350782][T18874] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 320.364126][T18882] loop5: detected capacity change from 0 to 1024 [ 320.378511][T18874] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 320.390948][T18874] EXT4-fs (loop6): This should not happen!! Data will be lost [ 320.390948][T18874] [ 320.400636][T18874] EXT4-fs (loop6): Total free blocks count 0 [ 320.401875][T18882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.406636][T18874] EXT4-fs (loop6): Free/Dirty block details [ 320.406656][T18874] EXT4-fs (loop6): free_blocks=68451041280 [ 320.426236][T18882] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 320.430645][T18874] EXT4-fs (loop6): dirty_blocks=32 [ 320.449240][T18882] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 320.450645][T18874] EXT4-fs (loop6): Block reservation details [ 320.462980][T18882] EXT4-fs (loop5): This should not happen!! Data will be lost [ 320.462980][T18882] [ 320.468964][T18874] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 320.478625][T18882] EXT4-fs (loop5): Total free blocks count 0 [ 320.478641][T18882] EXT4-fs (loop5): Free/Dirty block details [ 320.478652][T18882] EXT4-fs (loop5): free_blocks=68451041280 [ 320.478665][T18882] EXT4-fs (loop5): dirty_blocks=32 [ 320.478677][T18882] EXT4-fs (loop5): Block reservation details [ 320.478687][T18882] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 320.637435][T18893] pimreg: left allmulticast mode [ 321.090484][T18900] FAULT_INJECTION: forcing a failure. [ 321.090484][T18900] name failslab, interval 1, probability 0, space 0, times 0 [ 321.103305][T18900] CPU: 1 UID: 0 PID: 18900 Comm: syz.0.5875 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 321.103342][T18900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 321.103357][T18900] Call Trace: [ 321.103442][T18900] [ 321.103452][T18900] __dump_stack+0x1d/0x30 [ 321.103474][T18900] dump_stack_lvl+0xe8/0x140 [ 321.103493][T18900] dump_stack+0x15/0x1b [ 321.103515][T18900] should_fail_ex+0x265/0x280 [ 321.103554][T18900] should_failslab+0x8c/0xb0 [ 321.103642][T18900] kmem_cache_alloc_node_noprof+0x57/0x320 [ 321.103694][T18900] ? __alloc_skb+0x101/0x320 [ 321.103724][T18900] __alloc_skb+0x101/0x320 [ 321.103753][T18900] netlink_alloc_large_skb+0xba/0xf0 [ 321.103830][T18900] netlink_sendmsg+0x3cf/0x6b0 [ 321.103871][T18900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.103915][T18900] __sock_sendmsg+0x142/0x180 [ 321.103975][T18900] ____sys_sendmsg+0x31e/0x4e0 [ 321.104004][T18900] ___sys_sendmsg+0x17b/0x1d0 [ 321.104043][T18900] __x64_sys_sendmsg+0xd4/0x160 [ 321.104126][T18900] x64_sys_call+0x2999/0x2fb0 [ 321.104146][T18900] do_syscall_64+0xd0/0x1a0 [ 321.104167][T18900] ? clear_bhb_loop+0x25/0x80 [ 321.104243][T18900] ? clear_bhb_loop+0x25/0x80 [ 321.104263][T18900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.104333][T18900] RIP: 0033:0x7f6699bde969 [ 321.104353][T18900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.104374][T18900] RSP: 002b:00007f6698247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.104392][T18900] RAX: ffffffffffffffda RBX: 00007f6699e05fa0 RCX: 00007f6699bde969 [ 321.104404][T18900] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 321.104471][T18900] RBP: 00007f6698247090 R08: 0000000000000000 R09: 0000000000000000 [ 321.104484][T18900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.104495][T18900] R13: 0000000000000000 R14: 00007f6699e05fa0 R15: 00007ffe6f65bd48 [ 321.104514][T18900] [ 321.334463][T15139] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 321.349332][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 321.385699][T18906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.418523][T18906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.475423][T18915] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 321.484275][T18915] ref_ctr increment failed for inode: 0xc7 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116dd8b00 [ 321.558240][T18922] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5885'. [ 321.580303][T18924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5883'. [ 321.672429][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5887'. [ 321.768146][T18939] loop5: detected capacity change from 0 to 1024 [ 321.804229][T18939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.832475][T18939] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 321.850373][T18925] chnl_net:caif_netlink_parms(): no params data found [ 321.859143][T14415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.868579][T18939] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 321.881110][T18939] EXT4-fs (loop5): This should not happen!! Data will be lost [ 321.881110][T18939] [ 321.890865][T18939] EXT4-fs (loop5): Total free blocks count 0 [ 321.896877][T18939] EXT4-fs (loop5): Free/Dirty block details [ 321.902882][T18939] EXT4-fs (loop5): free_blocks=68451041280 [ 321.908838][T18939] EXT4-fs (loop5): dirty_blocks=32 [ 321.913975][T18939] EXT4-fs (loop5): Block reservation details [ 321.920319][T18939] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 321.959169][T18954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.959522][T18925] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.974760][T18925] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.996690][T18954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.012404][T18925] bridge_slave_0: entered allmulticast mode [ 322.019651][T18925] bridge_slave_0: entered promiscuous mode [ 322.035554][T18925] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.042696][T18925] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.050147][T18925] bridge_slave_1: entered allmulticast mode [ 322.056714][T18925] bridge_slave_1: entered promiscuous mode [ 322.079142][T18925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.090492][T18925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.100068][T18964] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 322.108912][T18964] ref_ctr increment failed for inode: 0xc16 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116ddf380 [ 322.130383][T18925] team0: Port device team_slave_0 added [ 322.137425][T18925] team0: Port device team_slave_1 added [ 322.162095][T18925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.169251][T18925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.195246][T18925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.206764][T18925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.213905][T18925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.239889][T18925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.263131][T18971] vhci_hcd: invalid port number 96 [ 322.268378][T18971] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 322.285137][T18925] hsr_slave_0: entered promiscuous mode [ 322.291306][T18925] hsr_slave_1: entered promiscuous mode [ 322.297573][T18925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.305464][T18925] Cannot create hsr debugfs directory [ 322.403632][T18985] loop6: detected capacity change from 0 to 128 [ 322.408508][T18925] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 322.420835][T18925] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 322.430759][T18925] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 322.440532][T18925] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 322.450937][T18989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5905'. [ 322.461224][T18985] vhci_hcd: invalid port number 96 [ 322.466377][T18985] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 322.469158][T18925] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.480613][T18925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.487984][T18925] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.495144][T18925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.535154][T18925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.555141][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.577135][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.598738][T19000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5909'. [ 322.617724][T18925] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.629303][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.636441][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.644130][T19002] vhci_hcd: invalid port number 96 [ 322.649548][T19002] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 322.662871][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.670016][T15139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.672386][T15159] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 322.692395][T18991] loop6: detected capacity change from 0 to 164 [ 322.717813][T18925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.728332][T18925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.800337][T19010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5916'. [ 322.844235][T19019] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5917'. [ 322.876908][T19024] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=19024 comm=syz.3.5919 [ 322.893582][T18925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.911385][T19027] cgroup: No subsys list or none specified [ 322.917447][T19028] cgroup: No subsys list or none specified [ 323.021387][T19040] loop5: detected capacity change from 0 to 1024 [ 323.048877][T18925] veth0_vlan: entered promiscuous mode [ 323.057367][T18925] veth1_vlan: entered promiscuous mode [ 323.076821][T19040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.113638][T18925] veth0_macvtap: entered promiscuous mode [ 323.122694][T19040] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 323.150074][T18925] veth1_macvtap: entered promiscuous mode [ 323.170603][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.181173][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.191029][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.201665][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.212375][T19040] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 323.224952][T19040] EXT4-fs (loop5): This should not happen!! Data will be lost [ 323.224952][T19040] [ 323.234800][T19040] EXT4-fs (loop5): Total free blocks count 0 [ 323.241017][T19040] EXT4-fs (loop5): Free/Dirty block details [ 323.246940][T19040] EXT4-fs (loop5): free_blocks=68451041280 [ 323.252960][T19040] EXT4-fs (loop5): dirty_blocks=32 [ 323.258095][T19040] EXT4-fs (loop5): Block reservation details [ 323.264344][T19040] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 323.288856][T18925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.301568][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.312117][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.322024][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.332542][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.345125][T18925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.355699][T18925] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.364674][T18925] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.373688][T18925] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.382504][T18925] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.463504][T19056] loop8: detected capacity change from 0 to 128 [ 323.500777][T19056] vhci_hcd: invalid port number 96 [ 323.506064][T19056] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 323.635600][T19063] loop8: detected capacity change from 0 to 512 [ 323.654179][T19063] EXT4-fs error (device loop8): __ext4_fill_super:5502: inode #2: comm syz.8.5926: casefold flag without casefold feature [ 323.667554][T19063] EXT4-fs (loop8): get root inode failed [ 323.673245][T19063] EXT4-fs (loop8): mount failed [ 323.758559][T19068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5929'. [ 323.805104][T19074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5931'. [ 323.819018][T19074] netlink: 'syz.0.5931': attribute type 13 has an invalid length. [ 323.842223][T15159] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 323.845783][T19074] 8021q: adding VLAN 0 to HW filter on device  [ 323.862292][T19074] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.873877][T19074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.051560][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5939'. [ 324.060535][T19093] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5939'. [ 324.122348][T19100] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 324.131205][T19100] ref_ctr increment failed for inode: 0x101 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888101494d00 [ 324.164211][T19101] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5941'. [ 324.291180][T19109] loop6: detected capacity change from 0 to 512 [ 324.331526][T19109] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.455099][T11761] ================================================================== [ 324.463230][T11761] BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes [ 324.470559][T11761] [ 324.472886][T11761] read-write to 0xffff8881139e2b68 of 4 bytes by task 15332 on cpu 0: [ 324.481051][T11761] free_pid+0x77/0x180 [ 324.485126][T11761] free_pids+0x7a/0xb0 [ 324.489199][T11761] release_task+0x9d0/0xbb0 [ 324.493718][T11761] do_exit+0xee3/0x17c0 [ 324.497893][T11761] do_group_exit+0xff/0x140 [ 324.502412][T11761] get_signal+0xe59/0xf70 [ 324.506762][T11761] arch_do_signal_or_restart+0x97/0x480 [ 324.512330][T11761] syscall_exit_to_user_mode+0x68/0xb0 [ 324.517815][T11761] do_syscall_64+0xdd/0x1a0 [ 324.522327][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.528230][T11761] [ 324.530554][T11761] read to 0xffff8881139e2b68 of 4 bytes by task 11761 on cpu 1: [ 324.538189][T11761] zap_pid_ns_processes+0x1ff/0x2d0 [ 324.543404][T11761] do_exit+0x1525/0x17c0 [ 324.547661][T11761] do_group_exit+0xff/0x140 [ 324.552181][T11761] get_signal+0xe59/0xf70 [ 324.556532][T11761] arch_do_signal_or_restart+0x97/0x480 [ 324.562109][T11761] syscall_exit_to_user_mode+0x68/0xb0 [ 324.567591][T11761] do_syscall_64+0xdd/0x1a0 [ 324.572107][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.578012][T11761] [ 324.580339][T11761] value changed: 0x00000002 -> 0x00000001 [ 324.586062][T11761] [ 324.588385][T11761] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to send rpc fd=3 want=2744 sent=0 n=-1 (errno 32: Broken pipe) [ 324.594537][T11761] CPU: 1 UID: 0 PID: 11761 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 324.607220][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 324.617304][T11761] ================================================================== [ 324.636103][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 324.636122][ T29] audit: type=1400 audit(2000000707.061:19080): avc: denied { write } for pid=3299 comm="syz-executor" path="pipe:[1618]" dev="pipefs" ino=1618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 324.639783][T13064] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 324.674940][ T29] audit: type=1400 audit(2000000707.101:19081): avc: denied { recv } for pid=13064 comm="syz-executor" saddr=10.128.0.163 src=43632 daddr=10.128.0.155 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.733978][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5948'. [ 325.062650][T15159] bridge_slave_1: left allmulticast mode [ 325.068484][T15159] bridge_slave_1: left promiscuous mode [ 325.074221][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.092729][T15159] bridge_slave_0: left promiscuous mode [ 325.099228][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.138258][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 325.280072][T15159]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.288506][T15159] bond_slave_0: left promiscuous mode [ 325.294387][T15159]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.303084][T15159] bond_slave_1: left promiscuous mode [ 325.309033][T15159]  (unregistering): Released all slaves [ 325.339656][T15159] tipc: Left network mode [ 325.347082][T15159] hsr_slave_0: left promiscuous mode [ 325.352998][T15159] hsr_slave_1: left promiscuous mode [ 325.358819][T15159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.366268][T15159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.374838][T15159] veth0_vlan: left promiscuous mode [ 325.383023][T15159] pimreg (unregistering): left allmulticast mode [ 325.411489][T15159] team0 (unregistering): Port device team_slave_1 removed [ 325.421578][T15159] team0 (unregistering): Port device team_slave_0 removed [ 325.714202][T15159] IPVS: stop unused estimator thread 0... [ 326.003222][T15159] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.060620][T15159] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.120735][T15159] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.161198][T15159] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.392018][T15159] team0: left allmulticast mode [ 326.396893][T15159] team_slave_0: left allmulticast mode [ 326.402372][T15159] team_slave_1: left allmulticast mode [ 326.408142][T15159] bridge0: port 3(team0) entered disabled state [ 326.414979][T15159] bridge_slave_1: left allmulticast mode [ 326.420730][T15159] bridge_slave_1: left promiscuous mode [ 326.426524][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.434340][T15159] bridge_slave_0: left allmulticast mode [ 326.440069][T15159] bridge_slave_0: left promiscuous mode [ 326.445707][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.453916][T15159] bridge_slave_1: left allmulticast mode [ 326.459644][T15159] bridge_slave_1: left promiscuous mode [ 326.465287][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.473054][T15159] bridge_slave_0: left allmulticast mode [ 326.478831][T15159] bridge_slave_0: left promiscuous mode [ 326.484541][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.800128][T15159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.809414][T15159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.818442][T15159] bond0 (unregistering): Released all slaves [ 326.827312][T15159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.837422][T15159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.846750][T15159] bond0 (unregistering): Released all slaves [ 326.855168][T15159] bond0 (unregistering): Released all slaves [ 326.863741][T15159] bond0 (unregistering): Released all slaves [ 326.911542][T15159] tipc: Left network mode [ 326.916418][T15159] tipc: Left network mode [ 326.924446][T15159] hsr_slave_0: left promiscuous mode [ 326.930257][T15159] hsr_slave_1: left promiscuous mode [ 326.935774][T15159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.943270][T15159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.952439][T15159] hsr_slave_0: left promiscuous mode [ 326.958060][T15159] hsr_slave_1: left promiscuous mode [ 326.964194][T15159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.971637][T15159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.979168][T15159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.986552][T15159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.996043][T15159] hsr_slave_0: left promiscuous mode [ 327.001699][T15159] hsr_slave_1: left promiscuous mode [ 327.010504][T15159] veth0_vlan: left promiscuous mode [ 327.015809][T15159] veth1_macvtap: left promiscuous mode [ 327.021318][T15159] veth0_macvtap: left promiscuous mode [ 327.026937][T15159] veth1_vlan: left promiscuous mode [ 327.032718][T15159] veth0_vlan: left promiscuous mode [ 327.090044][T15159] team_slave_1 (unregistering): left promiscuous mode [ 327.097292][T15159] team0 (unregistering): Port device team_slave_1 removed [ 327.106363][T15159] team_slave_0 (unregistering): left promiscuous mode [ 327.114630][T15159] team0 (unregistering): Port device team_slave_0 removed [ 327.172045][T15159] team0 (unregistering): Port device team_slave_1 removed [ 327.181689][T15159] team0 (unregistering): Port device team_slave_0 removed [ 327.216664][T15159] pimreg (unregistering): left allmulticast mode [ 327.899054][T15159] IPVS: stop unused estimator thread 0... [ 328.012037][T15159] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.080744][T15159] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.131264][T15159] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.180601][T15159] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.251257][T15159] bridge_slave_1: left allmulticast mode [ 328.257031][T15159] bridge_slave_1: left promiscuous mode [ 328.262771][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.270631][T15159] bridge_slave_0: left allmulticast mode [ 328.276321][T15159] bridge_slave_0: left promiscuous mode [ 328.282024][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.350643][T15159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.360367][T15159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.370003][T15159] bond0 (unregistering): Released all slaves [ 328.411229][T15159] hsr_slave_0: left promiscuous mode [ 328.416986][T15159] hsr_slave_1: left promiscuous mode [ 328.422745][T15159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.430307][T15159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.437804][T15159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.445234][T15159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.455184][T15159] veth1_macvtap: left promiscuous mode [ 328.460767][T15159] veth0_macvtap: left promiscuous mode [ 328.466514][T15159] veth1_vlan: left promiscuous mode [ 328.471866][T15159] veth0_vlan: left promiscuous mode [ 328.531361][T15159] team0 (unregistering): Port device team_slave_1 removed [ 328.542338][T15159] team0 (unregistering): Port device team_slave_0 removed