last executing test programs: 1m34.655784093s ago: executing program 1 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x2001064, 0x1000, 0x7, 0x40227}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r2, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000040000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1m34.481953814s ago: executing program 1 (id=1247): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m34.461084494s ago: executing program 1 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 1m34.354632205s ago: executing program 1 (id=1253): socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@noquota}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") syz_clone(0x801000, &(0x7f00000005c0)="88d54e9c5e93077ed5cccc1e1d356ba30861d5f73514ad7ca07a75827b4321575f2e60cd47901e58e8f8b6b02902e60bf151fee95b857cc278a94606c26843cde06da14f24be2a54fafc0b6dc9cef87d36fd86b02eff27d6eb47233945bcdea74755ddfa059f11c6784f44a0a8151d64a3fa83cd64e84d6653ce27a887571c97b8c2d6d23a60fa503df2bc2cca56db324b3ae37aa93852feed9aefa01701d37636553fc9ae53272dd7cd752d70ac9f42e23f4978f9bda362112860bb3ac8e2682b5303636880dad69cd345eaf146a6e9e091a99ca5ac87fa86035659407316677d5965a2bf680c35a0b068d670ff79", 0xef, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000004c0)="1ae13f7f71ef4f6c1ff3a9cb8af35ef46499c00453d37773778b28eda74316e73c5030e3bb32c339787a584ebf54603fef67e69528e45e16d5a09ab89e4f5397b1b361f0109bd6ff66386c220931baf31090") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0xffffffffffffffff) chdir(&(0x7f0000000400)='./file0\x00') syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') stat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x20, 0x0, @fd_index=0x8}) io_uring_enter(r4, 0x6686, 0x2936, 0x28, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m34.267409666s ago: executing program 1 (id=1255): syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000028fffe0000000a90780000000000024062d13c0000000000000000000000000000000000005e435a"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x13) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r2, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r2, r2, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0xfffffffe}, 0xc3) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000e2", @ANYRES16=r4, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x104, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @local, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x77, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc10b}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x104}}, 0x80) keyctl$clear(0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x3f, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) 1m34.024626207s ago: executing program 1 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYBLOB="7766dad02992", @ANYRES8, @ANYRES64], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="000400000000000000110010", @ANYRESHEX=r0, @ANYBLOB="000000e700000000b7020000000000008500000086000000d7ab000104000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1600000000000000040000000900ba0000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="bf25a13d0103c70c1d3ae58009", @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r1, @ANYBLOB="1fd4db65c5737a9f890c0e342d670864401db1d09c324a208a9e036770d353540ffc9bcbd14c4a4e56430014389e871e8d9e5b382dde909039d64aeb82566260eaead6e556887a0a60d04d8f7cefcd22ae4a1dd009483282163a204c2032e0065ac1c4ba956b8edc17b4c157d5f4742d15e3f57d2b9eb89068fcf6127d2e4211962f03d824015c6e6b5cf51048a4fb1f03e7", @ANYRESOCT=r2], 0x48) fremovexattr(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="6f73327071e4f69f2d7b2b139a701a1d19ca2839ddcf4daa36ef74e0bc2214e3c3eee7aea52261d00bc968991b04c40c8913ef71d301d7b30e47bfe88406a2b80f1f208352da4a56ebb5b6df28784543906beae08101080ae76a9635418348758c1900603af247df7e8a001273eff98ed75a27f7caf3d15e8364828cd4a1f1e2101c20cf291279e0ecb8d166ac6526e6ed2d401f000bb355473bbf83b11e58560bb281145054de0ef558ba1dca29f2203d"]) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0x48) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)={0x2940, 0x22, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r8, &(0x7f0000000280)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) r9 = gettid() rt_sigqueueinfo(r9, 0x21, &(0x7f00000002c0)={0x1f, 0x0, 0x2}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m34.011676067s ago: executing program 32 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYBLOB="7766dad02992", @ANYRES8, @ANYRES64], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="000400000000000000110010", @ANYRESHEX=r0, @ANYBLOB="000000e700000000b7020000000000008500000086000000d7ab000104000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1600000000000000040000000900ba0000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="bf25a13d0103c70c1d3ae58009", @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r1, @ANYBLOB="1fd4db65c5737a9f890c0e342d670864401db1d09c324a208a9e036770d353540ffc9bcbd14c4a4e56430014389e871e8d9e5b382dde909039d64aeb82566260eaead6e556887a0a60d04d8f7cefcd22ae4a1dd009483282163a204c2032e0065ac1c4ba956b8edc17b4c157d5f4742d15e3f57d2b9eb89068fcf6127d2e4211962f03d824015c6e6b5cf51048a4fb1f03e7", @ANYRESOCT=r2], 0x48) fremovexattr(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="6f73327071e4f69f2d7b2b139a701a1d19ca2839ddcf4daa36ef74e0bc2214e3c3eee7aea52261d00bc968991b04c40c8913ef71d301d7b30e47bfe88406a2b80f1f208352da4a56ebb5b6df28784543906beae08101080ae76a9635418348758c1900603af247df7e8a001273eff98ed75a27f7caf3d15e8364828cd4a1f1e2101c20cf291279e0ecb8d166ac6526e6ed2d401f000bb355473bbf83b11e58560bb281145054de0ef558ba1dca29f2203d"]) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0x48) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)={0x2940, 0x22, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r8, &(0x7f0000000280)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) r9 = gettid() rt_sigqueueinfo(r9, 0x21, &(0x7f00000002c0)={0x1f, 0x0, 0x2}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m18.370857359s ago: executing program 3 (id=1557): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xfffffffffffffe18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x101}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000306030600000000000000000a0000030500010007"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x325, &(0x7f0000000800)="$eJzs3ctrG0ccwPGf3pJdVz6UUgqFwYXSUrxYgt56qCk2lApabKtQFwrrWm6F1pKxhEGlVDoEcs05Bx9yDIEQyC2XEHL1JX9BXjdffAjEEOMJ+5C8Wq0lO478IN/PwRrPzG9/sy9ZHq1Wu9/fWK+s1Y03Oi7Hacs3j7effbH46CP3d6XmZ5dyeaWiIvLHf3emHjbGf7v/8YOU7Ez+ubuXf7mTFpHDpX8kqsp1VdVaa7VSqzUidvBquV4xlPrVKpn1iJdAmU67uWKV1JpV29hoKrO6OjG2sVmq15VZbapKqakaNdXYbCrzb7NcVYZhqImxY8f8QZnslqJ9be4mTocHFm/vay179g5KtUVrHenv0+4UEt7joT77iHFJBPb/wL59B0dslCPDedjX8e7+Tw7Z/720Z4SDw8jta/skfn7TPf9bFz0cnLPF35d/ni0U5haUSousX98qbhXdR7f96biUxZKSbC98u3xwdNZrLRH75/xPhbkZ5ZiUr9ZbXnxrq+j+cZhd8+JzkrVfp/jipROfS7kL6I1PyJg/Pi9Z+SQ8Pq+8eIn64pPy9Ze+eEOy8uQvqYklq86z11H8/zmlfvylEMjve1UFAAAAAAAAAMAVY6iuo/n7SPet3oxhpJwrPrrtGbvamR93dOfXZyQrzvsDGQnOz8+osPn9uHx+/CUnAAAAAADgPao3/62YllXaPGNBx0RCmmK3Mj0pdMpN69YkRMQuiFybsmsHpvjUG3Fon7gEapLijSfp7xwLpEiH5kqJXch85+a7u+ANLJhiSEFE2mfdqkMLURHx17gf1rBX3rrX6ZORsKjoqQ6A6WTolk+PfAX9BTlJ585HXU6bIuWsYEZapx5Y5KBT81loHx0ZvhxtWonuYePo6fOqP+qHQadDM3GywR9orQNN0y/c5VoDnjRec+k/AAAAcBX5/nECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX5J3uxNa5b39vk3hfER+4RVxIUu77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOASehsAAP//MmWpqA==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x500, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0xf}, {0x5, 0xc}, {0x3, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2416cf74}}}, @TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3d, 0xf7, 0x9, 0x80000000, 0x1, 0x4, 0x7, 0x4}}, {0xc, 0x2, [0x7, 0x9, 0x9, 0x401]}}, {{0x1c, 0x1, {0x5, 0x5, 0xe31, 0x3ff, 0x2, 0x800, 0x10a2, 0x3}}, {0xa, 0x2, [0x1, 0x6, 0x81]}}, {{0x1c, 0x1, {0x2, 0x5c, 0x1, 0x1000, 0x0, 0x7, 0x7, 0x1}}, {0x6, 0x2, [0x4c9]}}, {{0x1c, 0x1, {0xdf, 0x5, 0x4, 0x5156, 0x2, 0x0, 0x3ff, 0x2}}, {0x8, 0x2, [0x8, 0xb]}}, {{0x1c, 0x1, {0xd, 0x42, 0x7, 0xde, 0x2, 0x9, 0x0, 0x9}}, {0x16, 0x2, [0x9394, 0x6, 0xf4c9, 0x9, 0x6, 0x200, 0x40, 0x2, 0x8]}}, {{0x1c, 0x1, {0xc, 0x8, 0x95b, 0x2, 0x2, 0x7, 0x9, 0xa}}, {0x18, 0x2, [0xff19, 0x4, 0x17e1, 0x8, 0x6, 0x6, 0x3, 0xc8, 0x2a, 0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x148}, 0x1, 0x0, 0x0, 0x24000895}, 0x90) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x800, 0x8, 0x7, 0x0, 0x4, 0x9}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8008}, 0x40) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r7, 0x800, 0x70bd28, 0x200000, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x2000000) 1m18.314798179s ago: executing program 3 (id=1559): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m18.250750469s ago: executing program 3 (id=1562): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9664e3e8e0235d3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0xfffffffffffffffc, {0x1, 0xff, 0x4}, 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c0000000700000008000000030000008c240100", @ANYRES32=r7, @ANYBLOB="000400"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0100"/24, @ANYRES32, @ANYBLOB], 0x50) 1m17.172547685s ago: executing program 3 (id=1567): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x10000a0, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m16.924619767s ago: executing program 3 (id=1573): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m16.655926208s ago: executing program 3 (id=1581): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) unshare(0x24020400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) 1m16.621782648s ago: executing program 33 (id=1581): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) unshare(0x24020400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) 52.488489864s ago: executing program 6 (id=2034): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x49, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xffffffffffff8001}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x24, r2, 0x1, 0xffffff7d, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, 0x0, 0x4000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r8 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x141000, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000000580)) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x2}, {0xb, 0x3}, {0x6, 0x1}, {0xc, 0x3}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000440)=""/131, 0x57, 0x83, 0x1, 0x9}, 0x28) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x18) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r11) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1000, 0xf81, 0x1, 0x80, r7, 0x1, '\x00', 0x0, r10, 0x3, 0x2, 0x4, 0x6}, 0x50) 52.345773965s ago: executing program 6 (id=2038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000680)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4e, 0x10, 0x1, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet_smc(0x2b, 0x1, 0x0) 52.273313886s ago: executing program 6 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000eeffffffcf90cd0b0000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB='O:w', @ANYRES16=r5, @ANYBLOB="20002bbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0008000000060011000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x80}, 0x18) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="799721f9b00cd4e0464898af65d73b61000000006d7586b26081b244d5480000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) 51.826362588s ago: executing program 6 (id=2049): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000005c0)={r5, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xf}}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r7, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r7, 0x0, 0x0, 0x0, 0xfffffffffe000001}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r2, @ANYBLOB="000000fb445c0000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$rxrpc(r1, &(0x7f0000000980)="16c05305c9b07888e15e60fe1ee3c6f0eb36388710cc3960bc0149fa8db4eab1bc5b27cfc2bda55a169933bfe1b5eab4563400bc276fee01596c271384d1f62725e39e9182a26fd876c2d6cbf977d72dca1ba1d685c7c1fe586fd61c8a008dc51d07013ca730715d4935ed5d7bf3e1bc506cbbdabe3781a4aaea201b3d7d2f56152b3ca4acf3679590309f7dcfe24e6f9ecab49fbe1882f08b00dcd5ff182ae257656915be382bff3c6fb9999b085579e549ab62f454e621cc08fd64a07747b677c0a59062ffbf6b53", 0xc9, 0x4004841, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffff1efb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000300, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r6], &(0x7f0000000240)='GPL\x00', 0xfa6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x12c4e224f5c6cbb0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9, 0x0, 0x8000000002}, 0x18) ioprio_set$pid(0x2, 0x0, 0x4007) 51.516227219s ago: executing program 6 (id=2059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e00)="61506eb07117164bdb4ee7ac0a137512738cac7ddf83039c6483d715bcafc5c4f7feff3c5f7c8d0773bb7447d33297aaf2f9e2b9dc15752fdb623d0008f673f7a04836a22be782e61cc35bdea0abd69a4726afa107f95b8922be17921a894c90310251c043c6ffce40aa34acd2ddccc0255708feca96f2563c7318556f4ef40d02bb5cb1", 0x84}, {&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374b780581aac75a2f848f285c99133f0435497bf6ae25625c6", 0x39}, {&(0x7f0000000f80)="da272d98f0f8962c15832ad9fc3fe69499698607da01faf3742d6a27555ae47f444bad1ea77509fed4623598addf131c04811469c810db02e91468121899cb0cfaa6d06d1cd876e6a0bee56f2bec7b61a58d4bc82f91da6fefe815e7be6c6a07ebeca051d4", 0x65}, {&(0x7f0000000040)="09be", 0x2}], 0x4}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 49.896207178s ago: executing program 6 (id=2090): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='sock_rcvqueue_full\x00', r0, 0x0, 0x26f}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x8067, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @dev}}}}}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x11}, {0x0, 0x2}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) close_range(r2, 0xffffffffffffffff, 0x0) 49.890908968s ago: executing program 34 (id=2090): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='sock_rcvqueue_full\x00', r0, 0x0, 0x26f}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x8067, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @dev}}}}}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x11}, {0x0, 0x2}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) close_range(r2, 0xffffffffffffffff, 0x0) 1.538444151s ago: executing program 7 (id=2966): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) 1.456406772s ago: executing program 7 (id=2968): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) io_setup(0x8, &(0x7f0000004200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000005c0)=0x2) openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x40040) 1.403118142s ago: executing program 5 (id=2971): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x420080) r3 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x31, &(0x7f00000006c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x827}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x11}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xd, 0x7, 0x9, 0xfffffffffffffffc, 0x4}], &(0x7f0000000200)='GPL\x00', 0x401, 0x48, &(0x7f0000000240)=""/72, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x8, 0xee6, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r0, r0, r3, r4, r0, r0], 0x0, 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r5) 1.373573702s ago: executing program 5 (id=2972): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000c80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x6000, 0x10, 0x0) 1.027495604s ago: executing program 5 (id=2975): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000080), 0x1, 0x588, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.027392184s ago: executing program 4 (id=2976): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150601010000ffdbdf251000000005000f0031000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000888c) 1.022276024s ago: executing program 7 (id=2977): r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x200000000000000) 933.438165ms ago: executing program 4 (id=2979): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4e, 0x10, 0x1, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) 914.443515ms ago: executing program 7 (id=2980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) personality(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0xfffffffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0xc, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f00000008c0), &(0x7f0000000880)=r8}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r10, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x2}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0x10, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x7, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x3, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffa, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffc, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x6, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 914.212605ms ago: executing program 5 (id=2981): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000090000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/184}, 0xc0, 0x3, 0x3800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 860.141155ms ago: executing program 4 (id=2982): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000080000000051f93a309fb92f3d8bfc90dfa4a64ca26ff9ef184dfef28fee47c1af99debaf7990dd361fbfe0c97186e497538dca07f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchownat(r1, &(0x7f0000000080)='.\x00', 0x0, r3, 0x0) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000001c0)='inet_sock_set_state\x00', r1, 0x0, 0x2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r5 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x1f13982c, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000740)={'\x00', 0x1, 0x80000000, 0x9, 0x6, 0x1}) fsmount(r5, 0x0, 0x8e) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='\':,%\x00', &(0x7f0000000340)='bpf\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'macvlan1\x00', 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) writev(0xffffffffffffffff, &(0x7f0000000580), 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 835.705375ms ago: executing program 2 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x2}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0x10, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x7, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x3, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffa, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffc, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x6, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 460.047107ms ago: executing program 2 (id=2984): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 441.031667ms ago: executing program 2 (id=2985): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000c80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x6000, 0x10, 0x0) 440.678347ms ago: executing program 0 (id=2986): syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) fcntl$lock(r0, 0x25, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e00)="61506eb07117164bdb4ee7ac0a137512738cac7ddf83039c6483d715bcafc5c4f7feff3c5f7c8d0773bb7447d33297aaf2f9e2b9dc15752fdb623d0008f673f7a04836a22be782e61cc35bdea0abd69a4726afa107f95b8922be17921a894c90310251c043c6ffce40aa34acd2ddccc0255708feca96f2563c7318556f4ef40d02bb5cb1", 0x84}, {&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374b780581aac75a2f848f285c99133f0435497bf6ae25625c6", 0x39}, {&(0x7f0000000f80)="da272d98f0f8962c15832ad9fc3fe69499698607da01faf3742d6a27555ae47f444bad1ea77509fed4623598addf131c04811469c810db02e91468121899cb0cfaa6d06d1cd876e6a0bee56f2bec7b61a58d4bc82f91da6fefe815e7be6c6a07ebeca051d4a71823d1cbd9", 0x6b}, {&(0x7f0000000040)="09bedb", 0x3}, {&(0x7f0000001040)="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", 0x11b}], 0x5}}], 0x2, 0x480e0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 373.505178ms ago: executing program 7 (id=2987): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0) io_uring_enter(r2, 0x2216, 0x72e9, 0x1c, 0x0, 0xfffffffffffffd93) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r3, 0xb}}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="4212000000000000000004000000ef00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r7, 0x5608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3f) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1020424, &(0x7f0000000c40)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@user_xattr}, {@oldalloc}, {@nombcache}]}, 0x1, 0x43d, &(0x7f0000000d80)="$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") r8 = creat(&(0x7f0000000540)='./file2\x00', 0x150) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000010805000000000000000000070000030900010073797a30000000000900010073797a310000000005000300b8d40ab1bf158285d8aa4c9a04ace51fa5000000f14093ef5b4669ae034ac1b942d45c182b8b46e46886b1a5e144fd13cb01"], 0x34}, 0x1, 0x0, 0x0, 0x2404c004}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_open(&(0x7f00000000c0)='./\x00', 0x800, 0x117, &(0x7f0000000140)={0x5, 0xe216, 0x239d7195, 0x1}) 361.295178ms ago: executing program 0 (id=2988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000080000000051f93a309fb92f3d8bfc90dfa4a64ca26ff9ef184dfef28fee47c1af99debaf7990dd361fbfe0c97186e497538dca07f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchownat(r1, &(0x7f0000000080)='.\x00', 0x0, r3, 0x0) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000001c0)='inet_sock_set_state\x00', r1, 0x0, 0x2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x1f13982c, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000740)={'\x00', 0x1, 0x80000000, 0x9, 0x6, 0x1}) fsmount(0xffffffffffffffff, 0x0, 0x8e) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\':,%\x00', &(0x7f0000000340)='bpf\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'macvlan1\x00', 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) writev(0xffffffffffffffff, &(0x7f0000000580), 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 358.016618ms ago: executing program 4 (id=2989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f00000001c0)='./file1\x00', 0x0) 299.456838ms ago: executing program 2 (id=2990): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 288.480078ms ago: executing program 4 (id=2991): syz_open_procfs(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 179.101028ms ago: executing program 5 (id=2992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 165.127189ms ago: executing program 2 (id=2993): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) sync() r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0xbc, 0x13, 0x1, 0x70bd28, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x2}, @in6=@empty, 0x0, 0x40, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x6, 0x6e6bbc, 0x1, 0x0, 0x2, 0x3}, [@tmpl={0x4}]}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) 150.242889ms ago: executing program 0 (id=2994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(0x0, 0x820009408200a49f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="1eb3a4bb42478ace025ab972d6f6c2787e0b2190674a4b31d7cf82eaa3b37de9f0b4a6a79754c8f86b10f5aadb4c8601adf1d10a2aac28dfa34048694cc38cd8c2e0f5c04f3296abfb9ac7d8f657aec8c2274519f144e86aafbeddbec7a70efb7f900d2c400d3a8a", 0x68}, {&(0x7f0000000580)="bc71779451d28fc4a7ba17d45860422e6fbb75ef46e6c58bdc2b31901a8cb45ef3f427f49e7fdd0846de8bf5fc8df045fe1f205058a09db074da3f85eec687d268cd4e0335d004f71a8a9e3577fd16926809ced02409aa5933c871b7aec963b804773219aa72919885db3b00c8e46a638d01207d313e3798acb0307a98f40dc6b438", 0x82}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000000000002000000070000000000000028000000000000000000000007000000070b4cac1e0701e00000019404e9f40044086f90fffffff91400"/88], 0x58}, 0x20048015) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x78}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000002030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/43}, 0x20) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfff9, {0x0, 0x201}, {0x50, 0x2}, @cond=[{0x1ff, 0x5, 0x6f5, 0x800, 0xc7, 0xffff}, {0xffff, 0x5, 0x1, 0x46, 0xcb, 0xfd}]}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r9, 0x80404518, &(0x7f0000000140)=""/99) clock_adjtime(0x1, &(0x7f0000000980)={0x1, 0x0, 0xf7cc, 0xee4, 0x5, 0xa8e, 0x1, 0x0, 0x9, 0x10, 0x2a, 0x3, 0x1, 0xc6, 0xdf, 0xd35, 0x4, 0xffffffffffffff71, 0x9, 0x7fff, 0x4, 0x7, 0x800000000000004, 0x2, 0x30, 0x4}) 120.422829ms ago: executing program 0 (id=2995): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000080), 0x1, 0x588, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdh0ncU3ThEZqyiGBRKR/lNjtSk4DB8IBDhT1UiRUqRysZGOHrGNju6I2F/fGiSIBAlRRNeKABBKxxAE4VBQkDkgECYEQFmolEAf+tIBwD5QARrM7a2+8s84i27vF8/tJm33zZuzvvd18b3ffm/UEUFgn0n+SiOGIuBkRhxqbtx9wonH37cry5I3K8mQSa2tP/jWpH3e9sjzZPLT5c3dFxFJE3BcRP7occXFfe9y5hcWr47VadTbbHpmfmhmZW1g8c2VqfKI6Ub1WqTx2fmzs/Lmx0f+hN8mWez8+8/qRX08+MfHS8X89dW7q639J4kK937GpHzspr0UDScSF3QjWB+W0PxEx1OXxR6vPv7zLTaJLXzyyMpI+d/dGxKl6/h+Kcv3ZjPjAi0///VC8/1ann7258uIfe9lWAGDnrKX2b70b2JtKkX72T0pnI6JRLpXOnm18hr83hkq16bn5hy9PP3PtUmOO4J7YV7p8pVYdzeYK7ol9Sbr9SL28sf3opu1KRByOiM+WD9a3z16crl3q6UgHNA1HvPadT10cvGtT/v+h3Mh/YO9K8/+XP/7eD9Lym+V+twbopTT/v/nm1OMh/6Fw7pz/B3reJqA3vP5Dccl/KK72/N/63Flg7/D6D8Ul/6G45D8Ul/yH4pL/UFyt+S/9oZgOH39lJYmIpfcdrN9Sg9m+nD/bA+wha2uJL/lDQXnvD8U1sFE82M92AL3nMz5wp7P/O34beGbn2wL0RqnfDQD65vQx639QVOb/obgG+t0AoG+8xwfM/0PxmP+H4hrucP2vd7Rcu2s0Iu6OiJ+W9+1vXusL+P81HPHaCze/+3RE6U9J9v7/9KFTw+Ovv/rD1uMGk3/UlwgGI+LTLzz55WfH5+dnH0nr/7ZeP/+VrP7RfvUG6EYzT5t5DBTX3MLi1fFarTqroLCpEPG2aIbCLhaa48D1yvJk89arsef5hyLe+GDjJIQ07o3s1tg7kM1NHqivUQ6tJredq5DswNrl585ELD0XEffl9T/JrnfeWPkYWi23xX9ndp/ejmXzJ+kxR7uMX757e/Hvb4l/vCX+u7qMv/KxLg/cJYe/1d/4L/1mfdlrIO/xH9jmV2KP3GH/49/Y1q/ftt//rr/xTx3vb/wvTUe8ko4/o3n5V0rTcn3ls3X8+cLnG/Omg9uM/5nTG+Pfjbbxr7Q+/pU7jH8nuozzk6eqn8irL/8s4o3nIu7Pjd+Md6Aea2i11Bb/ZMv488AW8f/80V9czau/8GrE2vWI05EfvzXWyPzUzMjcwuKZK1PjE9WJ6rVK5bHzY2Pnz42NjtTnqEeaM9Xtnrh19EN59Se/1uj/UIf4zf53evzXtuhzq8WvfnL43Tn1Pz/WiP/Ayfzn/0gWv/H4D7TFf092n/4/+Xd2Lm96zFsRsT+rfzAivv/y4Yfy2vWRW434lzr0v3Rb/Pb+P9xl/+O3/3kmr/rZD3f7CwCAndR5aqDfLQMAAHZaL1Ya+91HIN/Q6mC0LgMnSy3rCksb6wpp/VvZ+kJ5KeKf2RpDWv9gtkqWlnMXGoC3naOL7/1Vv9sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUHRzC4tXx2u16uxcv1sC9Np/AwAA//8Fjv+b") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 65.321519ms ago: executing program 0 (id=2996): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 64.089289ms ago: executing program 4 (id=2997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) personality(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0xfffffffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f00000008c0), &(0x7f0000000880)=r7}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 0s ago: executing program 2 (id=3000): syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) fcntl$lock(r0, 0x25, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e00)="61506eb07117164bdb4ee7ac0a137512738cac7ddf83039c6483d715bcafc5c4f7feff3c5f7c8d0773bb7447d33297aaf2f9e2b9dc15752fdb623d0008f673f7a04836a22be782e61cc35bdea0abd69a4726afa107f95b8922be17921a894c90310251c043c6ffce40aa34acd2ddccc0255708feca96f2563c7318556f4ef40d02bb5cb1", 0x84}, {&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374b780581aac75a2f848f285c99133f0435497bf6ae25625c6", 0x39}, {&(0x7f0000000f80)="da272d98f0f8962c15832ad9fc3fe69499698607da01faf3742d6a27555ae47f444bad1ea77509fed4623598addf131c04811469c810db02e91468121899cb0cfaa6d06d1cd876e6a0bee56f2bec7b61a58d4bc82f91da6fefe815e7be6c6a07ebeca051d4a71823d1cbd9", 0x6b}, {&(0x7f0000000040)="09bedb", 0x3}, {&(0x7f0000001040)="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", 0x11b}], 0x5}}], 0x2, 0x480e0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 129.798238][ T9441] Alternate GPT is invalid, using primary GPT. [ 129.804653][ T9441] loop2: p1 p2 p3 [ 129.808417][ T9441] loop2: partition table partially beyond EOD, truncated [ 129.845257][ T9454] pimreg: entered allmulticast mode [ 129.850642][ T9441] lo speed is unknown, defaulting to 1000 [ 129.851721][ T9454] pimreg: left allmulticast mode [ 129.992603][ T9470] loop7: detected capacity change from 0 to 512 [ 130.001622][ T9470] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 130.009744][ T9470] EXT4-fs (loop7): orphan cleanup on readonly fs [ 130.016188][ T9473] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 130.028569][ T9470] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.2134: corrupted inode contents [ 130.046050][ T9470] EXT4-fs (loop7): Remounting filesystem read-only [ 130.053710][ T9470] EXT4-fs (loop7): 1 truncate cleaned up [ 130.059505][ T571] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.070064][ T571] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.081450][ T571] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 130.092171][ T9470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.115055][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.251200][ T9479] lo speed is unknown, defaulting to 1000 [ 130.372334][ T9486] lo speed is unknown, defaulting to 1000 [ 130.934417][ T9493] wireguard0: entered promiscuous mode [ 130.939925][ T9493] wireguard0: entered allmulticast mode [ 130.947569][ T9498] loop5: detected capacity change from 0 to 512 [ 130.960183][ T9498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.973745][ T9498] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.037179][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.077087][ T9508] ip6t_srh: unknown srh match flags 4000 [ 131.106282][ T9511] loop2: detected capacity change from 0 to 512 [ 131.122988][ T9511] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.139914][ T9511] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.148175][ T9511] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2147: corrupted inode contents [ 131.160331][ T9511] EXT4-fs (loop2): Remounting filesystem read-only [ 131.167774][ T9511] EXT4-fs (loop2): 1 truncate cleaned up [ 131.193713][ T114] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.205398][ T114] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.243328][ T9530] loop7: detected capacity change from 0 to 128 [ 131.250426][ T114] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 131.261531][ T9530] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 131.271908][ T9511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.297104][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.297874][ T9534] loop5: detected capacity change from 0 to 1024 [ 131.313638][ T9534] EXT4-fs: Ignoring removed orlov option [ 131.321775][ T9534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.340430][ T9540] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 131.348278][ T9540] FAT-fs (loop7): Filesystem has been set read-only [ 131.355122][ T9540] syz.7.2152: attempt to access beyond end of device [ 131.355122][ T9540] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.355397][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.389339][ T9544] loop5: detected capacity change from 0 to 512 [ 131.398044][ T9544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.410561][ T9544] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.433349][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.451876][ T9547] program syz.5.2156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.836539][ T9561] lo speed is unknown, defaulting to 1000 [ 132.176273][ T9575] program syz.4.2167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.264440][ T9579] loop2: detected capacity change from 0 to 512 [ 132.355238][ T9579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.410410][ T9579] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.543566][ T9590] pimreg: entered allmulticast mode [ 132.561637][ T9590] pimreg: left allmulticast mode [ 133.106373][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.139013][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2184'. [ 133.156856][ T9625] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.022465][ T9665] lo speed is unknown, defaulting to 1000 [ 134.039228][ T9667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9667 comm=syz.2.2201 [ 134.039328][ T9667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9667 comm=syz.2.2201 [ 134.050985][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 134.050998][ T29] audit: type=1326 audit(2000000050.072:8270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcf962b099 code=0x7ffc0000 [ 134.051026][ T29] audit: type=1326 audit(2000000050.072:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf968efc9 code=0x7ffc0000 [ 134.051091][ T29] audit: type=1326 audit(2000000050.072:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf968efc9 code=0x7ffc0000 [ 134.089468][ T9670] SELinux: policydb version 0 does not match my version range 15-35 [ 134.089730][ T9670] SELinux: failed to load policy [ 134.103003][ T29] audit: type=1326 audit(2000000050.122:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.2.2203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44a13fefc9 code=0x0 [ 134.303925][ T29] audit: type=1400 audit(2000000050.322:8274): avc: denied { execute } for pid=9673 comm="syz.5.2204" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 134.333573][ T9618] delete_channel: no stack [ 134.475384][ T9678] loop5: detected capacity change from 0 to 128 [ 134.478102][ T9678] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 134.533268][ T9679] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 134.533289][ T9679] FAT-fs (loop5): Filesystem has been set read-only [ 134.533318][ T9679] syz.5.2205: attempt to access beyond end of device [ 134.533318][ T9679] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 134.994868][ T29] audit: type=1400 audit(2000000051.012:8275): avc: denied { read write } for pid=9686 comm="syz.7.2209" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.027619][ T9687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.030223][ T29] audit: type=1400 audit(2000000051.012:8276): avc: denied { open } for pid=9686 comm="syz.7.2209" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.084450][ T29] audit: type=1400 audit(2000000051.082:8277): avc: denied { mounton } for pid=9684 comm="syz.4.2208" path="/481/file0" dev="tmpfs" ino=2519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.107739][ T29] audit: type=1400 audit(2000000051.092:8278): avc: denied { read } for pid=10 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29088 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.166218][ T29] audit: type=1400 audit(2000000051.182:8279): avc: denied { mount } for pid=9695 comm="syz.2.2210" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.223822][ T9700] bond0: option arp_interval: invalid value (18446744073265055750) [ 135.232378][ T9700] bond0: option arp_interval: allowed values 0 - 2147483647 [ 135.248449][ T9703] netlink: 'syz.0.2213': attribute type 27 has an invalid length. [ 135.259540][ T9704] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2214'. [ 135.269409][ T9703] team10: left promiscuous mode [ 135.275019][ T9703] team10: left allmulticast mode [ 135.288602][ T9703] team11: left promiscuous mode [ 135.293599][ T9703] team11: left allmulticast mode [ 135.299321][ T9703] team12: left promiscuous mode [ 135.305266][ T9703] team12: left allmulticast mode [ 135.316334][ T9703] team13: left promiscuous mode [ 135.321293][ T9703] team13: left allmulticast mode [ 135.378976][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.388103][ T9706] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.398584][ T9706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.424871][ T9711] loop5: detected capacity change from 0 to 512 [ 135.442252][ T9711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.455255][ T9711] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.486463][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.596963][ T36] lo speed is unknown, defaulting to 1000 [ 135.603381][ T36] syz2: Port: 1 Link ACTIVE [ 135.607947][ T9709] netlink: 'syz.0.2213': attribute type 7 has an invalid length. [ 135.615691][ T9709] netlink: 'syz.0.2213': attribute type 8 has an invalid length. [ 135.687047][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'. [ 135.949486][ T9736] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.463666][ T9742] lo speed is unknown, defaulting to 1000 [ 136.949493][ T9764] IPv6: Can't replace route, no match found [ 136.971682][ T9765] 9pnet_fd: Insufficient options for proto=fd [ 137.228258][ T9774] program syz.7.2233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.712598][ T9793] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2240'. [ 137.754508][ T9799] pimreg: entered allmulticast mode [ 137.760367][ T9799] pimreg: left allmulticast mode [ 137.865840][ T9808] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2246'. [ 137.910040][ T9813] lo speed is unknown, defaulting to 1000 [ 138.235838][ T9824] loop2: detected capacity change from 0 to 512 [ 138.373655][ T9824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.393864][ T9824] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.521813][ T9834] lo speed is unknown, defaulting to 1000 [ 138.539202][ T9835] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 138.617947][ T9835] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2252: corrupted inode contents [ 138.635545][ T9835] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.2252: mark_inode_dirty error [ 138.647570][ T9835] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2252: corrupted inode contents [ 138.765383][ T9850] program syz.7.2259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.857683][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.884786][ T9857] loop5: detected capacity change from 0 to 128 [ 138.920268][ T9857] syz.5.2262: attempt to access beyond end of device [ 138.920268][ T9857] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 138.941319][ T9857] syz.5.2262: attempt to access beyond end of device [ 138.941319][ T9857] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 138.954829][ T9857] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 138.955668][ T9859] loop2: detected capacity change from 0 to 512 [ 138.977183][ T9857] syz.5.2262: attempt to access beyond end of device [ 138.977183][ T9857] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 138.991680][ T9857] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 139.003512][ T9857] syz.5.2262: attempt to access beyond end of device [ 139.003512][ T9857] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 139.018432][ T9857] syz.5.2262: attempt to access beyond end of device [ 139.018432][ T9857] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 139.032993][ T9857] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 139.096794][ T9857] syz.5.2262: attempt to access beyond end of device [ 139.096794][ T9857] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 139.111192][ T9857] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 139.131780][ T9857] syz.5.2262: attempt to access beyond end of device [ 139.131780][ T9857] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 139.146819][ T9859] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 139.157020][ T9859] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.163185][ T9857] syz.5.2262: attempt to access beyond end of device [ 139.163185][ T9857] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 139.176874][ T9857] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 139.191265][ T3431] hid_parser_main: 21 callbacks suppressed [ 139.191282][ T3431] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 139.205864][ T3431] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 139.208244][ T9859] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2263: corrupted inode contents [ 139.215092][ T3431] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 139.236078][ T3431] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 139.247090][ T9857] syz.5.2262: attempt to access beyond end of device [ 139.247090][ T9857] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 139.257352][ T9859] EXT4-fs (loop2): Remounting filesystem read-only [ 139.260735][ T9857] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 139.275940][ T9857] syz.5.2262: attempt to access beyond end of device [ 139.275940][ T9857] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 139.289617][ T9857] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 139.290386][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2266'. [ 139.299217][ T9857] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 139.317838][ T9859] EXT4-fs (loop2): 1 truncate cleaned up [ 139.324765][ T571] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.336320][ T571] __quota_error: 615 callbacks suppressed [ 139.336380][ T571] Quota error (device loop2): write_blk: dquota write failed [ 139.351449][ T571] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 139.362450][ T571] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.373887][ T571] Quota error (device loop2): write_blk: dquota write failed [ 139.382197][ T571] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 139.393440][ T9857] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 139.402970][ T9857] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 139.413412][ T571] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 139.424541][ T571] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 139.445827][ T571] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 139.457350][ T9859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.494827][ T9877] loop7: detected capacity change from 0 to 128 [ 139.517163][ T9877] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 139.538944][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.555890][ T9880] IPv6: Can't replace route, no match found [ 139.642959][ T9885] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 139.651465][ T9885] FAT-fs (loop7): Filesystem has been set read-only [ 139.849896][ T29] audit: type=1400 audit(2000000055.773:8895): avc: denied { ioctl } for pid=9886 comm="syz.2.2274" path="socket:[29740]" dev="sockfs" ino=29740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.876435][ T29] audit: type=1400 audit(2000000055.773:8896): avc: denied { getopt } for pid=9886 comm="syz.2.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.064563][ T9890] lo speed is unknown, defaulting to 1000 [ 140.133083][ T29] audit: type=1400 audit(2000000056.073:8897): avc: denied { create } for pid=9889 comm="syz.4.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.153258][ T29] audit: type=1400 audit(2000000056.073:8898): avc: denied { ioctl } for pid=9889 comm="syz.4.2275" path="socket:[29751]" dev="sockfs" ino=29751 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.257959][ T9895] loop5: detected capacity change from 0 to 2048 [ 140.302792][ T9895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.349572][ T9895] syzkaller1: entered promiscuous mode [ 140.356096][ T9895] syzkaller1: entered allmulticast mode [ 140.540540][ T9929] netlink: 'syz.0.2290': attribute type 7 has an invalid length. [ 140.548304][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 140.634958][ T9935] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 140.691619][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.745815][ T9945] loop2: detected capacity change from 0 to 128 [ 140.752006][ T9948] loop5: detected capacity change from 0 to 512 [ 140.768922][ T9945] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 140.794967][ T9948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.795089][ T9948] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.814349][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.829040][ T9951] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 140.856261][ T9951] FAT-fs (loop2): Filesystem has been set read-only [ 140.973353][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2303'. [ 140.994013][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2299'. [ 141.010858][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2305'. [ 141.020507][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2305'. [ 141.105854][ T9984] program syz.0.2309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.118934][ T9986] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 141.184776][ T9992] A link change request failed with some changes committed already. Interface $Hÿ may have been left with an inconsistent configuration, please check. [ 141.234173][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2315'. [ 141.244644][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2311'. [ 141.260114][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2311'. [ 141.276057][ T9988] vhci_hcd: invalid port number 255 [ 141.281310][ T9988] vhci_hcd: default hub control req: 8031 v0303 i00ff l0 [ 141.298719][T10002] IPv6: Can't replace route, no match found [ 141.338366][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2320'. [ 141.348510][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'. [ 141.536204][T10038] IPv6: Can't replace route, no match found [ 141.658505][T10046] 9pnet_fd: p9_fd_create_unix (10046): problem connecting socket: ./file0: -2 [ 141.669227][T10046] netlink: 'syz.2.2333': attribute type 4 has an invalid length. [ 141.686255][T10046] bridge3: entered promiscuous mode [ 141.694945][T10046] netlink: 'syz.2.2333': attribute type 4 has an invalid length. [ 141.830820][T10062] random: crng reseeded on system resumption [ 141.847217][T10062] Restarting kernel threads ... [ 141.860079][T10062] Done restarting kernel threads. [ 141.879035][T10064] lo speed is unknown, defaulting to 1000 [ 142.042742][T10072] loop7: detected capacity change from 0 to 128 [ 142.076642][T10072] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 142.179136][T10076] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 142.187037][T10076] FAT-fs (loop7): Filesystem has been set read-only [ 142.356952][T10083] lo speed is unknown, defaulting to 1000 [ 142.401640][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.451086][T10089] pimreg: entered allmulticast mode [ 142.456986][T10089] pimreg: left allmulticast mode [ 142.462319][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.707639][T10105] program syz.0.2352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.992313][T10111] A link change request failed with some changes committed already. Interface $Hÿ may have been left with an inconsistent configuration, please check. [ 143.213608][T10120] pimreg: entered allmulticast mode [ 143.272335][T10126] pimreg: left allmulticast mode [ 143.423723][T10129] loop2: detected capacity change from 0 to 764 [ 143.542511][T10142] program syz.4.2363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.617569][T10147] FAULT_INJECTION: forcing a failure. [ 143.617569][T10147] name failslab, interval 1, probability 0, space 0, times 0 [ 143.630399][T10147] CPU: 0 UID: 0 PID: 10147 Comm: syz.0.2365 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.630445][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.630455][T10147] Call Trace: [ 143.630461][T10147] [ 143.630467][T10147] __dump_stack+0x1d/0x30 [ 143.630489][T10147] dump_stack_lvl+0xe8/0x140 [ 143.630563][T10147] dump_stack+0x15/0x1b [ 143.630580][T10147] should_fail_ex+0x265/0x280 [ 143.630601][T10147] ? __scm_send+0x3dd/0xb30 [ 143.630620][T10147] should_failslab+0x8c/0xb0 [ 143.630737][T10147] __kmalloc_cache_noprof+0x4c/0x4a0 [ 143.630765][T10147] ? _raw_spin_unlock_irq+0x26/0x50 [ 143.630786][T10147] __scm_send+0x3dd/0xb30 [ 143.630805][T10147] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 143.630890][T10147] unix_stream_sendmsg+0xb9/0xb90 [ 143.630969][T10147] ? selinux_socket_sendmsg+0x175/0x1b0 [ 143.631000][T10147] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 143.631026][T10147] __sock_sendmsg+0x145/0x180 [ 143.631045][T10147] ____sys_sendmsg+0x31e/0x4e0 [ 143.631128][T10147] ___sys_sendmsg+0x17b/0x1d0 [ 143.631198][T10147] __x64_sys_sendmsg+0xd4/0x160 [ 143.631312][T10147] x64_sys_call+0x191e/0x3000 [ 143.631334][T10147] do_syscall_64+0xd2/0x200 [ 143.631352][T10147] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.631404][T10147] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.631430][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.631451][T10147] RIP: 0033:0x7f35dd6defc9 [ 143.631466][T10147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.631500][T10147] RSP: 002b:00007f35dc13f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.631595][T10147] RAX: ffffffffffffffda RBX: 00007f35dd935fa0 RCX: 00007f35dd6defc9 [ 143.631605][T10147] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000007 [ 143.631615][T10147] RBP: 00007f35dc13f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.631652][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.631778][T10147] R13: 00007f35dd936038 R14: 00007f35dd935fa0 R15: 00007fff15fac808 [ 143.631795][T10147] [ 143.893818][T10155] netlink: 'syz.0.2369': attribute type 10 has an invalid length. [ 143.903160][T10155] veth1_vlan: left promiscuous mode [ 143.909079][T10155] batman_adv: batadv0: Adding interface: veth1_vlan [ 143.916653][T10155] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.926061][T10155] batman_adv: batadv0: Interface activated: veth1_vlan [ 144.074293][T10169] FAULT_INJECTION: forcing a failure. [ 144.074293][T10169] name failslab, interval 1, probability 0, space 0, times 0 [ 144.086998][T10169] CPU: 1 UID: 0 PID: 10169 Comm: syz.7.2375 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.087025][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.087037][T10169] Call Trace: [ 144.087044][T10169] [ 144.087053][T10169] __dump_stack+0x1d/0x30 [ 144.087072][T10169] dump_stack_lvl+0xe8/0x140 [ 144.087140][T10169] dump_stack+0x15/0x1b [ 144.087155][T10169] should_fail_ex+0x265/0x280 [ 144.087171][T10169] should_failslab+0x8c/0xb0 [ 144.087269][T10169] kmem_cache_alloc_noprof+0x50/0x480 [ 144.087337][T10169] ? skb_clone+0x151/0x1f0 [ 144.087357][T10169] skb_clone+0x151/0x1f0 [ 144.087375][T10169] __netlink_deliver_tap+0x2c9/0x500 [ 144.087407][T10169] ? netlink_attachskb+0x2cc/0x650 [ 144.087500][T10169] netlink_sendskb+0x126/0x150 [ 144.087535][T10169] netlink_unicast+0x2a2/0x690 [ 144.087559][T10169] netlink_ack+0x4c8/0x500 [ 144.087665][T10169] netlink_rcv_skb+0x192/0x220 [ 144.087690][T10169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.087718][T10169] rtnetlink_rcv+0x1c/0x30 [ 144.087805][T10169] netlink_unicast+0x5c0/0x690 [ 144.087833][T10169] netlink_sendmsg+0x58b/0x6b0 [ 144.087854][T10169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.087948][T10169] __sock_sendmsg+0x145/0x180 [ 144.088036][T10169] ____sys_sendmsg+0x31e/0x4e0 [ 144.088104][T10169] ___sys_sendmsg+0x17b/0x1d0 [ 144.088142][T10169] __x64_sys_sendmsg+0xd4/0x160 [ 144.088175][T10169] x64_sys_call+0x191e/0x3000 [ 144.088196][T10169] do_syscall_64+0xd2/0x200 [ 144.088308][T10169] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.088334][T10169] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.088362][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.088383][T10169] RIP: 0033:0x7fb5e68cefc9 [ 144.088396][T10169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.088475][T10169] RSP: 002b:00007fb5e532f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.088546][T10169] RAX: ffffffffffffffda RBX: 00007fb5e6b25fa0 RCX: 00007fb5e68cefc9 [ 144.088557][T10169] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 144.088568][T10169] RBP: 00007fb5e532f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.088608][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.088620][T10169] R13: 00007fb5e6b26038 R14: 00007fb5e6b25fa0 R15: 00007fffdd579398 [ 144.088639][T10169] [ 144.338167][T10173] SELinux: Context Ü is not valid (left unmapped). [ 144.362041][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 144.362055][ T29] audit: type=1400 audit(2000000060.383:9544): avc: denied { watch watch_reads } for pid=10170 comm="syz.0.2376" path="/495" dev="tmpfs" ino=2587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 144.392607][T10171] netlink: 'syz.0.2376': attribute type 39 has an invalid length. [ 144.449360][ T29] audit: type=1326 audit(2000000060.463:9545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.473573][ T29] audit: type=1326 audit(2000000060.463:9546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.475858][T10188] pimreg: entered allmulticast mode [ 144.497443][ T29] audit: type=1326 audit(2000000060.463:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.497502][ T29] audit: type=1326 audit(2000000060.463:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.497524][ T29] audit: type=1326 audit(2000000060.463:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.497568][ T29] audit: type=1326 audit(2000000060.463:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.497593][ T29] audit: type=1326 audit(2000000060.463:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.497616][ T29] audit: type=1326 audit(2000000060.463:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.497698][ T29] audit: type=1326 audit(2000000060.463:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 144.690637][T10190] pimreg: left allmulticast mode [ 145.005328][T10211] lo speed is unknown, defaulting to 1000 [ 145.159159][T10215] FAULT_INJECTION: forcing a failure. [ 145.159159][T10215] name failslab, interval 1, probability 0, space 0, times 0 [ 145.172485][T10215] CPU: 1 UID: 0 PID: 10215 Comm: syz.7.2389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.172576][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.172588][T10215] Call Trace: [ 145.172595][T10215] [ 145.172604][T10215] __dump_stack+0x1d/0x30 [ 145.172682][T10215] dump_stack_lvl+0xe8/0x140 [ 145.172702][T10215] dump_stack+0x15/0x1b [ 145.172780][T10215] should_fail_ex+0x265/0x280 [ 145.172797][T10215] should_failslab+0x8c/0xb0 [ 145.172819][T10215] __kvmalloc_node_noprof+0x12e/0x670 [ 145.172882][T10215] ? io_alloc_cache_init+0x36/0xb0 [ 145.172915][T10215] io_alloc_cache_init+0x36/0xb0 [ 145.172938][T10215] io_futex_cache_init+0x28/0x30 [ 145.173098][T10215] io_ring_ctx_alloc+0x311/0x670 [ 145.173150][T10215] io_uring_create+0x134/0x630 [ 145.173177][T10215] __se_sys_io_uring_setup+0x1f7/0x210 [ 145.173272][T10215] __x64_sys_io_uring_setup+0x31/0x40 [ 145.173300][T10215] x64_sys_call+0x2b25/0x3000 [ 145.173322][T10215] do_syscall_64+0xd2/0x200 [ 145.173368][T10215] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.173504][T10215] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.173532][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.173549][T10215] RIP: 0033:0x7fb5e68cefc9 [ 145.173564][T10215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.173581][T10215] RSP: 002b:00007fb5e52ecfc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 145.173609][T10215] RAX: ffffffffffffffda RBX: 00007fb5e6b26180 RCX: 00007fb5e68cefc9 [ 145.173622][T10215] RDX: 0000200000000280 RSI: 00002000000003c0 RDI: 000000000000211b [ 145.173635][T10215] RBP: 00002000000003c0 R08: 0000000000000000 R09: 0000200000000280 [ 145.173647][T10215] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 145.173689][T10215] R13: 00002000000001c0 R14: 000000000000211b R15: 0000200000000280 [ 145.173705][T10215] [ 145.693602][T10225] loop2: detected capacity change from 0 to 512 [ 145.723020][T10228] FAULT_INJECTION: forcing a failure. [ 145.723020][T10228] name failslab, interval 1, probability 0, space 0, times 0 [ 145.735693][T10228] CPU: 1 UID: 0 PID: 10228 Comm: syz.5.2394 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.735717][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.735727][T10228] Call Trace: [ 145.735785][T10228] [ 145.735793][T10228] __dump_stack+0x1d/0x30 [ 145.735816][T10228] dump_stack_lvl+0xe8/0x140 [ 145.735909][T10228] dump_stack+0x15/0x1b [ 145.735958][T10228] should_fail_ex+0x265/0x280 [ 145.735978][T10228] should_failslab+0x8c/0xb0 [ 145.736002][T10228] __kmalloc_node_noprof+0xaa/0x580 [ 145.736097][T10228] ? qdisc_alloc+0x65/0x440 [ 145.736197][T10228] qdisc_alloc+0x65/0x440 [ 145.736220][T10228] ? nla_strcmp+0xc3/0xe0 [ 145.736286][T10228] qdisc_create+0xf5/0x9e0 [ 145.736383][T10228] tc_modify_qdisc+0xf2e/0x1420 [ 145.736414][T10228] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 145.736449][T10228] rtnetlink_rcv_msg+0x65a/0x6d0 [ 145.736476][T10228] netlink_rcv_skb+0x123/0x220 [ 145.736502][T10228] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.736528][T10228] rtnetlink_rcv+0x1c/0x30 [ 145.736622][T10228] netlink_unicast+0x5c0/0x690 [ 145.736646][T10228] netlink_sendmsg+0x58b/0x6b0 [ 145.736664][T10228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.736683][T10228] __sock_sendmsg+0x145/0x180 [ 145.736737][T10228] ____sys_sendmsg+0x31e/0x4e0 [ 145.736765][T10228] ___sys_sendmsg+0x17b/0x1d0 [ 145.736853][T10228] __x64_sys_sendmsg+0xd4/0x160 [ 145.736946][T10228] x64_sys_call+0x191e/0x3000 [ 145.736967][T10228] do_syscall_64+0xd2/0x200 [ 145.736986][T10228] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.737011][T10228] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.737092][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.737109][T10228] RIP: 0033:0x7efcf968efc9 [ 145.737167][T10228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.737185][T10228] RSP: 002b:00007efcf80ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.737204][T10228] RAX: ffffffffffffffda RBX: 00007efcf98e5fa0 RCX: 00007efcf968efc9 [ 145.737216][T10228] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 145.737227][T10228] RBP: 00007efcf80ef090 R08: 0000000000000000 R09: 0000000000000000 [ 145.737238][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.737250][T10228] R13: 00007efcf98e6038 R14: 00007efcf98e5fa0 R15: 00007ffdb3f181f8 [ 145.737392][T10228] [ 146.000321][T10230] IPv6: Can't replace route, no match found [ 146.060928][T10225] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 146.068996][T10225] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.100304][T10225] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2395: corrupted inode contents [ 146.117728][T10225] EXT4-fs (loop2): Remounting filesystem read-only [ 146.129668][T10225] EXT4-fs (loop2): 1 truncate cleaned up [ 146.135468][ T114] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.146990][ T114] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.185597][T10244] pimreg: entered allmulticast mode [ 146.217525][T10244] pimreg: left allmulticast mode [ 146.224845][ T114] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 146.246673][T10242] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.274428][T10225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.358889][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.524233][T10284] pimreg: entered allmulticast mode [ 146.533615][T10284] pimreg: left allmulticast mode [ 146.545281][T10286] loop2: detected capacity change from 0 to 512 [ 146.560965][T10286] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 146.569064][T10286] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.576974][T10286] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2419: corrupted inode contents [ 146.640694][T10286] EXT4-fs (loop2): Remounting filesystem read-only [ 146.648781][T10286] EXT4-fs (loop2): 1 truncate cleaned up [ 146.655612][ T3502] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.666775][ T3502] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.678062][ T3502] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 146.690811][T10286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.716523][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.793660][T10306] lo speed is unknown, defaulting to 1000 [ 147.535297][T10350] loop5: detected capacity change from 0 to 512 [ 147.560765][T10350] EXT4-fs (loop5): too many log groups per flexible block group [ 147.574694][T10350] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 147.594722][T10350] EXT4-fs (loop5): mount failed [ 147.623100][T10340] loop7: detected capacity change from 0 to 512 [ 147.630677][T10355] FAULT_INJECTION: forcing a failure. [ 147.630677][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 147.643972][T10355] CPU: 1 UID: 0 PID: 10355 Comm: syz.2.2443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.644078][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.644090][T10355] Call Trace: [ 147.644097][T10355] [ 147.644104][T10355] __dump_stack+0x1d/0x30 [ 147.644178][T10355] dump_stack_lvl+0xe8/0x140 [ 147.644274][T10355] dump_stack+0x15/0x1b [ 147.644348][T10355] should_fail_ex+0x265/0x280 [ 147.644364][T10355] should_failslab+0x8c/0xb0 [ 147.644386][T10355] kmem_cache_alloc_noprof+0x50/0x480 [ 147.644419][T10355] ? skb_clone+0x151/0x1f0 [ 147.644452][T10355] skb_clone+0x151/0x1f0 [ 147.644520][T10355] __netlink_deliver_tap+0x2c9/0x500 [ 147.644551][T10355] netlink_unicast+0x66b/0x690 [ 147.644575][T10355] netlink_sendmsg+0x58b/0x6b0 [ 147.644592][T10355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.644650][T10355] __sock_sendmsg+0x145/0x180 [ 147.644673][T10355] ____sys_sendmsg+0x31e/0x4e0 [ 147.644700][T10355] ___sys_sendmsg+0x17b/0x1d0 [ 147.644767][T10355] __x64_sys_sendmsg+0xd4/0x160 [ 147.644797][T10355] x64_sys_call+0x191e/0x3000 [ 147.644819][T10355] do_syscall_64+0xd2/0x200 [ 147.644838][T10355] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.644885][T10355] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.644909][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.644927][T10355] RIP: 0033:0x7f44a13fefc9 [ 147.645001][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.645018][T10355] RSP: 002b:00007f449fe5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.645037][T10355] RAX: ffffffffffffffda RBX: 00007f44a1655fa0 RCX: 00007f44a13fefc9 [ 147.645115][T10355] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 147.645128][T10355] RBP: 00007f449fe5f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.645140][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.645269][T10355] R13: 00007f44a1656038 R14: 00007f44a1655fa0 R15: 00007ffddbf5c1f8 [ 147.645287][T10355] [ 147.893389][T10340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.967307][T10340] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.040010][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.054613][T10379] loop2: detected capacity change from 0 to 512 [ 148.128520][T10387] FAULT_INJECTION: forcing a failure. [ 148.128520][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 148.141842][T10387] CPU: 1 UID: 0 PID: 10387 Comm: syz.2.2457 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.141921][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.141934][T10387] Call Trace: [ 148.141940][T10387] [ 148.141947][T10387] __dump_stack+0x1d/0x30 [ 148.141971][T10387] dump_stack_lvl+0xe8/0x140 [ 148.141991][T10387] dump_stack+0x15/0x1b [ 148.142058][T10387] should_fail_ex+0x265/0x280 [ 148.142077][T10387] ? audit_log_d_path+0x8d/0x150 [ 148.142095][T10387] should_failslab+0x8c/0xb0 [ 148.142119][T10387] __kmalloc_cache_noprof+0x4c/0x4a0 [ 148.142164][T10387] audit_log_d_path+0x8d/0x150 [ 148.142186][T10387] audit_log_d_path_exe+0x42/0x70 [ 148.142232][T10387] audit_log_task+0x1e9/0x250 [ 148.142257][T10387] ? kstrtouint+0x76/0xc0 [ 148.142313][T10387] audit_seccomp+0x61/0x100 [ 148.142410][T10387] ? __seccomp_filter+0x82d/0x1250 [ 148.142542][T10387] __seccomp_filter+0x83e/0x1250 [ 148.142586][T10387] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.142695][T10387] ? vfs_write+0x7e8/0x960 [ 148.142765][T10387] __secure_computing+0x82/0x150 [ 148.142790][T10387] syscall_trace_enter+0xcf/0x1e0 [ 148.142813][T10387] do_syscall_64+0xac/0x200 [ 148.142889][T10387] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.142910][T10387] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 148.142968][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.142986][T10387] RIP: 0033:0x7f44a13fefc9 [ 148.142999][T10387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.143013][T10387] RSP: 002b:00007f449fe5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 148.143032][T10387] RAX: ffffffffffffffda RBX: 00007f44a1655fa0 RCX: 00007f44a13fefc9 [ 148.143113][T10387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 148.143125][T10387] RBP: 00007f449fe5f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.143137][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.143150][T10387] R13: 00007f44a1656038 R14: 00007f44a1655fa0 R15: 00007ffddbf5c1f8 [ 148.143168][T10387] [ 148.406090][T10396] pimreg: entered allmulticast mode [ 148.433151][T10396] pimreg: left allmulticast mode [ 148.484979][T10407] __nla_validate_parse: 6 callbacks suppressed [ 148.484992][T10407] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2460'. [ 148.521205][T10398] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2460'. [ 148.651782][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2471'. [ 148.664090][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2471'. [ 148.664237][T10436] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2471'. [ 149.741441][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 149.741456][ T29] audit: type=1400 audit(2000000065.763:9979): avc: denied { validate_trans } for pid=10440 comm="syz.4.2475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.746501][T10449] loop5: detected capacity change from 0 to 512 [ 149.746845][ T29] audit: type=1400 audit(2000000065.763:9980): avc: denied { mounton } for pid=10448 comm="syz.5.2477" path="/239/file0" dev="tmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 149.872099][T10449] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 149.872244][T10449] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.885122][T10449] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2477: corrupted inode contents [ 149.933565][T10459] pimreg: entered allmulticast mode [ 149.940542][T10459] pimreg: left allmulticast mode [ 149.949463][T10449] EXT4-fs (loop5): Remounting filesystem read-only [ 149.949578][T10449] EXT4-fs (loop5): 1 truncate cleaned up [ 149.950291][ T3502] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.950312][ T3502] Quota error (device loop5): write_blk: dquota write failed [ 149.950324][ T3502] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 149.950339][ T3502] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.950354][ T3502] Quota error (device loop5): write_blk: dquota write failed [ 149.950381][ T3502] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 149.950464][ T3502] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 149.950479][ T3502] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 149.950506][ T3502] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 149.951041][T10449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.951589][ T29] audit: type=1400 audit(2000000065.973:9981): avc: denied { mount } for pid=10448 comm="syz.5.2477" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 149.988615][ T29] audit: type=1400 audit(2000000066.003:9982): avc: denied { unmount } for pid=6880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 150.006547][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.256424][T10482] loop7: detected capacity change from 0 to 128 [ 150.307987][T10484] netlink: 'syz.2.2492': attribute type 3 has an invalid length. [ 150.432104][T10482] bio_check_eod: 35 callbacks suppressed [ 150.432118][T10482] syz.7.2491: attempt to access beyond end of device [ 150.432118][T10482] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 150.455334][T10482] syz.7.2491: attempt to access beyond end of device [ 150.455334][T10482] loop7: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 150.469892][T10482] syz.7.2491: attempt to access beyond end of device [ 150.469892][T10482] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 150.484545][T10482] syz.7.2491: attempt to access beyond end of device [ 150.484545][T10482] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 150.498445][T10482] syz.7.2491: attempt to access beyond end of device [ 150.498445][T10482] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 150.517953][T10491] loop2: detected capacity change from 0 to 512 [ 150.527652][T10491] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.2492: corrupted xattr block 95: invalid header [ 150.555089][T10482] syz.7.2491: attempt to access beyond end of device [ 150.555089][T10482] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 150.569904][T10482] syz.7.2491: attempt to access beyond end of device [ 150.569904][T10482] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 150.584387][T10482] syz.7.2491: attempt to access beyond end of device [ 150.584387][T10482] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 150.598963][T10482] syz.7.2491: attempt to access beyond end of device [ 150.598963][T10482] loop7: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 150.599216][T10491] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2492: bg 0: block 7: invalid block bitmap [ 150.613513][T10482] syz.7.2491: attempt to access beyond end of device [ 150.613513][T10482] loop7: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 150.647099][T10491] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 150.670197][T10491] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.2492: corrupted xattr block 95: invalid header [ 150.690336][T10491] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 150.699783][T10491] EXT4-fs (loop2): 1 orphan inode deleted [ 150.705884][T10491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.880798][T10519] random: crng reseeded on system resumption [ 150.997618][T10523] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.052219][T10523] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.093655][T10544] +: renamed from syzkaller0 [ 151.112653][T10523] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.128622][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.225683][T10523] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.263901][T10558] xt_hashlimit: max too large, truncated to 1048576 [ 151.308283][ T114] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.324491][ T114] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.336812][T10566] FAULT_INJECTION: forcing a failure. [ 151.336812][T10566] name failslab, interval 1, probability 0, space 0, times 0 [ 151.350160][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.0.2524 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.350246][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.350256][T10566] Call Trace: [ 151.350262][T10566] [ 151.350295][T10566] __dump_stack+0x1d/0x30 [ 151.350317][T10566] dump_stack_lvl+0xe8/0x140 [ 151.350338][T10566] dump_stack+0x15/0x1b [ 151.350355][T10566] should_fail_ex+0x265/0x280 [ 151.350379][T10566] ? audit_log_d_path+0x8d/0x150 [ 151.350398][T10566] should_failslab+0x8c/0xb0 [ 151.350462][T10566] __kmalloc_cache_noprof+0x4c/0x4a0 [ 151.350491][T10566] audit_log_d_path+0x8d/0x150 [ 151.350510][T10566] audit_log_d_path_exe+0x42/0x70 [ 151.350536][T10566] audit_log_task+0x1e9/0x250 [ 151.350565][T10566] ? kstrtouint+0x76/0xc0 [ 151.350591][T10566] audit_seccomp+0x61/0x100 [ 151.350681][T10566] ? __seccomp_filter+0x82d/0x1250 [ 151.350704][T10566] __seccomp_filter+0x83e/0x1250 [ 151.350731][T10566] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.350800][T10566] ? vfs_write+0x7e8/0x960 [ 151.350819][T10566] ? __rcu_read_unlock+0x4f/0x70 [ 151.350841][T10566] ? __fget_files+0x184/0x1c0 [ 151.350946][T10566] __secure_computing+0x82/0x150 [ 151.351046][T10566] syscall_trace_enter+0xcf/0x1e0 [ 151.351072][T10566] do_syscall_64+0xac/0x200 [ 151.351101][T10566] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.351186][T10566] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 151.351215][T10566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.351233][T10566] RIP: 0033:0x7f35dd6defc9 [ 151.351246][T10566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.351260][T10566] RSP: 002b:00007f35dc13f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 151.351334][T10566] RAX: ffffffffffffffda RBX: 00007f35dd935fa0 RCX: 00007f35dd6defc9 [ 151.351400][T10566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 151.351410][T10566] RBP: 00007f35dc13f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.351420][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.351430][T10566] R13: 00007f35dd936038 R14: 00007f35dd935fa0 R15: 00007fff15fac808 [ 151.351448][T10566] [ 151.351895][T10561] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2523'. [ 151.353451][ T114] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.594212][ T114] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.718418][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 151.736363][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 151.759028][T10587] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2534'. [ 151.769623][T10587] netlink: zone id is out of range [ 151.774752][T10587] netlink: zone id is out of range [ 151.780617][T10587] netlink: zone id is out of range [ 151.785713][T10587] netlink: zone id is out of range [ 151.791534][T10587] netlink: zone id is out of range [ 151.796670][T10587] netlink: zone id is out of range [ 151.802450][T10587] netlink: zone id is out of range [ 151.807629][T10587] netlink: zone id is out of range [ 151.815388][T10587] netlink: zone id is out of range [ 151.820834][T10587] netlink: zone id is out of range [ 152.016897][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2539'. [ 152.095058][T10611] netem: change failed [ 152.119881][T10611] lo speed is unknown, defaulting to 1000 [ 152.431639][T10645] FAULT_INJECTION: forcing a failure. [ 152.431639][T10645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.445072][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.0.2553 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.445099][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.445113][T10645] Call Trace: [ 152.445121][T10645] [ 152.445129][T10645] __dump_stack+0x1d/0x30 [ 152.445159][T10645] dump_stack_lvl+0xe8/0x140 [ 152.445179][T10645] dump_stack+0x15/0x1b [ 152.445197][T10645] should_fail_ex+0x265/0x280 [ 152.445216][T10645] should_fail+0xb/0x20 [ 152.445231][T10645] should_fail_usercopy+0x1a/0x20 [ 152.445313][T10645] _copy_to_user+0x20/0xa0 [ 152.445338][T10645] simple_read_from_buffer+0xb5/0x130 [ 152.445436][T10645] proc_fail_nth_read+0x10e/0x150 [ 152.445466][T10645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.445494][T10645] vfs_read+0x1a8/0x770 [ 152.445531][T10645] ? __rcu_read_unlock+0x4f/0x70 [ 152.445609][T10645] ? __fget_files+0x184/0x1c0 [ 152.445638][T10645] ksys_read+0xda/0x1a0 [ 152.445666][T10645] __x64_sys_read+0x40/0x50 [ 152.445693][T10645] x64_sys_call+0x27c0/0x3000 [ 152.445823][T10645] do_syscall_64+0xd2/0x200 [ 152.445842][T10645] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.445923][T10645] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.445948][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.445971][T10645] RIP: 0033:0x7f35dd6dd9dc [ 152.445983][T10645] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.445997][T10645] RSP: 002b:00007f35dc13f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.446046][T10645] RAX: ffffffffffffffda RBX: 00007f35dd935fa0 RCX: 00007f35dd6dd9dc [ 152.446056][T10645] RDX: 000000000000000f RSI: 00007f35dc13f0a0 RDI: 0000000000000005 [ 152.446067][T10645] RBP: 00007f35dc13f090 R08: 0000000000000000 R09: 0000000000000000 [ 152.446077][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.446087][T10645] R13: 00007f35dd936038 R14: 00007f35dd935fa0 R15: 00007fff15fac808 [ 152.446104][T10645] [ 152.652704][T10639] lo speed is unknown, defaulting to 1000 [ 153.090358][T10674] loop5: detected capacity change from 0 to 128 [ 153.123972][T10674] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.195681][T10681] netlink: 'syz.0.2558': attribute type 10 has an invalid length. [ 153.264545][T10674] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.842277][T10681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.850585][T10681] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.860069][T10682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.867812][T10682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.879033][T10682] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 153.887109][T10682] batman_adv: batadv0: Removing interface: veth1_vlan [ 153.903013][T10682] bond0: (slave batadv0): Releasing backup interface [ 153.925141][T10683] lo speed is unknown, defaulting to 1000 [ 153.977927][ T6880] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.142577][T10706] pimreg: entered allmulticast mode [ 154.160115][T10706] pimreg: left allmulticast mode [ 154.314904][T10725] FAULT_INJECTION: forcing a failure. [ 154.314904][T10725] name failslab, interval 1, probability 0, space 0, times 0 [ 154.328490][T10725] CPU: 0 UID: 0 PID: 10725 Comm: syz.0.2581 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.328523][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.328647][T10725] Call Trace: [ 154.328652][T10725] [ 154.328659][T10725] __dump_stack+0x1d/0x30 [ 154.328680][T10725] dump_stack_lvl+0xe8/0x140 [ 154.328740][T10725] dump_stack+0x15/0x1b [ 154.328818][T10725] should_fail_ex+0x265/0x280 [ 154.328837][T10725] should_failslab+0x8c/0xb0 [ 154.328861][T10725] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 154.328885][T10725] ? __alloc_skb+0x101/0x320 [ 154.328929][T10725] __alloc_skb+0x101/0x320 [ 154.328955][T10725] tc_ctl_action+0x64b/0x830 [ 154.329075][T10725] ? __pfx_tc_ctl_action+0x10/0x10 [ 154.329097][T10725] rtnetlink_rcv_msg+0x65a/0x6d0 [ 154.329124][T10725] netlink_rcv_skb+0x123/0x220 [ 154.329167][T10725] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.329192][T10725] rtnetlink_rcv+0x1c/0x30 [ 154.329281][T10725] netlink_unicast+0x5c0/0x690 [ 154.329309][T10725] netlink_sendmsg+0x58b/0x6b0 [ 154.329328][T10725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.329442][T10725] __sock_sendmsg+0x145/0x180 [ 154.329463][T10725] ____sys_sendmsg+0x31e/0x4e0 [ 154.329510][T10725] ___sys_sendmsg+0x17b/0x1d0 [ 154.329551][T10725] __x64_sys_sendmsg+0xd4/0x160 [ 154.329653][T10725] x64_sys_call+0x191e/0x3000 [ 154.329672][T10725] do_syscall_64+0xd2/0x200 [ 154.329690][T10725] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.329793][T10725] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.329857][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.329878][T10725] RIP: 0033:0x7f35dd6defc9 [ 154.329893][T10725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.329908][T10725] RSP: 002b:00007f35dc13f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.329924][T10725] RAX: ffffffffffffffda RBX: 00007f35dd935fa0 RCX: 00007f35dd6defc9 [ 154.329936][T10725] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 154.330024][T10725] RBP: 00007f35dc13f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.330034][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.330048][T10725] R13: 00007f35dd936038 R14: 00007f35dd935fa0 R15: 00007fff15fac808 [ 154.330068][T10725] [ 154.618659][T10738] program syz.2.2585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.687531][T10744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10744 comm=syz.0.2588 [ 154.717770][T10746] pimreg: entered allmulticast mode [ 154.724246][T10746] pimreg: left allmulticast mode [ 154.737284][T10748] FAULT_INJECTION: forcing a failure. [ 154.737284][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 154.750992][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.4.2591 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.751018][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.751079][T10748] Call Trace: [ 154.751086][T10748] [ 154.751094][T10748] __dump_stack+0x1d/0x30 [ 154.751115][T10748] dump_stack_lvl+0xe8/0x140 [ 154.751133][T10748] dump_stack+0x15/0x1b [ 154.751189][T10748] should_fail_ex+0x265/0x280 [ 154.751206][T10748] should_failslab+0x8c/0xb0 [ 154.751228][T10748] kmem_cache_alloc_noprof+0x50/0x480 [ 154.751251][T10748] ? audit_log_start+0x342/0x720 [ 154.751340][T10748] audit_log_start+0x342/0x720 [ 154.751363][T10748] ? kstrtouint+0x76/0xc0 [ 154.751391][T10748] audit_seccomp+0x48/0x100 [ 154.751474][T10748] ? __seccomp_filter+0x82d/0x1250 [ 154.751499][T10748] __seccomp_filter+0x83e/0x1250 [ 154.751547][T10748] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.751572][T10748] ? vfs_write+0x7e8/0x960 [ 154.751743][T10748] __secure_computing+0x82/0x150 [ 154.751767][T10748] syscall_trace_enter+0xcf/0x1e0 [ 154.751846][T10748] do_syscall_64+0xac/0x200 [ 154.751938][T10748] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.751995][T10748] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.752023][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.752050][T10748] RIP: 0033:0x7fbf1640efc9 [ 154.752063][T10748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.752077][T10748] RSP: 002b:00007fbf14e6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 154.752094][T10748] RAX: ffffffffffffffda RBX: 00007fbf16665fa0 RCX: 00007fbf1640efc9 [ 154.752107][T10748] RDX: 000000000000ffe0 RSI: 0000200000000000 RDI: 0000000000000007 [ 154.752120][T10748] RBP: 00007fbf14e6f090 R08: 0000200000000100 R09: 000000000000001c [ 154.752132][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.752145][T10748] R13: 00007fbf16666038 R14: 00007fbf16665fa0 R15: 00007fff3b00a548 [ 154.752192][T10748] [ 154.752199][T10748] audit_log_lost: 456 callbacks suppressed [ 154.752207][T10748] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 154.980598][T10748] audit: out of memory in audit_log_start [ 155.108645][ T29] audit: type=1326 audit(2000000071.123:10439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a13fefc9 code=0x7ffc0000 [ 155.151840][ T29] audit: type=1326 audit(2000000071.163:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44a13fefc9 code=0x7ffc0000 [ 155.176380][ T29] audit: type=1326 audit(2000000071.163:10441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a13fefc9 code=0x7ffc0000 [ 155.181939][T10756] loop7: detected capacity change from 0 to 512 [ 155.200911][ T29] audit: type=1326 audit(2000000071.163:10442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44a13fefc9 code=0x7ffc0000 [ 155.231307][ T29] audit: type=1326 audit(2000000071.163:10443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a13fefc9 code=0x7ffc0000 [ 155.255765][ T29] audit: type=1326 audit(2000000071.173:10444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a13fefc9 code=0x7ffc0000 [ 155.280346][ T29] audit: type=1326 audit(2000000071.173:10445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f44a13fefc9 code=0x7ffc0000 [ 155.304000][ T29] audit: type=1326 audit(2000000071.173:10446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a13fefc9 code=0x7ffc0000 [ 155.309895][T10756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.342896][T10756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.377842][T10764] program syz.5.2598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.444233][T10768] IPv6: Can't replace route, no match found [ 155.531574][T10781] loop5: detected capacity change from 0 to 512 [ 155.540822][T10781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.553820][T10772] __nla_validate_parse: 4 callbacks suppressed [ 155.553835][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2602'. [ 155.570981][T10781] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.633600][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.731047][T10796] IPv6: Can't replace route, no match found [ 155.739279][T10799] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 155.755162][T10802] netlink: 'syz.7.2615': attribute type 3 has an invalid length. [ 155.843546][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2617'. [ 155.871527][T10812] loop7: detected capacity change from 0 to 512 [ 155.880377][T10812] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.7.2615: corrupted xattr block 95: invalid header [ 155.895560][T10812] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2615: bg 0: block 7: invalid block bitmap [ 155.910217][T10812] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 155.920087][T10812] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #11: comm syz.7.2615: corrupted xattr block 95: invalid header [ 155.935671][T10812] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 155.946895][T10812] EXT4-fs (loop7): 1 orphan inode deleted [ 155.954292][T10812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.385468][T10858] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2634'. [ 156.428405][T10864] pimreg: entered allmulticast mode [ 156.434189][T10864] pimreg: left allmulticast mode [ 156.560805][T10875] loop2: detected capacity change from 0 to 1024 [ 156.567619][T10875] EXT4-fs: Ignoring removed orlov option [ 156.576924][T10875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.603503][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.703590][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.891357][T10892] lo speed is unknown, defaulting to 1000 [ 157.171706][T10897] loop5: detected capacity change from 0 to 128 [ 157.241254][T10897] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 157.313636][T10897] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 157.322154][T10897] FAT-fs (loop5): Filesystem has been set read-only [ 157.368380][T10897] bio_check_eod: 98 callbacks suppressed [ 157.368396][T10897] syz.5.2650: attempt to access beyond end of device [ 157.368396][T10897] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 157.404603][T10904] pimreg: entered allmulticast mode [ 157.414154][T10904] pimreg: left allmulticast mode [ 157.691515][T10915] loop5: detected capacity change from 0 to 256 [ 157.756368][T10931] loop5: detected capacity change from 0 to 512 [ 157.775614][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2657'. [ 157.779208][T10931] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 157.784740][T10911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2657'. [ 157.803608][T10931] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.811474][T10937] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2665'. [ 157.826651][T10911] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 157.826937][T10940] loop7: detected capacity change from 0 to 512 [ 157.847563][T10911] bond1 (unregistering): Released all slaves [ 157.858623][T10931] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2662: corrupted inode contents [ 157.872802][T10931] EXT4-fs (loop5): Remounting filesystem read-only [ 157.880556][T10940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.885343][T10930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10930 comm=syz.4.2665 [ 157.893341][T10931] EXT4-fs (loop5): 1 truncate cleaned up [ 157.893561][T10940] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.925389][ T41] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 157.936601][ T41] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 157.947150][ T41] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 157.957780][T10940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.958014][T10931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.997113][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.011983][T10940] loop7: detected capacity change from 0 to 1024 [ 158.021792][T10948] pimreg: entered allmulticast mode [ 158.027863][T10948] pimreg: left allmulticast mode [ 158.050363][T10940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.071263][T10940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.092917][T10957] usb usb8: usbfs: process 10957 (syz.0.2671) did not claim interface 0 before use [ 158.151612][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2674'. [ 158.151675][T10962] IPVS: Error connecting to the multicast addr [ 158.168782][T10966] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2675'. [ 158.203653][T10973] netlink: 'syz.7.2679': attribute type 3 has an invalid length. [ 158.217734][T10968] IPv6: Can't replace route, no match found [ 158.268247][T10982] loop2: detected capacity change from 0 to 128 [ 158.278307][T10982] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 158.374236][T10980] loop7: detected capacity change from 0 to 512 [ 158.480242][T10982] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 158.480263][T10982] FAT-fs (loop2): Filesystem has been set read-only [ 158.480286][T10982] syz.2.2681: attempt to access beyond end of device [ 158.480286][T10982] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 158.482101][T10980] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.7.2679: corrupted xattr block 95: invalid header [ 158.482280][T10980] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2679: bg 0: block 7: invalid block bitmap [ 158.482416][T10980] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 158.482561][T10980] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #11: comm syz.7.2679: corrupted xattr block 95: invalid header [ 158.482621][T10980] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 158.482641][T10980] EXT4-fs (loop7): 1 orphan inode deleted [ 158.483109][T10980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.794666][T11001] netlink: 'syz.2.2687': attribute type 10 has an invalid length. [ 158.864124][T11003] tipc: Started in network mode [ 158.864159][T11003] tipc: Node identity ee05b4929a1, cluster identity 4711 [ 158.864224][T11003] tipc: Enabled bearer , priority 0 [ 158.883976][T11003] loop2: detected capacity change from 0 to 512 [ 158.901372][T11003] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2688: Failed to acquire dquot type 1 [ 158.914467][T11003] EXT4-fs (loop2): 1 truncate cleaned up [ 158.921576][T11003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.934350][T11003] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.935305][ T52] tipc: Resetting bearer [ 158.947754][T11003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.966326][T11003] netlink: 'syz.2.2688': attribute type 1 has an invalid length. [ 158.976460][T11002] tipc: Resetting bearer [ 158.994311][T11002] tipc: Disabling bearer [ 159.035722][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.274278][T11037] loop5: detected capacity change from 0 to 512 [ 160.293882][T11034] IPv6: Can't replace route, no match found [ 160.309879][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 160.309894][ T29] audit: type=1326 audit(2000000076.304:10985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.7.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e68cefc9 code=0x7ffc0000 [ 160.340889][ T29] audit: type=1326 audit(2000000076.304:10986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.7.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e68cefc9 code=0x7ffc0000 [ 160.365491][ T29] audit: type=1326 audit(2000000076.304:10987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.7.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fb5e68cefc9 code=0x7ffc0000 [ 160.390177][ T29] audit: type=1326 audit(2000000076.304:10988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.7.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e68cefc9 code=0x7ffc0000 [ 160.414807][ T29] audit: type=1326 audit(2000000076.304:10989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.7.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e68cefc9 code=0x7ffc0000 [ 160.578640][ T29] audit: type=1400 audit(2000000076.514:10990): avc: denied { mounton } for pid=11039 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 160.601790][T11037] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 160.615049][T11037] EXT4-fs (loop5): orphan cleanup on readonly fs [ 160.638134][T11037] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2699: corrupted inode contents [ 160.650092][T11053] loop2: detected capacity change from 0 to 512 [ 160.650694][T11053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.658434][T11053] EXT4-fs (loop2): 1 truncate cleaned up [ 160.674250][T11053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.687529][ T29] audit: type=1400 audit(2000000076.704:10991): avc: denied { connect } for pid=11052 comm="syz.2.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.705191][T11037] EXT4-fs (loop5): Remounting filesystem read-only [ 160.718234][T11054] EXT4-fs error (device loop2): __ext4_iget:5443: inode #12: block 2: comm syz.2.2706: invalid block [ 160.738058][ T29] audit: type=1400 audit(2000000076.724:10992): avc: denied { getopt } for pid=11052 comm="syz.2.2706" laddr=fe80::b lport=34644 faddr=fe80::1e fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.740477][T11054] EXT4-fs (loop2): Remounting filesystem read-only [ 160.763183][ T29] audit: type=1400 audit(2000000076.724:10993): avc: denied { add_name } for pid=11052 comm="syz.2.2706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.763293][ T29] audit: type=1400 audit(2000000076.724:10994): avc: denied { create } for pid=11052 comm="syz.2.2706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 160.770892][T11037] EXT4-fs (loop5): 1 truncate cleaned up [ 160.814734][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 160.829472][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 160.842387][T11039] lo speed is unknown, defaulting to 1000 [ 160.844131][ T52] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 160.859949][T11037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.862408][T11067] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2708'. [ 160.890725][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.910992][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.976223][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.986658][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.001426][T11079] SELinux: Context system_u:object_r:getty_log_t:s0 is not valid (left unmapped). [ 161.024525][T11082] loop7: detected capacity change from 0 to 128 [ 161.031481][T11082] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 161.055283][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.066583][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.095539][T11039] chnl_net:caif_netlink_parms(): no params data found [ 161.140392][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.147481][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.165826][T11039] bridge_slave_0: entered allmulticast mode [ 161.173774][T11039] bridge_slave_0: entered promiscuous mode [ 161.184155][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.195061][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.211410][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.218495][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.226720][T11039] bridge_slave_1: entered allmulticast mode [ 161.234309][T11039] bridge_slave_1: entered promiscuous mode [ 161.262976][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.273365][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.286340][T11039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.300694][T11110] pimreg: entered allmulticast mode [ 161.310606][T11110] pimreg: left allmulticast mode [ 161.325190][T11039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.335374][T11114] bond0: option arp_interval: invalid value (18446744073265055750) [ 161.344098][T11114] bond0: option arp_interval: allowed values 0 - 2147483647 [ 161.381873][T11039] team0: Port device team_slave_0 added [ 161.409948][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2728'. [ 161.413178][T11039] team0: Port device team_slave_1 added [ 161.426160][ T52] batadv1: left allmulticast mode [ 161.432232][ T52] batadv1: left promiscuous mode [ 161.437386][ T52] bridge0: port 3(batadv1) entered disabled state [ 161.471155][T11125] xt_connbytes: Forcing CT accounting to be enabled [ 161.478428][ T52] bridge_slave_1: left allmulticast mode [ 161.485048][ T52] bridge_slave_1: left promiscuous mode [ 161.485157][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.485526][T11125] Cannot find set identified by id 0 to match [ 161.507011][ T52] bridge_slave_0: left allmulticast mode [ 161.513436][ T52] bridge_slave_0: left promiscuous mode [ 161.519701][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.662559][T11142] program syz.7.2737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.672607][ T52] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.682737][ T52] bond_slave_0: left promiscuous mode [ 161.690783][ T52] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.706415][ T52] bond_slave_1: left promiscuous mode [ 161.712855][ T52] $Hÿ (unregistering): Released all slaves [ 161.722457][ T52] bond1 (unregistering): Released all slaves [ 161.732545][ T52] bond0 (unregistering): Released all slaves [ 161.755796][T11144] Cannot find set identified by id 65535 to match [ 161.763434][T11039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.771362][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.798353][T11039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.813958][T11039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.821022][T11157] IPv6: Can't replace route, no match found [ 161.827455][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.854159][T11039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.911703][T11168] program syz.0.2747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.954778][ T52] hsr_slave_0: left promiscuous mode [ 161.969742][ T52] hsr_slave_1: left promiscuous mode [ 161.975613][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.983155][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.991931][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.999994][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.013402][ T52] veth1_macvtap: left promiscuous mode [ 162.019938][ T52] veth0_macvtap: left promiscuous mode [ 162.048522][T11180] IPv6: Can't replace route, no match found [ 162.080728][T11185] loop7: detected capacity change from 0 to 2048 [ 162.087753][T11185] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.101086][T11185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.114120][ T52] team0 (unregistering): Port device team_slave_0 removed [ 162.126783][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.153334][T11039] hsr_slave_0: entered promiscuous mode [ 162.160139][T11039] hsr_slave_1: entered promiscuous mode [ 162.166035][T11039] debugfs: 'hsr0' already exists in 'hsr' [ 162.172437][T11039] Cannot create hsr debugfs directory [ 162.178187][T11176] bond0: option arp_interval: invalid value (18446744073265055750) [ 162.187348][T11176] bond0: option arp_interval: allowed values 0 - 2147483647 [ 162.227184][T11195] lo speed is unknown, defaulting to 1000 [ 162.235481][T11201] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 162.385853][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2763'. [ 162.453194][T11223] bond0: option arp_interval: invalid value (18446744073265055750) [ 162.461889][T11223] bond0: option arp_interval: allowed values 0 - 2147483647 [ 162.515895][ T52] IPVS: stop unused estimator thread 0... [ 162.672137][T11039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.680968][T11235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41234 sclass=netlink_route_socket pid=11235 comm=syz.2.2771 [ 162.696211][T11039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.712245][T11039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.733171][T11243] program syz.5.2773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.743835][T11039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.837524][T11039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.852959][T11039] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.859946][T11257] IPv6: Can't replace route, no match found [ 162.862621][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.873084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.914674][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.921800][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.935398][T11262] bond0: option arp_interval: invalid value (18446744073265055750) [ 162.944345][T11262] bond0: option arp_interval: allowed values 0 - 2147483647 [ 162.964758][T11039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.975251][T11039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.006520][T11271] FAULT_INJECTION: forcing a failure. [ 163.006520][T11271] name failslab, interval 1, probability 0, space 0, times 0 [ 163.020300][T11271] CPU: 0 UID: 0 PID: 11271 Comm: syz.2.2784 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.020367][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.020380][T11271] Call Trace: [ 163.020386][T11271] [ 163.020394][T11271] __dump_stack+0x1d/0x30 [ 163.020417][T11271] dump_stack_lvl+0xe8/0x140 [ 163.020437][T11271] dump_stack+0x15/0x1b [ 163.020454][T11271] should_fail_ex+0x265/0x280 [ 163.020531][T11271] ? virtio_transport_do_socket_init+0x39/0x190 [ 163.020625][T11271] should_failslab+0x8c/0xb0 [ 163.020648][T11271] __kmalloc_cache_noprof+0x4c/0x4a0 [ 163.020671][T11271] ? kfree+0xdb/0x400 [ 163.020740][T11271] virtio_transport_do_socket_init+0x39/0x190 [ 163.020767][T11271] vsock_assign_transport+0x442/0x4b0 [ 163.020786][T11271] vsock_connect+0x3c5/0x820 [ 163.020804][T11271] ? __pfx_autoremove_wake_function+0x10/0x10 [ 163.020837][T11271] ? __pfx_vsock_connect+0x10/0x10 [ 163.020856][T11271] __sys_connect+0x1f2/0x2b0 [ 163.020931][T11271] __x64_sys_connect+0x3f/0x50 [ 163.020958][T11271] x64_sys_call+0x2c0c/0x3000 [ 163.020979][T11271] do_syscall_64+0xd2/0x200 [ 163.020998][T11271] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.021027][T11271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.021122][T11271] RIP: 0033:0x7f44a13fefc9 [ 163.021138][T11271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.021213][T11271] RSP: 002b:00007f449fe5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 163.021303][T11271] RAX: ffffffffffffffda RBX: 00007f44a1655fa0 RCX: 00007f44a13fefc9 [ 163.021313][T11271] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 163.021323][T11271] RBP: 00007f449fe5f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.021333][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.021345][T11271] R13: 00007f44a1656038 R14: 00007f44a1655fa0 R15: 00007ffddbf5c1f8 [ 163.021363][T11271] [ 163.042952][T11039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.274635][T11268] infiniband syz0: set active [ 163.280312][T11268] infiniband syz0: added bond_slave_0 [ 163.307242][T11268] RDS/IB: syz0: added [ 163.312620][T11268] smc: adding ib device syz0 with port count 1 [ 163.319777][T11268] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 163.387330][T11290] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 163.718781][T11305] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 163.725407][T11305] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 163.733020][T11305] vhci_hcd vhci_hcd.0: Device attached [ 164.056469][T11309] vhci_hcd: connection closed [ 164.056782][ T3502] vhci_hcd: stop threads [ 164.066395][ T3502] vhci_hcd: release socket [ 164.070850][ T3502] vhci_hcd: disconnect device [ 164.416209][T11039] veth0_vlan: entered promiscuous mode [ 164.428142][T11039] veth1_vlan: entered promiscuous mode [ 164.446969][T11039] veth0_macvtap: entered promiscuous mode [ 164.457519][T11039] veth1_macvtap: entered promiscuous mode [ 164.475654][T11039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.487120][T11039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.498620][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.522387][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.540969][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.549932][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.663210][T11357] loop4: detected capacity change from 0 to 1024 [ 164.670820][T11357] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 164.682593][T11357] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 164.694234][T11357] JBD2: no valid journal superblock found [ 164.700946][T11357] EXT4-fs (loop4): Could not load journal inode [ 164.716037][T11351] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 164.742601][T11365] loop2: detected capacity change from 0 to 512 [ 164.767920][T11371] loop4: detected capacity change from 0 to 512 [ 164.780074][T11365] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 164.790550][T11371] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 164.799525][T11365] EXT4-fs (loop2): orphan cleanup on readonly fs [ 164.817941][T11371] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.826241][T11371] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2812: corrupted inode contents [ 164.839563][T11371] EXT4-fs (loop4): Remounting filesystem read-only [ 164.846356][T11371] EXT4-fs (loop4): 1 truncate cleaned up [ 164.853516][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.865153][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.892851][T11365] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2810: corrupted inode contents [ 164.912235][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 164.923153][T11365] EXT4-fs (loop2): Remounting filesystem read-only [ 164.931241][T11365] EXT4-fs (loop2): 1 truncate cleaned up [ 164.936232][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.948438][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.959960][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2820'. [ 164.961472][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 164.975929][T11389] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 164.981582][T11365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.991289][T11371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.018196][T11389] bond1 (unregistering): Released all slaves [ 165.029865][T11039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.056395][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.260370][T11420] loop4: detected capacity change from 0 to 2048 [ 165.282238][T11420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.318262][T11420] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.331231][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 165.331245][ T29] audit: type=1326 audit(2000000081.354:11214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 165.385790][ T29] audit: type=1326 audit(2000000081.384:11215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 165.410403][ T29] audit: type=1326 audit(2000000081.384:11216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 165.435036][ T29] audit: type=1326 audit(2000000081.384:11217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 165.459514][ T29] audit: type=1326 audit(2000000081.384:11218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 165.483491][T11438] program syz.7.2837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.494159][ T29] audit: type=1326 audit(2000000081.384:11219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 165.518673][ T29] audit: type=1326 audit(2000000081.384:11220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35dd6defc9 code=0x7ffc0000 [ 165.555623][T11429] lo speed is unknown, defaulting to 1000 [ 166.234038][ T29] audit: type=1400 audit(2000000082.214:11221): avc: denied { create } for pid=11419 comm="syz.4.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 166.294475][T11460] lo speed is unknown, defaulting to 1000 [ 166.421473][ T29] audit: type=1326 audit(2000000082.394:11222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf968efc9 code=0x7ffc0000 [ 166.446122][ T29] audit: type=1326 audit(2000000082.394:11223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf968efc9 code=0x7ffc0000 [ 166.901182][T11420] syz.4.2831 (11420) used greatest stack depth: 7096 bytes left [ 166.910678][T11039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.941014][T11469] IPv6: Can't replace route, no match found [ 166.963145][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2848'. [ 166.994845][T11476] program syz.4.2849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.054311][T11478] loop4: detected capacity change from 0 to 128 [ 167.061476][T11478] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 167.133778][T11482] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 167.142311][T11482] FAT-fs (loop4): Filesystem has been set read-only [ 167.154217][T11482] syz.4.2850: attempt to access beyond end of device [ 167.154217][T11482] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 167.262395][T11488] bond0: option arp_interval: invalid value (18446744073265055750) [ 167.271040][T11488] bond0: option arp_interval: allowed values 0 - 2147483647 [ 167.331865][T11499] IPv6: Can't replace route, no match found [ 167.904348][T11511] program syz.2.2861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.961162][T11518] netlink: 'syz.2.2864': attribute type 3 has an invalid length. [ 168.079703][T11529] loop2: detected capacity change from 0 to 512 [ 168.090943][T11529] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.2864: corrupted xattr block 95: invalid header [ 168.107860][T11529] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2864: bg 0: block 7: invalid block bitmap [ 168.124056][T11529] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 168.134153][T11532] IPv6: Can't replace route, no match found [ 168.148507][T11529] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.2864: corrupted xattr block 95: invalid header [ 168.179117][T11529] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 168.199554][T11529] EXT4-fs (loop2): 1 orphan inode deleted [ 168.207544][T11529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.261492][T11543] program syz.4.2873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.344475][T11556] loop7: detected capacity change from 0 to 512 [ 168.362760][T11556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.365164][T11538] lo speed is unknown, defaulting to 1000 [ 168.381552][T11556] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.432464][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.480408][T11561] pim6reg: entered allmulticast mode [ 168.492893][T11561] pim6reg: left allmulticast mode [ 168.535005][T11538] chnl_net:caif_netlink_parms(): no params data found [ 168.572964][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.581033][T11538] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.583086][T11570] IPv6: Can't replace route, no match found [ 168.589449][T11538] bridge_slave_0: entered allmulticast mode [ 168.601600][T11538] bridge_slave_0: entered promiscuous mode [ 168.610547][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.617669][T11538] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.625488][T11538] bridge_slave_1: entered allmulticast mode [ 168.632101][T11538] bridge_slave_1: entered promiscuous mode [ 168.640019][T11572] can0: slcan on ttyS3. [ 168.653692][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.664577][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.684621][T11538] team0: Port device team_slave_0 added [ 168.691074][T11572] can0 (unregistered): slcan off ttyS3. [ 168.692039][T11538] team0: Port device team_slave_1 added [ 168.717375][T11538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.724944][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.751547][T11538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.766408][T11538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.774087][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.800191][T11538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.815243][T11572] lo speed is unknown, defaulting to 1000 [ 168.839359][T11538] hsr_slave_0: entered promiscuous mode [ 168.839773][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.845636][T11538] hsr_slave_1: entered promiscuous mode [ 168.861640][T11538] debugfs: 'hsr0' already exists in 'hsr' [ 168.867399][T11538] Cannot create hsr debugfs directory [ 169.029844][T11581] program syz.2.2884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.084449][T11583] netlink: 'syz.2.2885': attribute type 27 has an invalid length. [ 169.171131][T11598] netlink: 'syz.4.2890': attribute type 3 has an invalid length. [ 169.186425][T11600] siw: device registration error -23 [ 169.196054][T11583] team1: left promiscuous mode [ 169.201693][T11583] team1: left allmulticast mode [ 169.207925][T11583] team2: left promiscuous mode [ 169.213251][T11583] team2: left allmulticast mode [ 169.219129][T11583] team3: left promiscuous mode [ 169.224043][T11583] team3: left allmulticast mode [ 169.230655][T11583] team4: left promiscuous mode [ 169.235448][T11583] team4: left allmulticast mode [ 169.241428][T11583] team5: left promiscuous mode [ 169.246223][T11583] team5: left allmulticast mode [ 169.251797][T11583] team6: left promiscuous mode [ 169.256635][T11583] team6: left allmulticast mode [ 169.262882][T11583] team7: left promiscuous mode [ 169.267675][T11583] team7: left allmulticast mode [ 169.273319][T11583] team8: left promiscuous mode [ 169.278159][T11583] team8: left allmulticast mode [ 169.283975][T11583] team9: left promiscuous mode [ 169.289488][T11583] team9: left allmulticast mode [ 169.295089][T11583] team10: left promiscuous mode [ 169.299973][T11583] team10: left allmulticast mode [ 169.306761][T11583] team11: left promiscuous mode [ 169.311707][T11583] team11: left allmulticast mode [ 169.317266][T11583] team12: left promiscuous mode [ 169.323006][T11583] team12: left allmulticast mode [ 169.329159][T11583] team13: left promiscuous mode [ 169.334154][T11583] team13: left allmulticast mode [ 169.337945][T11611] program syz.7.2894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.350650][T11583] team14: left promiscuous mode [ 169.355557][T11583] team14: left allmulticast mode [ 169.380551][T11583] team15: left promiscuous mode [ 169.385452][T11583] team15: left allmulticast mode [ 169.408196][T11583] team16: left promiscuous mode [ 169.414155][T11583] team16: left allmulticast mode [ 169.414360][T11621] loop5: detected capacity change from 0 to 512 [ 169.425398][T11583] team17: left promiscuous mode [ 169.427583][T11621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.431313][T11583] team17: left allmulticast mode [ 169.443598][T11621] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.459589][T11583] bridge3: left promiscuous mode [ 169.472258][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.481438][T11625] loop4: detected capacity change from 0 to 512 [ 169.497780][T11625] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.2890: corrupted xattr block 95: invalid header [ 169.513831][T11625] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2890: bg 0: block 7: invalid block bitmap [ 169.519550][T11593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.527545][T11625] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 169.544009][T11593] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.553416][T11625] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.2890: corrupted xattr block 95: invalid header [ 169.567067][T11593] net_ratelimit: 31 callbacks suppressed [ 169.567071][T11625] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 169.567078][T11593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.567155][ T114] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.572730][T11625] EXT4-fs (loop4): 1 orphan inode deleted [ 169.573113][T11625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.629475][ T114] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.640842][T11620] can0: slcan on ttyS3. [ 169.646978][ T114] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.656569][ T114] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.693350][T11538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.702646][T11538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.710215][T11624] can0 (unregistered): slcan off ttyS3. [ 169.720643][T11538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.735408][T11538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.744256][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 169.754102][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 169.763758][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 169.776853][T11636] loop2: detected capacity change from 0 to 128 [ 169.807301][T11538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.821641][T11538] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.846586][T11644] syz.2.2902: attempt to access beyond end of device [ 169.846586][T11644] loop2: rw=2049, sector=153, nr_sectors = 16 limit=128 [ 169.860730][T11538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.860751][T11538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.864465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.886129][T11644] syz.2.2902: attempt to access beyond end of device [ 169.886129][T11644] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 169.888778][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.891297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.911402][T11644] syz.2.2902: attempt to access beyond end of device [ 169.911402][T11644] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 169.917484][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.944675][T11644] syz.2.2902: attempt to access beyond end of device [ 169.944675][T11644] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 169.980330][T11644] syz.2.2902: attempt to access beyond end of device [ 169.980330][T11644] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 170.025955][T11644] syz.2.2902: attempt to access beyond end of device [ 170.025955][T11644] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 170.031842][T11538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.046415][T11644] syz.2.2902: attempt to access beyond end of device [ 170.046415][T11644] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 170.065871][T11039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.082268][T11644] syz.2.2902: attempt to access beyond end of device [ 170.082268][T11644] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 170.104018][T11644] syz.2.2902: attempt to access beyond end of device [ 170.104018][T11644] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 170.236003][T11667] program syz.4.2907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.257599][T11538] veth0_vlan: entered promiscuous mode [ 170.265903][T11538] veth1_vlan: entered promiscuous mode [ 170.282330][T11538] veth0_macvtap: entered promiscuous mode [ 170.291366][T11538] veth1_macvtap: entered promiscuous mode [ 170.303091][T11538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.312524][T11538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.372135][T11669] pimreg: entered allmulticast mode [ 170.380870][T11669] pimreg: left allmulticast mode [ 170.398255][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 170.398271][ T29] audit: type=1326 audit(2000000086.384:11400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 170.428725][ T29] audit: type=1326 audit(2000000086.384:11401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 170.452357][ T29] audit: type=1326 audit(2000000086.384:11402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 170.476539][ T29] audit: type=1326 audit(2000000086.384:11403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 170.604481][T11679] loop5: detected capacity change from 0 to 1024 [ 170.647509][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.664941][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.675130][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.679177][T11679] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.684466][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.694744][T11679] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.705219][ T29] audit: type=1400 audit(2000000086.594:11404): avc: denied { bind } for pid=11678 comm="syz.4.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.726163][T11679] JBD2: no valid journal superblock found [ 170.735204][ T29] audit: type=1400 audit(2000000086.594:11405): avc: denied { name_bind } for pid=11678 comm="syz.4.2912" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 170.740508][T11679] EXT4-fs (loop5): Could not load journal inode [ 170.770765][ T29] audit: type=1400 audit(2000000086.594:11406): avc: denied { node_bind } for pid=11678 comm="syz.4.2912" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 170.794111][ T29] audit: type=1400 audit(2000000086.604:11407): avc: denied { read } for pid=11678 comm="syz.4.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.814638][ T29] audit: type=1326 audit(2000000086.664:11408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 170.838825][ T29] audit: type=1326 audit(2000000086.664:11409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 170.894472][T11674] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 170.995239][T11710] syzkaller0: entered allmulticast mode [ 171.130881][T11731] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 171.141798][T11731] netlink: 'syz.7.2927': attribute type 1 has an invalid length. [ 171.260419][T11736] lo speed is unknown, defaulting to 1000 [ 171.313708][T11737] pim6reg: entered allmulticast mode [ 171.370664][T11737] bridge_slave_0: left allmulticast mode [ 171.376321][T11737] bridge_slave_0: left promiscuous mode [ 171.382085][T11737] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.392230][T11737] bridge_slave_1: left allmulticast mode [ 171.397882][T11737] bridge_slave_1: left promiscuous mode [ 171.404243][T11737] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.414814][T11737] bond0: (slave bond_slave_0): Releasing backup interface [ 171.432239][T11737] bond0: (slave bond_slave_1): Releasing backup interface [ 171.460066][T11737] team0: Port device team_slave_0 removed [ 171.479490][T11737] team0: Port device team_slave_1 removed [ 171.486267][T11737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.493793][T11737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.503446][T11737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.511029][T11737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.521348][T11737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.694591][T11741] loop7: detected capacity change from 0 to 1024 [ 171.733165][T11741] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 171.745155][T11741] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 171.810540][T11741] JBD2: no valid journal superblock found [ 171.816303][T11741] EXT4-fs (loop7): Could not load journal inode [ 171.997229][T11721] syzkaller0: left allmulticast mode [ 172.346478][T11740] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 172.442239][T11753] SELinux: failed to load policy [ 172.489105][T11762] siw: device registration error -23 [ 172.499402][T11763] netlink: 'syz.2.2937': attribute type 4 has an invalid length. [ 172.507148][T11763] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2937'. [ 172.551741][T11767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2937'. [ 172.609183][T11771] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2940'. [ 172.631182][T11763] .`: renamed from bond0 (while UP) [ 172.651960][T11775] siw: device registration error -23 [ 172.652633][T11771] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2940'. [ 172.667580][T11771] IPVS: Unknown mcast interface: [ 172.696081][T11777] program syz.4.2943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.896985][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 173.619216][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 173.631893][T11806] loop5: detected capacity change from 0 to 1764 [ 173.643955][T11806] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 173.668235][T11806] ISOFS: unable to read i-node block [ 173.686030][T11806] isofs_fill_super: get root inode failed [ 173.719903][T11809] lo speed is unknown, defaulting to 1000 [ 173.976465][ T36] hid-generic 0000:0004:00FF.0004: unknown main item tag 0x0 [ 174.060699][ T36] hid-generic 0000:0004:00FF.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.140354][T11786] syz.2.2947 (11786) used greatest stack depth: 6376 bytes left [ 174.227969][T11826] IPv6: Can't replace route, no match found [ 174.368583][T11829] loop4: detected capacity change from 0 to 2048 [ 174.410292][T11829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.469193][T11837] loop2: detected capacity change from 0 to 2048 [ 174.504547][T11829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2963'. [ 174.542448][T11039] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 174.557626][T11837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 174.558164][T11039] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 174.584394][T11039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.624781][T11837] FAULT_INJECTION: forcing a failure. [ 174.624781][T11837] name failslab, interval 1, probability 0, space 0, times 0 [ 174.638502][T11837] CPU: 0 UID: 0 PID: 11837 Comm: syz.2.2960 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.638529][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.638540][T11837] Call Trace: [ 174.638546][T11837] [ 174.638553][T11837] __dump_stack+0x1d/0x30 [ 174.638575][T11837] dump_stack_lvl+0xe8/0x140 [ 174.638592][T11837] dump_stack+0x15/0x1b [ 174.638632][T11837] should_fail_ex+0x265/0x280 [ 174.638648][T11837] should_failslab+0x8c/0xb0 [ 174.638729][T11837] __kmalloc_noprof+0xa5/0x570 [ 174.638754][T11837] ? ext4_find_extent+0x16b/0x7a0 [ 174.638777][T11837] ext4_find_extent+0x16b/0x7a0 [ 174.638871][T11837] ext4_ext_map_blocks+0x11f/0x38a0 [ 174.638897][T11837] ? get_page_from_freelist+0x13d7/0x1430 [ 174.638917][T11837] ? folio_mark_accessed+0x240/0x3a0 [ 174.638935][T11837] ? xas_create+0xb89/0xbe0 [ 174.638989][T11837] ? __account_obj_stock+0x211/0x350 [ 174.639015][T11837] ? css_rstat_updated+0xb7/0x240 [ 174.639103][T11837] ? __rcu_read_unlock+0x4f/0x70 [ 174.639130][T11837] ext4_map_query_blocks+0xa8/0x480 [ 174.639254][T11837] ext4_da_get_block_prep+0x25b/0xbb0 [ 174.639271][T11837] ? alloc_buffer_head+0x1c3/0x1f0 [ 174.639296][T11837] ? folio_alloc_buffers+0x2e5/0x310 [ 174.639396][T11837] ext4_block_write_begin+0x5e8/0xc00 [ 174.639414][T11837] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 174.639488][T11837] ? __filemap_get_folio+0x466/0x650 [ 174.639515][T11837] ext4_da_write_begin+0x48f/0x6e0 [ 174.639540][T11837] generic_perform_write+0x184/0x490 [ 174.639564][T11837] ext4_buffered_write_iter+0x1ee/0x3c0 [ 174.639608][T11837] ? ext4_file_write_iter+0xfe/0xf60 [ 174.639626][T11837] ext4_file_write_iter+0x387/0xf60 [ 174.639641][T11837] ? kstrtouint+0x76/0xc0 [ 174.639710][T11837] ? kstrtouint_from_user+0x9f/0xf0 [ 174.639729][T11837] ? avc_policy_seqno+0x15/0x30 [ 174.639811][T11837] ? selinux_file_permission+0x1e4/0x320 [ 174.639918][T11837] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 174.639937][T11837] vfs_write+0x52a/0x960 [ 174.640010][T11837] ksys_write+0xda/0x1a0 [ 174.640030][T11837] __x64_sys_write+0x40/0x50 [ 174.640078][T11837] x64_sys_call+0x2802/0x3000 [ 174.640097][T11837] do_syscall_64+0xd2/0x200 [ 174.640187][T11837] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.640208][T11837] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.640232][T11837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.640250][T11837] RIP: 0033:0x7f44a13fefc9 [ 174.640265][T11837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.640424][T11837] RSP: 002b:00007f449fe3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.640443][T11837] RAX: ffffffffffffffda RBX: 00007f44a1656090 RCX: 00007f44a13fefc9 [ 174.640454][T11837] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000006 [ 174.640464][T11837] RBP: 00007f449fe3e090 R08: 0000000000000000 R09: 0000000000000000 [ 174.640474][T11837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.640484][T11837] R13: 00007f44a1656128 R14: 00007f44a1656090 R15: 00007ffddbf5c1f8 [ 174.640500][T11837] [ 174.967874][T11859] loop5: detected capacity change from 0 to 512 [ 174.997521][T11859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.012181][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 175.034195][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 175.046381][T11859] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.093532][ T6880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.105854][T11875] program syz.2.2978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.191900][T11878] lo speed is unknown, defaulting to 1000 [ 175.410738][T11884] pimreg: entered allmulticast mode [ 175.416226][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 175.416236][ T29] audit: type=1326 audit(2000000091.435:11636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.4.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 175.464126][T11885] pimreg: left allmulticast mode [ 175.559154][ T29] audit: type=1326 audit(2000000091.585:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.4.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 175.582895][ T29] audit: type=1326 audit(2000000091.585:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.4.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2543eeefc9 code=0x7ffc0000 [ 175.652970][ T29] audit: type=1400 audit(2000000091.645:11639): avc: denied { create } for pid=11892 comm="syz.7.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 175.673180][ T29] audit: type=1326 audit(2000000091.665:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11894 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c970aefc9 code=0x7ffc0000 [ 175.696874][ T29] audit: type=1326 audit(2000000091.665:11641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11894 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c970aefc9 code=0x7ffc0000 [ 175.721131][ T29] audit: type=1326 audit(2000000091.665:11642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11894 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c970aefc9 code=0x7ffc0000 [ 175.745190][ T29] audit: type=1326 audit(2000000091.665:11643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11894 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c970aefc9 code=0x7ffc0000 [ 175.769540][ T29] audit: type=1326 audit(2000000091.665:11644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11894 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c970aefc9 code=0x7ffc0000 [ 175.793172][ T29] audit: type=1326 audit(2000000091.665:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11894 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0c970aefc9 code=0x7ffc0000 [ 175.831058][T11902] can0: slcan on ttyS3. [ 175.886030][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2993'. [ 175.889179][T11902] can0 (unregistered): slcan off ttyS3. [ 175.890750][T11907] netlink: 'syz.2.2993': attribute type 7 has an invalid length. [ 175.890770][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 175.971495][ T36] ================================================================== [ 175.971522][ T36] BUG: KCSAN: data-race in wg_socket_set_peer_endpoint / wg_socket_set_peer_endpoint [ 175.971553][ T36] [ 175.971557][ T36] read to 0xffff88811ad2d458 of 2 bytes by task 3387 on cpu 0: [ 175.971568][ T36] wg_socket_set_peer_endpoint+0x1d5/0x440 [ 175.971590][ T36] wg_socket_set_peer_endpoint_from_skb+0x6d/0xa0 [ 175.971611][ T36] wg_packet_handshake_receive_worker+0x3ca/0x5e0 [ 175.971631][ T36] process_scheduled_works+0x4ce/0x9d0 [ 175.971657][ T36] worker_thread+0x582/0x770 [ 175.971669][ T36] kthread+0x489/0x510 [ 175.971684][ T36] ret_from_fork+0x122/0x1b0 [ 175.971699][ T36] ret_from_fork_asm+0x1a/0x30 [ 175.971714][ T36] [ 175.971718][ T36] write to 0xffff88811ad2d458 of 16 bytes by task 36 on cpu 1: [ 175.971729][ T36] wg_socket_set_peer_endpoint+0x3b6/0x440 [ 175.971749][ T36] wg_socket_set_peer_endpoint_from_skb+0x6d/0xa0 [ 175.971770][ T36] wg_packet_handshake_receive_worker+0x3f7/0x5e0 [ 175.971789][ T36] process_scheduled_works+0x4ce/0x9d0 [ 175.971810][ T36] worker_thread+0x582/0x770 [ 175.971822][ T36] kthread+0x489/0x510 [ 175.971845][ T36] ret_from_fork+0x122/0x1b0 [ 175.971859][ T36] ret_from_fork_asm+0x1a/0x30 [ 175.971874][ T36] [ 175.971877][ T36] Reported by Kernel Concurrency Sanitizer on: [ 175.971886][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.971907][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.971917][ T36] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 175.971939][ T36] ================================================================== [ 175.984368][T11912] loop7: detected capacity change from 0 to 512 [ 176.101341][T11916] loop4: detected capacity change from 0 to 1024 [ 176.102607][T11916] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.180348][T11916] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 176.191701][T11916] JBD2: no valid journal superblock found [ 176.197475][T11916] EXT4-fs (loop4): Could not load journal inode [ 176.221029][T11916] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22