last executing test programs: 5m27.045325183s ago: executing program 1 (id=3497): r0 = syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@user_xattr}, {@nomblk_io_submit}]}, 0x2, 0xbcb, &(0x7f0000002380)="$eJzs3M9rXNUeAPDvvTNJ0zbvTfp4PF7f5uXxeK8FcZpUUmwRbKXixoWgW6EhnZSQ6Q+SSE2axUT/AVHXghtBLYoLu+5G0a0bbbeKC6FIbBRENHLnR5ImmTSlM70h+XzgzD3nnpl7vt+5zNxzYOYGsGcNZg9pxOGIOJdElJr704jordf6ImqN5y0tzo/9sjg/lsTy8os/JpFExN3F+bHWsZLm9mCz0RcRXz2TxN9e3zju9Ozc5Gi1Wplqto/NXLxybHp27vGJi6MXKhcql4ZPPDlyfOTE0MmRjuX667enb/z8n+e+r/32we/Xf3rrvSROR3+zb20enTIYgyvvyVrFiMJopwfLSaGRzz15JsX7vCjtclAAALSVrpnD/SNKUYjVyVspPvs61+AAAACAjlguRCwDAAAAu1xi/Q8AAAC7XOt3AHcX58daJd9fJDxad85ExEAj/6VmafQUo1bf9kVPRBy4m8Tav7UmjZc9tMGI+O72yY+zEl36H/JWagsR8c/Nzn9Sz3+g/i/ujfmnETHUgfEH17Vzy7/w4Pmf7sD4eecPwN5080zjQrbx+p+uzH9ik+tfceX+MA8n7+tfa/63tGH+t5p/oc3874VtjnHt/XeutuvL8n/qxrMftUo2frZ9qKQewJ2FiH8VN8s/Wck/aZP/uW2OUfrjaqVdX975L78bcSQ2z78ladyf6P/N5vr7Ex0bn6hWhhqPm46x8OXIh+3Gzzv/7PwfaJN/6/5P7c7/lW2O8fLZs59s2Hl7tbp1/ukPvclL9Vrr++bV0ZmZqeGI3uT5jfuPbx1L6zmtY2T5H/3v1p//zfLPvhNqzfchWwssNLdZ+7V1Yz59/dqn7eJprf/yPP/n25z/tfl/Udx4/t/Y5hj/+/zNo+361q5/s5KN31oLAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBLGhH9kaTllXqalssRByPi73EgrV6ennls/PIrl85nfRED0ZOOT1QrQxFRarSTrD1cr6+2j69rPxERhyLi7dL+ers8drl6Pu/kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHEwIvojScsRkUbEUilNy+W8owIAAAA6biDvAAAAAICus/4HAACA3c/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC479O+bt5KIqJ3aXy+Z3mZfT66RAd2W5h0AkJtC3gEAuSnmHQCQmwdc45suwC6U3Ke/r23Pvo7HAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDOdeTwzVtJRNRO7a+XTG+zryfXyIBuS/MOAMhNYavO4qOLA3j0fMRh77LGB5L79PetPqd2b8++rsUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM7TXy9JWo6I3ua+cjniLxExED3J+ES1MhQRf42Ib0o9+7L2cM4xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HnTs3OTo9VqZSqrpNGsrOxRWa0kjXes1uEjJ9E4cP4J7rVKb+yIMHZoJd/vJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jE9Ozc5Wq1WpqbzjgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI2/Ts3ORotVqZ6mIl7xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjPnwEAAP//asgDEw==") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x288, 0x2, 0x400, 0x8}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x401}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000003100)={{r0}, "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"}) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) 5m26.807316431s ago: executing program 1 (id=3501): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0e8f7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934165ded16e411da023b9fba7840a8e50b7f909cc9d51522dc4ac3075e975b35681f8d16915a3d248396f134273ff13a72f082839bd3021d4f0a5550671bb7d267d74dc8a800f3f7e8be6daea4379e76bc978e801fbd9d83544776580baa62d6156cc3", 0xc5}], 0x1}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="57a4ee344c1b709018a38df02055772fa641fa186ba8dbaf28c9707440fe22d087f131a1c5ca799d522770b094285e935dbbef508bf235754bb9cf2a912af9283337aa91f819e8f0590788db6fbbd7bb7378260d59955755b99de612f6cc11cd0c355cb35cb919dc84c56623a4a23ee6253aab7efa8f3d4cf3b6af439838c5a578274db1423dca77da2173c0f51709333c86967bbbd41febff076687e40740be3f87d84df29c", 0xa6}, {0x0}, {&(0x7f0000000480)="908e2be94cd629739fef22bc4f3a9b7facea1f86a11fde4d152cb9961def18dfb1ff08786727adc193fbf7251f0a06c5e00127", 0x33}, {&(0x7f0000000500)="4e504d0c9277d33e7c98d372cd7600", 0xf}], 0x4}}], 0x1, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5m26.68401723s ago: executing program 1 (id=3502): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r0 = io_uring_setup(0xad5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x42}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c000009"], 0xa0}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000040)=@nullb, 0xee01, &(0x7f00000000c0)) close(r0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socket$key(0xf, 0x3, 0x2) syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_process_fork\x00'}, 0x18) unshare(0x2a020400) syz_io_uring_setup(0x4f22, &(0x7f0000000240)={0x0, 0x10, 0x200, 0x3, 0x17a}, &(0x7f00000003c0), &(0x7f0000000ac0)) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f000001d600)=""/102370, 0x18fe2, 0xfffffffffffffffc, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4008841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2eec0a0009000070e2db620ba046a7d4574c71cc", 0x14}], 0x1}, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) 5m25.808085175s ago: executing program 1 (id=3512): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@user_xattr}, {@nomblk_io_submit}]}, 0x2, 0xbcb, &(0x7f0000002380)="$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") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x288, 0x2, 0x400, 0x8}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x401}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) 5m25.741675189s ago: executing program 1 (id=3513): r0 = syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@user_xattr}, {@nomblk_io_submit}]}, 0x2, 0xbcb, &(0x7f0000002380)="$eJzs3M9rXNUeAPDvvTNJ0zbvTfp4PF7f5uXxeK8FcZpUUmwRbKXixoWgW6EhnZSQ6Q+SSE2axUT/AVHXghtBLYoLu+5G0a0bbbeKC6FIbBRENHLnR5ImmTSlM70h+XzgzD3nnpl7vt+5zNxzYOYGsGcNZg9pxOGIOJdElJr704jordf6ImqN5y0tzo/9sjg/lsTy8os/JpFExN3F+bHWsZLm9mCz0RcRXz2TxN9e3zju9Ozc5Gi1Wplqto/NXLxybHp27vGJi6MXKhcql4ZPPDlyfOTE0MmRjuX667enb/z8n+e+r/32we/Xf3rrvSROR3+zb20enTIYgyvvyVrFiMJopwfLSaGRzz15JsX7vCjtclAAALSVrpnD/SNKUYjVyVspPvs61+AAAACAjlguRCwDAAAAu1xi/Q8AAAC7XOt3AHcX58daJd9fJDxad85ExEAj/6VmafQUo1bf9kVPRBy4m8Tav7UmjZc9tMGI+O72yY+zEl36H/JWagsR8c/Nzn9Sz3+g/i/ujfmnETHUgfEH17Vzy7/w4Pmf7sD4eecPwN5080zjQrbx+p+uzH9ik+tfceX+MA8n7+tfa/63tGH+t5p/oc3874VtjnHt/XeutuvL8n/qxrMftUo2frZ9qKQewJ2FiH8VN8s/Wck/aZP/uW2OUfrjaqVdX975L78bcSQ2z78ladyf6P/N5vr7Ex0bn6hWhhqPm46x8OXIh+3Gzzv/7PwfaJN/6/5P7c7/lW2O8fLZs59s2Hl7tbp1/ukPvclL9Vrr++bV0ZmZqeGI3uT5jfuPbx1L6zmtY2T5H/3v1p//zfLPvhNqzfchWwssNLdZ+7V1Yz59/dqn7eJprf/yPP/n25z/tfl/Udx4/t/Y5hj/+/zNo+361q5/s5KN31oLAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBLGhH9kaTllXqalssRByPi73EgrV6ennls/PIrl85nfRED0ZOOT1QrQxFRarSTrD1cr6+2j69rPxERhyLi7dL+ers8drl6Pu/kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHEwIvojScsRkUbEUilNy+W8owIAAAA6biDvAAAAAICus/4HAACA3c/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC479O+bt5KIqJ3aXy+Z3mZfT66RAd2W5h0AkJtC3gEAuSnmHQCQmwdc45suwC6U3Ke/r23Pvo7HAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDOdeTwzVtJRNRO7a+XTG+zryfXyIBuS/MOAMhNYavO4qOLA3j0fMRh77LGB5L79PetPqd2b8++rsUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM7TXy9JWo6I3ua+cjniLxExED3J+ES1MhQRf42Ib0o9+7L2cM4xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HnTs3OTo9VqZSqrpNGsrOxRWa0kjXes1uEjJ9E4cP4J7rVKb+yIMHZoJd/vJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jE9Ozc5Wq1WpqbzjgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI2/Ts3ORotVqZ6mIl7xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjPnwEAAP//asgDEw==") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x288, 0x2, 0x400, 0x8}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x401}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000003100)={{r0}, "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"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x2004, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) mknod$loop(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) 5m25.532265855s ago: executing program 1 (id=3515): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5m10.515170298s ago: executing program 32 (id=3515): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m20.208164732s ago: executing program 4 (id=5850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x608, &(0x7f0000000640)="$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") 3m20.000564007s ago: executing program 4 (id=5852): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 3m19.68663745s ago: executing program 4 (id=5861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_read_part_table(0x60d, &(0x7f0000002240)="$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") 3m19.361818274s ago: executing program 4 (id=5870): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m19.246916332s ago: executing program 4 (id=5873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000640)=r1}, 0x20) syz_read_part_table(0x608, &(0x7f0000000640)="$eJzs1M2LlVUcB/Dvc+fOfYmmEROCChoQXE26iBYDXXQIEzeTiFmLdkEQ2EYYyEXcQV1GSJuIwDYGgwnzD9Qm5CZIm1bDLEWCoI0RoQiduM9z58Vd0CUVPp/Fc87ze875nfNwXsJTrZXusJSqn+F2ZDYLTeX5puiklFJ2Olz54MK5cVklvbxz/eCN5NTy6TPJM2vvJ1l4+dl389t3O7l2dMaP3Txl/mE/3bp68JefZiYZk3aStSQf37nW7j061Zn0pv77POU2Bp/8mHrfDPr1hvs6Wfq2+TY8+8Ib77WqancXVsemP/7oue365u5A967OHW4fTXJrElhsJfm1qY++bCazsjdRqynqk9CfxMrfzYHpb58OnjQbg9H8pcvnO1+069e73xy4s3Xxwcqh9dUji/u3bg6vVM1ivpLU11dVL2Tr/vhOLWsuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHo2BqP5zqS+eeLTu699+Orxo91Hmozfxk16zWuVflIyn2RtOuNfuv1ZP93BR5v3X0rKsZTy9r2rc4dn97ZbrOqhd3x1ti46/30GPE71+l8+f+LzC4O/bjSh3sUHK4fWV48s7t+6Odxe4D87veGB1SQze3u3H8OMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn3fG3Ti6cWj59JknV7iVp7bs2mnz7PUkpyYs/vL5+7tby0m6vTudkt/uw3H7zj+v7fk5vT77vW0mplubSbld1YKN+zv6f/8S/908AAAD//6Picn0=") 3m18.278702693s ago: executing program 2 (id=5839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) close_range(r2, r3, 0x0) 3m18.248344196s ago: executing program 2 (id=5885): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2c020400) fcntl$notify(r0, 0x402, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x20) close(0x3) 3m18.230288007s ago: executing program 2 (id=5886): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="96", 0x1}, {&(0x7f0000000700)='<', 0x1}, {&(0x7f0000000e80)="fbc6", 0x2}], 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000850000000738d8633c00000000000000000000000000a02329c1a647dffd8a4fde66cddbf901505d9ca164338b23ca08626b82490e2060d8868af3b7c7366b7d27a7429ad8745453b4aed30f5575a263a508b5c8fbc29ebb757144e9614f6b73452e03215b8cb499e41a3a1bf95c107bc9860ed28ca8b9880b3a83f89896c2e0da74a00c67"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet(0x2, 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="000000001200000000f3547362973673eb000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$notify(r3, 0x402, 0x80000006) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/121, 0x79, 0x0, &(0x7f0000000400)=""/55, 0x37}}, 0x10) unshare(0x62040200) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3m17.36643472s ago: executing program 2 (id=5903): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x10800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='xen_mc_entry\x00', r3, 0x0, 0x200000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800710, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nouid32}, {@user_xattr}, {@errors_remount}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x462, &(0x7f0000000d80)="$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") bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x49de, 0x3, 0x0, 0xc003, 0x0, "f1870d07f2cf8baf"}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 3m17.273248317s ago: executing program 2 (id=5906): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) close_range(r1, r2, 0x0) 3m17.22294802s ago: executing program 4 (id=5907): unshare(0x2040400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) unshare(0x60400) 3m17.22275002s ago: executing program 33 (id=5907): unshare(0x2040400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) unshare(0x60400) 3m14.945867508s ago: executing program 2 (id=5946): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}], 0x1) 3m14.906203041s ago: executing program 34 (id=5946): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}], 0x1) 3m2.974179705s ago: executing program 7 (id=6277): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="96", 0x1}, {&(0x7f0000000700)='<', 0x1}, {&(0x7f0000000e80)="fbc6", 0x2}], 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000850000000738d8633c00000000000000000000000000a02329c1a647dffd8a4fde66cddbf901505d9ca164338b23ca08626b82490e2060d8868af3b7c7366b7d27a7429ad8745453b4aed30f5575a263a508b5c8fbc29ebb757144e9614f6b73452e03215b8cb499e41a3a1bf95c107bc9860ed28ca8b9880b3a83f89896c2e0da74a00c67"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet(0x2, 0x80001, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3m2.115907647s ago: executing program 7 (id=6330): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff85, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 3m1.893540304s ago: executing program 7 (id=6341): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="96", 0x1}, {&(0x7f0000000700)='<', 0x1}, {&(0x7f0000000e80)="fbc6", 0x2}], 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000850000000738d8633c00000000000000000000000000a02329c1a647dffd8a4fde66cddbf901505d9ca164338b23ca08626b82490e2060d8868af3b7c7366b7d27a7429ad8745453b4aed30f5575a263a508b5c8fbc29ebb757144e9614f6b73452e03215b8cb499e41a3a1bf95c107bc9860ed28ca8b9880b3a83f89896c2e0da74a00c67"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3m1.015514918s ago: executing program 7 (id=6366): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m0.984531011s ago: executing program 7 (id=6370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbdbbaaaaaaaaaaaa86dd"], 0x0) 3m0.734941469s ago: executing program 7 (id=6375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 3m0.686383012s ago: executing program 35 (id=6375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 2m47.515343387s ago: executing program 3 (id=6903): syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0xd, 0x5, 0x0, 0x8, 0xe, "1eb4d10000000800"}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000013ff4e"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x300, 0xf5f9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000002c0)={'geneve1\x00', 0x7ff}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x40000}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x0, 0xfffc}, @sack_perm], 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2m47.515206967s ago: executing program 3 (id=6904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x10db074, 0x0, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x18) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 2m47.451570271s ago: executing program 3 (id=6905): unshare(0x2000400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) nanosleep(0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000540)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2m47.423900634s ago: executing program 3 (id=6906): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m47.386933587s ago: executing program 3 (id=6907): pipe2(&(0x7f0000001cc0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x10db074, 0x0, 0x1, 0x0, &(0x7f00000001c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) 2m47.118884536s ago: executing program 3 (id=6908): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xab79ef6af757518e) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000340)="10c0e8fcb3de1513", 0x8, 0x24008844, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f00000000c0)=0x89a4, 0x4) close(r1) sendmmsg(r0, 0x0, 0x0, 0x0) 2m47.118696316s ago: executing program 36 (id=6908): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xab79ef6af757518e) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000340)="10c0e8fcb3de1513", 0x8, 0x24008844, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f00000000c0)=0x89a4, 0x4) close(r1) sendmmsg(r0, 0x0, 0x0, 0x0) 4.819082587s ago: executing program 9 (id=11368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61770000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r7, 0x1e76, 0x0, 0x6, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.525575685s ago: executing program 9 (id=11391): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000500)='./bus\x00', 0x80000001) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 2.366884447s ago: executing program 9 (id=11393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 2.018209863s ago: executing program 6 (id=11397): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000500)='./bus\x00', 0x80000001) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/13, 0xd}], 0x2}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400000000000117, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 1.63563689s ago: executing program 6 (id=11401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61770000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r7, 0x1e76, 0x0, 0x6, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.498569301s ago: executing program 0 (id=11403): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2eb}], 0x1}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) listen(0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) close(0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000004540), 0x0, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.358855111s ago: executing program 9 (id=11406): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.358635291s ago: executing program 8 (id=11407): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000500)='./bus\x00', 0x80000001) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 1.350813241s ago: executing program 9 (id=11408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0xad5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x42}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c000009"], 0xa0}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000040)=@nullb, 0xee01, &(0x7f00000000c0)) close(r1) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socket$key(0xf, 0x3, 0x2) syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_process_fork\x00'}, 0x18) unshare(0x2a020400) syz_io_uring_setup(0x4f22, &(0x7f0000000240)={0x0, 0x10, 0x200, 0x3, 0x17a}, &(0x7f00000003c0), &(0x7f0000000ac0)) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f000001d600)=""/102370, 0x18fe2, 0xfffffffffffffffc, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4008841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) 1.296214895s ago: executing program 8 (id=11409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000280)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) 692.49739ms ago: executing program 8 (id=11411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x6c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="24002d80050001000000000005000400000000ff090002"], 0x40}}, 0x0) 614.884006ms ago: executing program 0 (id=11412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xe, 0x0, &(0x7f0000000300)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2008, 0x800}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a14000, &(0x7f0000000480)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x4000000}}, {@block_validity}, {@i_version}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noquota}, {@stripe={'stripe', 0x3d, 0xff}}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") setresuid(0xee01, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000b00), 0x91) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) 614.526615ms ago: executing program 6 (id=11413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000) 556.60107ms ago: executing program 8 (id=11415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) 529.269241ms ago: executing program 6 (id=11416): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x4000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 518.842252ms ago: executing program 8 (id=11417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 484.108615ms ago: executing program 5 (id=11419): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4f) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000500)='./bus\x00', 0x80000001) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 456.376617ms ago: executing program 9 (id=11420): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = io_uring_setup(0xad5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x42}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c0000"], 0xa0}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000040)=@nullb, 0xee01, &(0x7f00000000c0)) close(r0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socket$key(0xf, 0x3, 0x2) syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_process_fork\x00'}, 0x18) unshare(0x2a020400) syz_io_uring_setup(0x4f22, &(0x7f0000000240)={0x0, 0x10, 0x200, 0x3, 0x17a}, &(0x7f00000003c0), &(0x7f0000000ac0)) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f000001d600)=""/102370, 0x18fe2, 0xfffffffffffffffc, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4008841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2eec0a0009000070e2db620ba046a7d4574c71cc", 0x14}], 0x1}, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) 433.560008ms ago: executing program 8 (id=11421): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mbind(&(0x7f000013b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000280)=0x10, 0x6, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4004140) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000540000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') lseek(r2, 0x2, 0x1) bind$bt_sco(r2, &(0x7f0000000180), 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) mremap(&(0x7f000013c000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f00002f0000/0x3000)=nil) io_setup(0x1, &(0x7f0000000240)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsetxattr$security_evm(r4, &(0x7f0000000480), &(0x7f00000004c0)=@sha1={0x1, "d301a857439caf08d5b3df1657ba98726cdf2e24"}, 0x15, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 433.171618ms ago: executing program 6 (id=11422): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2eb}], 0x1}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) listen(0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) close(0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 378.751753ms ago: executing program 5 (id=11423): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000280)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) 368.472743ms ago: executing program 6 (id=11424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61770000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r7, 0x1e76, 0x0, 0x6, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 203.058485ms ago: executing program 0 (id=11425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x6c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="24002d80050001000000000005000400000000ff090002"], 0x40}}, 0x0) 190.350226ms ago: executing program 5 (id=11426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=") open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000) 163.603148ms ago: executing program 5 (id=11427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) 146.03004ms ago: executing program 0 (id=11428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f00000001c0)='selinux_audited\x00', r3, 0x0, 0xffff}, 0x18) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000080)={0x5, "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"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x208040) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000006c0)=0x1014) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000006716aa6bbf5a92e8f20a96939b5c3cac0007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) r8 = socket(0x10, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r9, 0x0, 0x200}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r11, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f0000010280)='./file0\x00', 0x182) 139.99814ms ago: executing program 5 (id=11429): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 92.893933ms ago: executing program 5 (id=11430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0xad5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x42}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c000009"], 0xa0}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000040)=@nullb, 0xee01, &(0x7f00000000c0)) close(r1) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socket$key(0xf, 0x3, 0x2) syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_process_fork\x00'}, 0x18) unshare(0x2a020400) syz_io_uring_setup(0x4f22, &(0x7f0000000240)={0x0, 0x10, 0x200, 0x3, 0x17a}, &(0x7f00000003c0), &(0x7f0000000ac0)) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f000001d600)=""/102370, 0x18fe2, 0xfffffffffffffffc, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4008841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) 32.630968ms ago: executing program 0 (id=11431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=11432): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f000000c540), 0x200, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r1, &(0x7f00000012c0)=[{{&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f00000007c0)=""/54, 0x36}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000880)=""/91, 0x5b}, {&(0x7f0000000900)=""/125, 0x7d}, {&(0x7f0000000980)=""/45, 0x2d}, {&(0x7f00000009c0)=""/145, 0x91}], 0x8, &(0x7f0000000b00)=""/92, 0x5c}, 0x5b48}, {{&(0x7f0000000b80)=@caif=@rfm, 0x80, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/166, 0xa6}, 0x7}, {{&(0x7f0000000d00)=@l2tp6, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/177, 0xb1}, {&(0x7f0000000e40)=""/170, 0xaa}], 0x2, &(0x7f0000000f40)=""/59, 0x3b}, 0x7}, {{&(0x7f0000000f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/45, 0x2d}, {&(0x7f0000001040)=""/128, 0x80}, {&(0x7f00000010c0)=""/253, 0xfd}], 0x3, &(0x7f0000001200)=""/157, 0x9d}, 0x1}], 0x5, 0x40010040, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x80, 0x2, 0x8}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f000000000014000009000000389d"], 0x18}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f00000002c0)) dup3(r6, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)={'#! ', './file0'}, 0xb) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) kernel console output (not intermixed with test programs): ! [ 437.842296][T28211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.852965][T28211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.862811][T28211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.873271][T28211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.883176][T28211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.893644][T28211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.903514][T28211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.913987][T28211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.924027][T28211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.934519][T28211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.944440][T28211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.954962][T28211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.964876][T28211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.975324][T28211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.985131][T28211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.995605][T28211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.008016][T28211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.030419][T28211] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.039289][T28211] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.048189][T28211] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.056962][T28211] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.112605][T28366] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9765'. [ 438.300441][ T29] audit: type=1326 audit(438.333:28648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28381 comm="syz.6.9770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 438.350219][ T29] audit: type=1326 audit(438.333:28649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28381 comm="syz.6.9770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 438.373421][ T29] audit: type=1326 audit(438.333:28650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28381 comm="syz.6.9770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 438.396596][ T29] audit: type=1326 audit(438.333:28651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28381 comm="syz.6.9770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 438.841147][T28401] loop6: detected capacity change from 0 to 2048 [ 439.062626][T28401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.132729][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.675507][T28443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9788'. [ 439.684520][T28443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9788'. [ 439.722048][T28444] validate_nla: 2 callbacks suppressed [ 439.722066][T28444] netlink: 'syz.5.9791': attribute type 2 has an invalid length. [ 439.735542][T28444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9791'. [ 439.768614][T28443] geneve2: entered allmulticast mode [ 439.926788][T28458] loop5: detected capacity change from 0 to 256 [ 440.025433][T28459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9796'. [ 440.034468][T28459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9796'. [ 440.526017][T28496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9809'. [ 440.535160][T28496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9809'. [ 440.584935][T28500] loop5: detected capacity change from 0 to 256 [ 440.751733][T28506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9810'. [ 440.760984][T28506] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9810'. [ 440.944341][T28511] netlink: 'syz.0.9814': attribute type 2 has an invalid length. [ 440.952144][T28511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9814'. [ 441.361035][T28524] chnl_net:caif_netlink_parms(): no params data found [ 441.419112][T28524] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.426264][T28524] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.440537][T28524] bridge_slave_0: entered allmulticast mode [ 441.448595][T28524] bridge_slave_0: entered promiscuous mode [ 441.459779][T28524] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.467097][T28524] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.477270][T28524] bridge_slave_1: entered allmulticast mode [ 441.484062][T28524] bridge_slave_1: entered promiscuous mode [ 441.522490][T28524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.532201][T28553] netlink: 'syz.9.9828': attribute type 2 has an invalid length. [ 441.540114][T28553] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9828'. [ 441.551536][T28524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.574070][T28524] team0: Port device team_slave_0 added [ 441.581262][T28524] team0: Port device team_slave_1 added [ 441.602737][T28524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.609883][T28524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.635960][T28524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.653926][T28524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.660954][T28524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.687080][T28524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.729650][T28524] hsr_slave_0: entered promiscuous mode [ 441.735939][T28524] hsr_slave_1: entered promiscuous mode [ 441.741912][T28524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.749762][T28524] Cannot create hsr debugfs directory [ 441.889530][T28524] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.916897][ T776] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.937905][T28524] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.989945][T28524] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.048553][T28524] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.140564][T28524] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 442.164118][T28524] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 442.173428][T28524] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.187499][T28524] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 442.338818][T28588] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9841'. [ 442.359124][T28524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.403619][T28524] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.422832][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.430055][ T8698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.462640][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.469800][ T8698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.495654][T28524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 442.506081][T28524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.597929][T28524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.746698][T28524] veth0_vlan: entered promiscuous mode [ 442.783952][T28524] veth1_vlan: entered promiscuous mode [ 442.809825][T28524] veth0_macvtap: entered promiscuous mode [ 442.830725][T28524] veth1_macvtap: entered promiscuous mode [ 442.852229][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.862828][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.872733][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.883248][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.893287][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.903774][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.913823][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.924377][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.934562][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.945198][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.955048][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.965650][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.975625][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.986271][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.996221][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.006681][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.016545][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.027220][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.037099][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.047757][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.057784][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.068241][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.078180][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.088652][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.102001][T28524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.120699][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.131286][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.141176][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.151839][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.161906][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.172482][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.182491][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.192957][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.203222][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.213998][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.223909][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.234533][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.244400][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.254913][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.264756][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.275183][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.285110][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.295558][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.305401][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.315860][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.325820][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.336250][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.346096][T28524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.356531][T28524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.369450][T28524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.380350][T28524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.389298][T28524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.398256][T28524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.407015][T28524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.846154][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.585414][T28698] 9pnet_fd: Insufficient options for proto=fd [ 445.320926][T28724] __nla_validate_parse: 3 callbacks suppressed [ 445.320946][T28724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9885'. [ 445.563935][T28730] 9pnet_fd: Insufficient options for proto=fd [ 445.698647][T28734] wireguard0: entered promiscuous mode [ 445.704191][T28734] wireguard0: entered allmulticast mode [ 446.051763][T28760] wireguard0: entered promiscuous mode [ 446.057465][T28760] wireguard0: entered allmulticast mode [ 446.095636][T28765] pim6reg1: entered promiscuous mode [ 446.101008][T28765] pim6reg1: entered allmulticast mode [ 446.379963][T28784] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9911'. [ 446.955663][ T8694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.144974][T28812] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9920'. [ 447.323291][T28821] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9924'. [ 447.335639][T28818] wireguard0: entered promiscuous mode [ 447.341196][T28818] wireguard0: entered allmulticast mode [ 448.506089][T28870] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9941'. [ 448.681391][T28873] lo speed is unknown, defaulting to 1000 [ 448.687424][T28873] lo speed is unknown, defaulting to 1000 [ 448.693341][T28873] lo speed is unknown, defaulting to 1000 [ 448.704267][T28873] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 448.716433][T28873] lo speed is unknown, defaulting to 1000 [ 448.722973][T28873] lo speed is unknown, defaulting to 1000 [ 448.729076][T28873] lo speed is unknown, defaulting to 1000 [ 448.735402][T28873] lo speed is unknown, defaulting to 1000 [ 448.741598][T28873] lo speed is unknown, defaulting to 1000 [ 448.748174][T28873] lo speed is unknown, defaulting to 1000 [ 448.754617][T28873] lo speed is unknown, defaulting to 1000 [ 448.760907][T28873] lo speed is unknown, defaulting to 1000 [ 448.767130][T28873] lo speed is unknown, defaulting to 1000 [ 448.773242][T28873] lo speed is unknown, defaulting to 1000 [ 448.779485][T28873] lo speed is unknown, defaulting to 1000 [ 448.785956][T28873] lo speed is unknown, defaulting to 1000 [ 448.792409][T28873] lo speed is unknown, defaulting to 1000 [ 448.846744][T28897] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9954'. [ 449.181295][T28928] syzkaller0: entered promiscuous mode [ 449.186955][T28928] syzkaller0: entered allmulticast mode [ 449.201102][T28931] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9968'. [ 449.324225][T28938] netlink: 'syz.8.9972': attribute type 2 has an invalid length. [ 449.332231][T28938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9972'. [ 449.460055][T28953] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9979'. [ 449.738536][T28964] netlink: 'syz.6.9983': attribute type 2 has an invalid length. [ 449.746368][T28964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9983'. [ 450.345527][T28996] __nla_validate_parse: 2 callbacks suppressed [ 450.345605][T28996] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9995'. [ 450.501538][T28998] netlink: 'syz.0.9996': attribute type 2 has an invalid length. [ 450.509337][T28998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9996'. [ 451.125326][T29026] syzkaller0: entered promiscuous mode [ 451.130900][T29026] syzkaller0: entered allmulticast mode [ 451.142889][T29027] lo speed is unknown, defaulting to 1000 [ 451.908077][T29046] netlink: 'syz.6.10011': attribute type 2 has an invalid length. [ 451.916065][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10011'. [ 452.129900][T29055] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10015'. [ 452.156510][ T8698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.254345][T29064] wireguard0: entered promiscuous mode [ 452.259992][T29064] wireguard0: entered allmulticast mode [ 452.426958][T29075] netlink: 'syz.5.10022': attribute type 2 has an invalid length. [ 452.434876][T29075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10022'. [ 452.565366][T29079] syzkaller0: entered promiscuous mode [ 452.570890][T29079] syzkaller0: entered allmulticast mode [ 452.656807][T29094] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10029'. [ 452.798351][T29106] lo speed is unknown, defaulting to 1000 [ 453.161853][T29115] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10037'. [ 453.220164][T29118] netlink: 'syz.6.10038': attribute type 2 has an invalid length. [ 453.228135][T29118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10038'. [ 453.337704][T29127] pim6reg1: entered promiscuous mode [ 453.343067][T29127] pim6reg1: entered allmulticast mode [ 453.822091][T29142] netlink: 96 bytes leftover after parsing attributes in process `syz.8.10042'. [ 453.914155][T29148] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10046'. [ 454.694097][T29174] netlink: 'syz.9.10057': attribute type 2 has an invalid length. [ 454.772965][T29176] pim6reg1: entered promiscuous mode [ 454.778350][T29176] pim6reg1: entered allmulticast mode [ 455.556154][T29223] 9pnet_fd: Insufficient options for proto=fd [ 455.603058][T29226] pim6reg1: entered promiscuous mode [ 455.608508][T29226] pim6reg1: entered allmulticast mode [ 455.616492][T29228] __nla_validate_parse: 5 callbacks suppressed [ 455.616509][T29228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10079'. [ 455.894103][T29248] 9pnet_fd: Insufficient options for proto=fd [ 456.594465][T29278] 9pnet_fd: Insufficient options for proto=fd [ 457.368892][T29298] pim6reg1: entered promiscuous mode [ 457.374236][T29298] pim6reg1: entered allmulticast mode [ 457.833737][T29306] pim6reg1: entered promiscuous mode [ 457.839161][T29306] pim6reg1: entered allmulticast mode [ 457.873066][T29310] 9pnet_fd: Insufficient options for proto=fd [ 457.912351][T29311] lo speed is unknown, defaulting to 1000 [ 457.918458][ T8698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 458.027579][T29325] netlink: 'syz.5.10119': attribute type 2 has an invalid length. [ 458.035500][T29325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10119'. [ 458.086078][T29329] pim6reg1: entered promiscuous mode [ 458.091422][T29329] pim6reg1: entered allmulticast mode [ 458.176023][T29337] 9pnet_fd: Insufficient options for proto=fd [ 458.224928][T29343] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10128'. [ 458.280421][T29350] netlink: 'syz.6.10131': attribute type 2 has an invalid length. [ 458.288301][T29350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10131'. [ 458.330583][T29352] netlink: 'syz.9.10132': attribute type 16 has an invalid length. [ 458.338698][T29352] netlink: 'syz.9.10132': attribute type 17 has an invalid length. [ 458.373043][T29359] pim6reg1: entered promiscuous mode [ 458.378591][T29359] pim6reg1: entered allmulticast mode [ 458.438872][T29352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.570312][T29364] 9pnet_fd: Insufficient options for proto=fd [ 458.675037][T29369] pim6reg1: entered promiscuous mode [ 458.680503][T29369] pim6reg1: entered allmulticast mode [ 458.748964][T29373] lo speed is unknown, defaulting to 1000 [ 458.832045][T29375] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10141'. [ 459.090195][T29381] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10143'. [ 459.283640][T29392] 9pnet_fd: Insufficient options for proto=fd [ 459.340904][T29402] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10152'. [ 459.544961][T29410] pim6reg1: entered promiscuous mode [ 459.550381][T29410] pim6reg1: entered allmulticast mode [ 459.879010][T29424] 9pnet_fd: Insufficient options for proto=fd [ 459.982451][T29429] pim6reg1: entered promiscuous mode [ 459.987877][T29429] pim6reg1: entered allmulticast mode [ 460.060052][T29431] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10164'. [ 460.318484][T29446] netlink: 'syz.6.10171': attribute type 2 has an invalid length. [ 460.326623][T29446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10171'. [ 460.364310][T29453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10173'. [ 460.378552][T29450] 9pnet_fd: Insufficient options for proto=fd [ 461.221763][T29491] __nla_validate_parse: 1 callbacks suppressed [ 461.221782][T29491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10189'. [ 461.342059][T29494] lo speed is unknown, defaulting to 1000 [ 461.588173][T29504] 9pnet_fd: Insufficient options for proto=fd [ 461.659848][T29512] pim6reg1: entered promiscuous mode [ 461.665208][T29512] pim6reg1: entered allmulticast mode [ 461.700661][T29516] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10200'. [ 461.940494][T29531] 9pnet_fd: Insufficient options for proto=fd [ 461.983254][T29535] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10207'. [ 462.080290][T29546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10213'. [ 462.486198][T29552] pim6reg1: entered promiscuous mode [ 462.491535][T29552] pim6reg1: entered allmulticast mode [ 462.652331][T29560] 9pnet_fd: Insufficient options for proto=fd [ 462.775346][T29564] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10221'. [ 462.928589][T29580] lo speed is unknown, defaulting to 1000 [ 462.942577][T29584] 9pnet_fd: Insufficient options for proto=fd [ 463.010846][T29591] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10233'. [ 463.139327][T29599] pim6reg1: entered promiscuous mode [ 463.144707][T29599] pim6reg1: entered allmulticast mode [ 463.398566][T29610] pim6reg1: entered promiscuous mode [ 463.404032][T29610] pim6reg1: entered allmulticast mode [ 463.443502][T29613] 9pnet_fd: Insufficient options for proto=fd [ 463.514409][T29621] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10245'. [ 463.679528][ T776] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.942056][T29647] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10256'. [ 463.972897][T29649] netlink: 'syz.0.10257': attribute type 2 has an invalid length. [ 463.980814][T29649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10257'. [ 464.031522][T29651] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10258'. [ 466.054383][T29729] netlink: 'syz.5.10289': attribute type 16 has an invalid length. [ 466.062384][T29729] netlink: 'syz.5.10289': attribute type 17 has an invalid length. [ 466.096428][T29729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.111942][ T3372] lo speed is unknown, defaulting to 1000 [ 466.614026][T29748] __nla_validate_parse: 3 callbacks suppressed [ 466.614046][T29748] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10293'. [ 466.950186][T29758] lo speed is unknown, defaulting to 1000 [ 466.990814][T29759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10297'. [ 467.118875][T29759] gretap0: entered allmulticast mode [ 467.276633][T29770] pim6reg1: entered promiscuous mode [ 467.281986][T29770] pim6reg1: entered allmulticast mode [ 467.625066][T29783] pim6reg1: entered promiscuous mode [ 467.630523][T29783] pim6reg1: entered allmulticast mode [ 468.162266][T29792] syzkaller0: entered promiscuous mode [ 468.167909][T29792] syzkaller0: entered allmulticast mode [ 468.328634][T29798] siw: device registration error -23 [ 468.515191][T29810] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10314'. [ 468.578229][T29814] netlink: 'syz.5.10316': attribute type 2 has an invalid length. [ 468.586155][T29814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10316'. [ 468.690974][T29820] pim6reg1: entered promiscuous mode [ 468.696678][T29820] pim6reg1: entered allmulticast mode [ 469.302031][T29841] netlink: 'syz.8.10327': attribute type 2 has an invalid length. [ 469.309941][T29841] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10327'. [ 469.401944][T29849] pim6reg1: entered promiscuous mode [ 469.407383][T29849] pim6reg1: entered allmulticast mode [ 469.437744][ T8698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.492924][T29852] lo speed is unknown, defaulting to 1000 [ 469.602117][T29858] pim6reg1: entered promiscuous mode [ 469.607594][T29858] pim6reg1: entered allmulticast mode [ 470.358281][T29895] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10340'. [ 470.752068][T29906] lo speed is unknown, defaulting to 1000 [ 471.269845][T29935] lo speed is unknown, defaulting to 1000 [ 471.681628][T29942] netlink: 96 bytes leftover after parsing attributes in process `syz.8.10365'. [ 472.004808][T29947] lo speed is unknown, defaulting to 1000 [ 472.186445][T29953] lo speed is unknown, defaulting to 1000 [ 472.433427][T29975] lo speed is unknown, defaulting to 1000 [ 472.591764][T30002] netlink: 'syz.9.10391': attribute type 2 has an invalid length. [ 472.599673][T30002] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10391'. [ 472.683003][T30016] loop6: detected capacity change from 0 to 128 [ 472.715801][T30009] syzkaller0: entered promiscuous mode [ 472.721318][T30009] syzkaller0: entered allmulticast mode [ 472.780362][T30014] syzkaller0: entered promiscuous mode [ 472.785912][T30014] syzkaller0: entered allmulticast mode [ 472.837063][T30026] lo speed is unknown, defaulting to 1000 [ 472.899705][T30032] netlink: 'syz.8.10403': attribute type 2 has an invalid length. [ 472.907652][T30032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10403'. [ 473.000163][T30046] lo speed is unknown, defaulting to 1000 [ 473.145219][T30055] syzkaller0: entered promiscuous mode [ 473.150757][T30055] syzkaller0: entered allmulticast mode [ 473.157845][T30059] netlink: 'syz.8.10415': attribute type 2 has an invalid length. [ 473.165738][T30059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10415'. [ 473.312140][T30069] lo speed is unknown, defaulting to 1000 [ 473.758908][T30088] netlink: 'syz.6.10426': attribute type 2 has an invalid length. [ 473.766908][T30088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10426'. [ 473.812076][T30094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10428'. [ 473.884627][T30093] syzkaller0: entered promiscuous mode [ 473.890240][T30093] syzkaller0: entered allmulticast mode [ 474.019797][T30111] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10436'. [ 474.049928][T30113] netlink: 'syz.5.10437': attribute type 2 has an invalid length. [ 474.057811][T30113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10437'. [ 474.108382][T30119] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10440'. [ 474.123782][T30121] lo speed is unknown, defaulting to 1000 [ 474.145845][T30123] pim6reg1: entered promiscuous mode [ 474.151252][T30123] pim6reg1: entered allmulticast mode [ 474.196174][T30128] pim6reg1: entered promiscuous mode [ 474.201746][T30128] pim6reg1: entered allmulticast mode [ 474.242915][T30121] loop5: detected capacity change from 0 to 128 [ 474.292399][T30130] lo speed is unknown, defaulting to 1000 [ 474.351953][T30132] lo speed is unknown, defaulting to 1000 [ 474.404790][T30138] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10449'. [ 474.433877][T30139] syzkaller0: entered promiscuous mode [ 474.439539][T30139] syzkaller0: entered allmulticast mode [ 474.466221][T30132] loop5: detected capacity change from 0 to 128 [ 475.196652][ T3419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.417904][T30181] lo speed is unknown, defaulting to 1000 [ 475.793192][T30208] pim6reg1: entered promiscuous mode [ 475.798616][T30208] pim6reg1: entered allmulticast mode [ 476.048920][T30230] pim6reg1: entered promiscuous mode [ 476.054331][T30230] pim6reg1: entered allmulticast mode [ 476.854189][T30265] netlink: 'syz.0.10498': attribute type 2 has an invalid length. [ 476.862138][T30265] __nla_validate_parse: 5 callbacks suppressed [ 476.862154][T30265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10498'. [ 477.471164][T30290] lo speed is unknown, defaulting to 1000 [ 477.593026][T30290] loop8: detected capacity change from 0 to 128 [ 477.688663][T30295] netlink: 'syz.8.10509': attribute type 2 has an invalid length. [ 477.696671][T30295] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10509'. [ 477.771863][T30299] pim6reg1: entered promiscuous mode [ 477.777226][T30299] pim6reg1: entered allmulticast mode [ 478.832526][T30341] loop6: detected capacity change from 0 to 128 [ 478.850345][T30343] loop8: detected capacity change from 0 to 128 [ 479.063513][T30351] siw: device registration error -23 [ 479.647541][T30371] loop5: detected capacity change from 0 to 128 [ 480.098670][T30400] loop6: detected capacity change from 0 to 128 [ 480.315670][T17371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.355429][T30409] siw: device registration error -23 [ 480.664662][T30419] loop9: detected capacity change from 0 to 2048 [ 480.687053][T30419] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.823303][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.868469][T30435] netlink: 'syz.5.10564': attribute type 2 has an invalid length. [ 480.876404][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10564'. [ 481.004536][T30443] pim6reg1: entered promiscuous mode [ 481.009968][T30443] pim6reg1: entered allmulticast mode [ 481.485569][T30464] netlink: 'syz.5.10576': attribute type 2 has an invalid length. [ 481.493444][T30464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10576'. [ 481.687242][T30471] pim6reg1: entered promiscuous mode [ 481.692590][T30471] pim6reg1: entered allmulticast mode [ 481.978859][T30486] netlink: 'syz.0.10585': attribute type 2 has an invalid length. [ 481.986886][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10585'. [ 482.359984][T30524] loop6: detected capacity change from 0 to 128 [ 482.765018][T30566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10622'. [ 482.947053][T30585] pim6reg1: entered promiscuous mode [ 482.952512][T30585] pim6reg1: entered allmulticast mode [ 483.081996][T30591] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10634'. [ 483.191845][T30598] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10637'. [ 483.282952][T30602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10639'. [ 483.575251][T30618] pim6reg1: entered promiscuous mode [ 483.580771][T30618] pim6reg1: entered allmulticast mode [ 483.640963][T30622] netlink: 'syz.5.10648': attribute type 2 has an invalid length. [ 483.648926][T30622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10648'. [ 483.669488][T30624] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10649'. [ 483.707230][T30626] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10650'. [ 484.088750][T30648] lo speed is unknown, defaulting to 1000 [ 484.125497][T30649] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10654'. [ 484.785369][T30657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10661'. [ 484.967887][T30667] pim6reg1: entered promiscuous mode [ 484.973340][T30667] pim6reg1: entered allmulticast mode [ 485.450060][T17369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.872234][T30693] pim6reg1: entered promiscuous mode [ 485.877630][T30693] pim6reg1: entered allmulticast mode [ 487.019897][T30750] netlink: 'syz.9.10693': attribute type 2 has an invalid length. [ 487.027919][T30750] __nla_validate_parse: 1 callbacks suppressed [ 487.027932][T30750] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10693'. [ 487.083590][T30758] pim6reg1: entered promiscuous mode [ 487.088972][T30758] pim6reg1: entered allmulticast mode [ 487.120443][T30762] netlink: 'syz.0.10698': attribute type 2 has an invalid length. [ 487.128515][T30762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10698'. [ 487.201918][T30770] loop9: detected capacity change from 0 to 128 [ 487.302893][T30780] netlink: 'syz.6.10707': attribute type 2 has an invalid length. [ 487.310942][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10707'. [ 487.363874][T30784] netlink: 'syz.6.10708': attribute type 2 has an invalid length. [ 487.371857][T30784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10708'. [ 487.405026][T30786] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10700'. [ 487.593861][T30794] siw: device registration error -23 [ 487.651065][T30793] siw: device registration error -23 [ 487.966819][T30799] syzkaller0: entered promiscuous mode [ 487.972371][T30799] syzkaller0: entered allmulticast mode [ 488.242053][T30805] loop5: detected capacity change from 0 to 128 [ 488.694274][T30827] 9pnet: Could not find request transport: fd0x0000000000000006 [ 489.192188][T30848] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10732'. [ 489.363952][T30850] syzkaller0: entered promiscuous mode [ 489.369587][T30850] syzkaller0: entered allmulticast mode [ 489.707989][T30869] syzkaller0: entered promiscuous mode [ 489.713519][T30869] syzkaller0: entered allmulticast mode [ 490.647425][T30905] netlink: 'syz.6.10750': attribute type 2 has an invalid length. [ 490.655304][T30905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10750'. [ 490.779908][T30909] netlink: 'syz.6.10752': attribute type 2 has an invalid length. [ 490.787803][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10752'. [ 490.830623][T30911] siw: device registration error -23 [ 491.070453][T30924] siw: device registration error -23 [ 491.173609][T30934] pim6reg1: entered promiscuous mode [ 491.179004][T30934] pim6reg1: entered allmulticast mode [ 491.196002][T17369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.888249][T30947] netlink: 'syz.8.10764': attribute type 2 has an invalid length. [ 491.896245][T30947] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10764'. [ 491.945106][T30954] loop8: detected capacity change from 0 to 128 [ 491.974915][T30956] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10768'. [ 492.017439][T30959] 9pnet: Could not find request transport: fd0x0000000000000006 [ 492.109071][T30964] lo speed is unknown, defaulting to 1000 [ 492.249797][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 492.249814][ T29] audit: type=1326 audit(492.283:28686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5625cde9 code=0x7ffc0000 [ 492.250205][T30977] netlink: 'syz.5.10777': attribute type 2 has an invalid length. [ 492.258888][ T29] audit: type=1326 audit(492.293:28687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd5625b750 code=0x7ffc0000 [ 492.279164][T30977] __nla_validate_parse: 1 callbacks suppressed [ 492.279187][T30977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10777'. [ 492.325885][ T29] audit: type=1326 audit(492.293:28688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5625cde9 code=0x7ffc0000 [ 492.349082][ T29] audit: type=1326 audit(492.293:28689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd5625ba4a code=0x7ffc0000 [ 492.379864][ T29] audit: type=1326 audit(492.413:28690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd5628f6a5 code=0x7ffc0000 [ 492.408932][T30983] loop5: detected capacity change from 0 to 128 [ 492.541479][T30992] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 492.577192][ T29] audit: type=1326 audit(492.613:28691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5625cde9 code=0x7ffc0000 [ 492.600348][ T29] audit: type=1326 audit(492.613:28692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5625cde9 code=0x7ffc0000 [ 492.623505][ T29] audit: type=1326 audit(492.613:28693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5625cde9 code=0x7ffc0000 [ 492.646744][ T29] audit: type=1326 audit(492.613:28694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30974 comm="syz.9.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbd5625cde9 code=0x7ffc0000 [ 492.669799][ T29] audit: type=1400 audit(492.613:28695): avc: denied { setopt } for pid=30974 comm="syz.9.10776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 492.875123][T31012] loop5: detected capacity change from 0 to 128 [ 493.232290][T31024] pim6reg1: entered promiscuous mode [ 493.237739][T31024] pim6reg1: entered allmulticast mode [ 493.317435][T31028] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 493.357404][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10799'. [ 493.652016][T31055] pim6reg1: entered promiscuous mode [ 493.657412][T31055] pim6reg1: entered allmulticast mode [ 493.688283][T31059] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 493.711990][T31062] loop6: detected capacity change from 0 to 128 [ 493.727011][T31062] FAT-fs (loop6): Directory bread(block 32) failed [ 493.733668][T31062] FAT-fs (loop6): Directory bread(block 33) failed [ 493.740599][T31062] FAT-fs (loop6): Directory bread(block 34) failed [ 493.747370][T31062] FAT-fs (loop6): Directory bread(block 35) failed [ 493.753972][T31062] FAT-fs (loop6): Directory bread(block 36) failed [ 493.760788][T31062] FAT-fs (loop6): Directory bread(block 37) failed [ 493.767424][T31062] FAT-fs (loop6): Directory bread(block 38) failed [ 493.774049][T31062] FAT-fs (loop6): Directory bread(block 39) failed [ 493.781079][T31062] FAT-fs (loop6): Directory bread(block 40) failed [ 493.787766][T31062] FAT-fs (loop6): Directory bread(block 41) failed [ 493.820638][T31071] lo speed is unknown, defaulting to 1000 [ 493.946320][T31083] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 494.050467][T31096] loop6: detected capacity change from 0 to 512 [ 494.057351][T31096] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 494.433313][T31132] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 494.433313][T31132] program syz.6.10838 not setting count and/or reply_len properly [ 494.553714][T31138] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10840'. [ 494.602350][T31139] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10836'. [ 495.170515][T31165] loop8: detected capacity change from 0 to 128 [ 495.172116][T31163] block device autoloading is deprecated and will be removed. [ 495.932310][T31186] netlink: 'syz.9.10858': attribute type 21 has an invalid length. [ 495.938638][T31188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10859'. [ 495.940340][T31186] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.994749][T31192] loop8: detected capacity change from 0 to 512 [ 496.004761][T31192] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 496.052909][T31194] loop8: detected capacity change from 0 to 128 [ 496.365371][T31220] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10868'. [ 496.847368][T31232] pim6reg1: entered promiscuous mode [ 496.852798][T31232] pim6reg1: entered allmulticast mode [ 496.957252][T17366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.129542][T31243] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10879'. [ 497.394970][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 497.394989][ T29] audit: type=1400 audit(497.423:28752): avc: denied { connect } for pid=31255 comm="syz.6.10883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 497.420520][ T29] audit: type=1400 audit(497.423:28753): avc: denied { name_connect } for pid=31255 comm="syz.6.10883" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 497.499323][ T29] audit: type=1400 audit(497.533:28754): avc: denied { write } for pid=31255 comm="syz.6.10883" lport=35086 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 497.557321][ T29] audit: type=1400 audit(497.593:28755): avc: denied { name_connect } for pid=31255 comm="syz.6.10883" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 498.024744][ T29] audit: type=1400 audit(498.053:28756): avc: denied { create } for pid=31275 comm="syz.0.10890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 498.251522][T31285] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 498.312836][T31288] loop6: detected capacity change from 0 to 1024 [ 498.320300][T31288] EXT4-fs: Ignoring removed i_version option [ 498.345657][T31288] EXT4-fs (loop6): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 498.380435][T31288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.405954][T31288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.584115][T31299] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10898'. [ 498.741286][ T29] audit: type=1400 audit(498.763:28757): avc: denied { read } for pid=31304 comm="syz.9.10899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 498.912323][T31311] loop6: detected capacity change from 0 to 512 [ 498.948813][T31311] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 498.971762][ T29] audit: type=1400 audit(499.003:28758): avc: denied { lock } for pid=31310 comm="syz.6.10901" path="socket:[110175]" dev="sockfs" ino=110175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 499.067474][T31319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10904'. [ 499.070489][T31318] loop9: detected capacity change from 0 to 512 [ 499.076633][T31319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10904'. [ 499.086649][T31318] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 499.091992][T31319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10904'. [ 499.121421][T31318] EXT4-fs (loop9): 1 truncate cleaned up [ 499.131239][T31318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.173847][T31325] FAULT_INJECTION: forcing a failure. [ 499.173847][T31325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.187060][T31325] CPU: 0 UID: 0 PID: 31325 Comm: syz.6.10905 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 499.187093][T31325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 499.187110][T31325] Call Trace: [ 499.187118][T31325] [ 499.187126][T31325] dump_stack_lvl+0xf2/0x150 [ 499.187200][T31325] dump_stack+0x15/0x1a [ 499.187227][T31325] should_fail_ex+0x24a/0x260 [ 499.187260][T31325] should_fail+0xb/0x10 [ 499.187290][T31325] should_fail_usercopy+0x1a/0x20 [ 499.187344][T31325] _copy_to_user+0x20/0xa0 [ 499.187399][T31325] simple_read_from_buffer+0xa0/0x110 [ 499.187430][T31325] proc_fail_nth_read+0xf9/0x140 [ 499.187461][T31325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.187510][T31325] vfs_read+0x19b/0x6f0 [ 499.187539][T31325] ? __rcu_read_unlock+0x4e/0x70 [ 499.187562][T31325] ? __fget_files+0x17c/0x1c0 [ 499.187656][T31325] ksys_read+0xe8/0x1b0 [ 499.187735][T31325] __x64_sys_read+0x42/0x50 [ 499.187760][T31325] x64_sys_call+0x2874/0x2dc0 [ 499.187787][T31325] do_syscall_64+0xc9/0x1c0 [ 499.187825][T31325] ? clear_bhb_loop+0x55/0xb0 [ 499.187864][T31325] ? clear_bhb_loop+0x55/0xb0 [ 499.187896][T31325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.187923][T31325] RIP: 0033:0x7fb3d8f2b7fc [ 499.187940][T31325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 499.187961][T31325] RSP: 002b:00007fb3d7597030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.188032][T31325] RAX: ffffffffffffffda RBX: 00007fb3d9145fa0 RCX: 00007fb3d8f2b7fc [ 499.188048][T31325] RDX: 000000000000000f RSI: 00007fb3d75970a0 RDI: 0000000000000003 [ 499.188061][T31325] RBP: 00007fb3d7597090 R08: 0000000000000000 R09: 0000000000000000 [ 499.188072][T31325] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 499.188084][T31325] R13: 0000000000000001 R14: 00007fb3d9145fa0 R15: 00007fff24366f58 [ 499.188106][T31325] [ 499.355359][ T29] audit: type=1400 audit(499.363:28759): avc: denied { setattr } for pid=31317 comm="syz.9.10903" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 499.613816][T31334] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 499.652959][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.665352][T31337] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10908'. [ 499.675549][T31332] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10908'. [ 499.728059][T31342] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10911'. [ 499.864942][T31348] syzkaller0: entered promiscuous mode [ 499.871019][T31348] syzkaller0: entered allmulticast mode [ 499.874240][T31360] FAULT_INJECTION: forcing a failure. [ 499.874240][T31360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.889728][T31360] CPU: 0 UID: 0 PID: 31360 Comm: syz.9.10916 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 499.889798][T31360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 499.889809][T31360] Call Trace: [ 499.889815][T31360] [ 499.889822][T31360] dump_stack_lvl+0xf2/0x150 [ 499.889847][T31360] dump_stack+0x15/0x1a [ 499.889865][T31360] should_fail_ex+0x24a/0x260 [ 499.889891][T31360] should_fail+0xb/0x10 [ 499.889927][T31360] should_fail_usercopy+0x1a/0x20 [ 499.889982][T31360] strncpy_from_user+0x25/0x210 [ 499.890059][T31360] ? mntput_no_expire+0x70/0x3d0 [ 499.890081][T31360] strncpy_from_user_nofault+0x66/0xe0 [ 499.890103][T31360] bpf_probe_read_user_str+0x2a/0x70 [ 499.890132][T31360] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 499.890186][T31360] bpf_trace_run4+0x114/0x1e0 [ 499.890210][T31360] __traceiter_sched_switch+0x3b/0x60 [ 499.890309][T31360] __schedule+0x877/0x990 [ 499.890346][T31360] schedule+0x55/0xc0 [ 499.890378][T31360] schedule_preempt_disabled+0x10/0x20 [ 499.890408][T31360] __mutex_lock+0x1f5/0x970 [ 499.890431][T31360] __mutex_lock_slowpath+0xa/0x10 [ 499.890516][T31360] mutex_lock+0x2d/0x40 [ 499.890533][T31360] rtnl_lock+0x15/0x20 [ 499.890574][T31360] __tun_chr_ioctl+0x25d/0x1800 [ 499.890598][T31360] tun_chr_ioctl+0x27/0x30 [ 499.890613][T31360] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 499.890630][T31360] __se_sys_ioctl+0xc9/0x140 [ 499.890726][T31360] __x64_sys_ioctl+0x43/0x50 [ 499.890747][T31360] x64_sys_call+0x1690/0x2dc0 [ 499.890815][T31360] do_syscall_64+0xc9/0x1c0 [ 499.890908][T31360] ? clear_bhb_loop+0x55/0xb0 [ 499.890931][T31360] ? clear_bhb_loop+0x55/0xb0 [ 499.890960][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.890983][T31360] RIP: 0033:0x7fbd5625cde9 [ 499.891016][T31360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.891030][T31360] RSP: 002b:00007fbd548a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.891046][T31360] RAX: ffffffffffffffda RBX: 00007fbd56476080 RCX: 00007fbd5625cde9 [ 499.891056][T31360] RDX: 0000400000000100 RSI: 00000000400454d9 RDI: 0000000000000005 [ 499.891067][T31360] RBP: 00007fbd548a6090 R08: 0000000000000000 R09: 0000000000000000 [ 499.891077][T31360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.891087][T31360] R13: 0000000000000001 R14: 00007fbd56476080 R15: 00007fff412953e8 [ 499.891120][T31360] [ 500.330858][T31370] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 500.358920][ T29] audit: type=1326 audit(500.393:28760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.9.10924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5625cde9 code=0x7ffc0000 [ 500.368230][T31374] loop9: detected capacity change from 0 to 2048 [ 500.382174][ T29] audit: type=1326 audit(500.393:28761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31373 comm="syz.9.10924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5625cde9 code=0x7ffc0000 [ 500.413579][T31368] syzkaller0: entered promiscuous mode [ 500.419134][T31368] syzkaller0: entered allmulticast mode [ 500.468817][T31374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.508878][T31374] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 500.544063][T31374] EXT4-fs (loop9): Remounting filesystem read-only [ 500.626336][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.650601][T31389] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 500.679538][T31397] loop6: detected capacity change from 0 to 128 [ 500.780354][T31406] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 500.780354][T31406] program syz.5.10936 not setting count and/or reply_len properly [ 500.834508][T31408] pim6reg1: entered promiscuous mode [ 500.839891][T31408] pim6reg1: entered allmulticast mode [ 501.024108][T31426] loop6: detected capacity change from 0 to 128 [ 501.186634][T31445] loop8: detected capacity change from 0 to 128 [ 501.399797][T31450] loop8: detected capacity change from 0 to 128 [ 501.611283][T31457] loop9: detected capacity change from 0 to 128 [ 501.840914][T31467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10962'. [ 502.212642][T31487] loop8: detected capacity change from 0 to 128 [ 502.242390][T31489] netlink: 'syz.8.10970': attribute type 2 has an invalid length. [ 502.250310][T31489] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10970'. [ 502.277020][T31491] tmpfs: Bad value for 'mpol' [ 502.530563][T31493] lo speed is unknown, defaulting to 1000 [ 502.625883][ T3371] IPVS: starting estimator thread 0... [ 502.715942][T31494] IPVS: using max 2304 ests per chain, 115200 per kthread [ 502.724106][T17366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.928164][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 502.928183][ T29] audit: type=1326 audit(502.963:28868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31501 comm="syz.0.10975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 502.963066][ T29] audit: type=1326 audit(502.963:28869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31501 comm="syz.0.10975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 502.986239][ T29] audit: type=1326 audit(502.963:28870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31501 comm="syz.0.10975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 503.009465][ T29] audit: type=1326 audit(502.963:28871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31501 comm="syz.0.10975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 503.032698][ T29] audit: type=1326 audit(502.963:28872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31501 comm="syz.0.10975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f579edacde9 code=0x0 [ 503.056957][ T29] audit: type=1400 audit(503.093:28873): avc: denied { setopt } for pid=31501 comm="syz.0.10975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.204565][T31518] loop9: detected capacity change from 0 to 128 [ 503.228281][T31520] hub 9-0:1.0: USB hub found [ 503.233955][T31520] hub 9-0:1.0: 8 ports detected [ 503.241506][T31517] lo speed is unknown, defaulting to 1000 [ 503.248696][T31520] binfmt_misc: register: failed to install interpreter file ./file2 [ 503.259225][T31520] loop8: detected capacity change from 0 to 128 [ 503.310194][T31525] loop9: detected capacity change from 0 to 128 [ 503.332523][ T29] audit: type=1400 audit(503.363:28874): avc: denied { ioctl } for pid=31526 comm="syz.8.10985" path="socket:[110562]" dev="sockfs" ino=110562 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 503.345908][T31529] lo speed is unknown, defaulting to 1000 [ 503.357399][ T29] audit: type=1400 audit(503.363:28875): avc: denied { read } for pid=31526 comm="syz.8.10985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 503.419814][T31529] loop8: detected capacity change from 0 to 1024 [ 503.430178][T31529] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 503.451499][T31529] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 503.459935][T31529] EXT4-fs (loop8): orphan cleanup on readonly fs [ 503.482719][T31529] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 503.493540][T31529] EXT4-fs (loop8): Remounting filesystem read-only [ 503.500666][T31529] Quota error (device loop8): write_blk: dquota write failed [ 503.508187][T31529] Quota error (device loop8): write_blk: dquota write failed [ 503.516588][T31529] EXT4-fs (loop8): 1 orphan inode deleted [ 503.522856][T31529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 503.534949][T31529] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 503.545638][T31529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.639082][T31539] pim6reg1: entered promiscuous mode [ 503.644496][T31539] pim6reg1: entered allmulticast mode [ 503.782351][T31551] loop9: detected capacity change from 0 to 512 [ 503.791572][T31551] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 503.830919][T31551] EXT4-fs (loop9): 1 truncate cleaned up [ 503.837126][T31551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.854210][T31553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10995'. [ 503.863207][T31558] lo speed is unknown, defaulting to 1000 [ 503.919472][T31565] hub 9-0:1.0: USB hub found [ 503.924231][T31565] hub 9-0:1.0: 8 ports detected [ 503.942880][T31565] binfmt_misc: register: failed to install interpreter file ./file2 [ 504.010534][T31571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11000'. [ 504.020505][T31571] IPVS: Error joining to the multicast group [ 504.394533][T31591] loop6: detected capacity change from 0 to 1024 [ 504.407865][T31591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.424662][T31591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11009'. [ 504.564762][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.628936][T31599] loop6: detected capacity change from 0 to 1024 [ 504.629899][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.659099][T31599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.685522][T31605] loop9: detected capacity change from 0 to 512 [ 504.692305][T31605] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 504.701950][T31599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11012'. [ 504.729651][T31609] loop9: detected capacity change from 0 to 128 [ 504.739911][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.050515][T31627] pim6reg1: entered promiscuous mode [ 505.055894][T31627] pim6reg1: entered allmulticast mode [ 505.114277][T31633] pim6reg1: entered promiscuous mode [ 505.119950][T31633] pim6reg1: entered allmulticast mode [ 505.647926][T31651] loop6: detected capacity change from 0 to 1024 [ 505.667283][T31651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.684722][T31651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11031'. [ 505.747304][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.871222][T31662] lo speed is unknown, defaulting to 1000 [ 505.919930][T31664] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11034'. [ 506.001668][T31682] pim6reg1: entered promiscuous mode [ 506.007065][T31682] pim6reg1: entered allmulticast mode [ 506.034300][T31686] netlink: 'syz.8.11040': attribute type 2 has an invalid length. [ 506.042200][T31686] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11040'. [ 506.071257][T31690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11042'. [ 506.249629][T31702] FAULT_INJECTION: forcing a failure. [ 506.249629][T31702] name failslab, interval 1, probability 0, space 0, times 0 [ 506.249839][T31703] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.11046'. [ 506.262339][T31702] CPU: 1 UID: 0 PID: 31702 Comm: syz.6.11047 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 506.262436][T31702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 506.262454][T31702] Call Trace: [ 506.262463][T31702] [ 506.262473][T31702] dump_stack_lvl+0xf2/0x150 [ 506.262584][T31702] dump_stack+0x15/0x1a [ 506.262612][T31702] should_fail_ex+0x24a/0x260 [ 506.262650][T31702] should_failslab+0x8f/0xb0 [ 506.262800][T31702] kmem_cache_alloc_noprof+0x52/0x320 [ 506.262897][T31702] ? __anon_vma_prepare+0x73/0x310 [ 506.262938][T31702] __anon_vma_prepare+0x73/0x310 [ 506.263043][T31702] ? __vmf_anon_prepare+0x70/0x110 [ 506.263102][T31702] __vmf_anon_prepare+0x95/0x110 [ 506.263192][T31702] hugetlb_fault+0x5e4/0x1a70 [ 506.263241][T31702] handle_mm_fault+0x18f9/0x2ac0 [ 506.263359][T31702] ? __rcu_read_unlock+0x4e/0x70 [ 506.263389][T31702] ? mt_find+0x72a/0x890 [ 506.263429][T31702] ? down_read+0x171/0x4b0 [ 506.263493][T31702] ? hugetlb_vma_unlock_read+0x8c/0xb0 [ 506.263520][T31702] __get_user_pages+0xf6a/0x2350 [ 506.263551][T31702] ? handle_mm_fault+0x1723/0x2ac0 [ 506.263607][T31702] __gup_longterm_locked+0x932/0xf90 [ 506.263700][T31702] ? down_read_killable+0x172/0x6b0 [ 506.263773][T31702] ? should_fail_ex+0xd7/0x260 [ 506.263810][T31702] ? down_read+0x171/0x4b0 [ 506.263844][T31702] pin_user_pages_remote+0x7f/0xb0 [ 506.263881][T31702] process_vm_rw+0x4bc/0x890 [ 506.263989][T31702] ? ksys_write+0x176/0x1b0 [ 506.264030][T31702] __x64_sys_process_vm_readv+0x7a/0x90 [ 506.264062][T31702] x64_sys_call+0xb24/0x2dc0 [ 506.264116][T31702] do_syscall_64+0xc9/0x1c0 [ 506.264153][T31702] ? clear_bhb_loop+0x55/0xb0 [ 506.264189][T31702] ? clear_bhb_loop+0x55/0xb0 [ 506.264305][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.264341][T31702] RIP: 0033:0x7fb3d8f2cde9 [ 506.264359][T31702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.264383][T31702] RSP: 002b:00007fb3d7597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 506.264408][T31702] RAX: ffffffffffffffda RBX: 00007fb3d9145fa0 RCX: 00007fb3d8f2cde9 [ 506.264502][T31702] RDX: 0000000000000002 RSI: 0000400000008400 RDI: 00000000000003be [ 506.264518][T31702] RBP: 00007fb3d7597090 R08: 0000000000000286 R09: 0000000000000000 [ 506.264534][T31702] R10: 0000400000008640 R11: 0000000000000246 R12: 0000000000000001 [ 506.264549][T31702] R13: 0000000000000000 R14: 00007fb3d9145fa0 R15: 00007fff24366f58 [ 506.264573][T31702] [ 506.316631][T31705] tmpfs: Unknown parameter 'hug' [ 506.334517][T31700] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.11046'. [ 506.468954][T31715] loop8: detected capacity change from 0 to 512 [ 506.550441][T31715] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 506.563299][T31715] EXT4-fs (loop8): 1 truncate cleaned up [ 506.569359][T31715] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.678779][T31722] netlink: 'syz.5.11053': attribute type 2 has an invalid length. [ 506.710055][T31727] pim6reg1: entered promiscuous mode [ 506.715609][T31727] pim6reg1: entered allmulticast mode [ 506.744560][T31732] loop9: detected capacity change from 0 to 1024 [ 506.778735][T31732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.869577][T31741] FAULT_INJECTION: forcing a failure. [ 506.869577][T31741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.882752][T31741] CPU: 0 UID: 0 PID: 31741 Comm: syz.5.11060 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 506.882783][T31741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 506.882798][T31741] Call Trace: [ 506.882806][T31741] [ 506.882895][T31741] dump_stack_lvl+0xf2/0x150 [ 506.882929][T31741] dump_stack+0x15/0x1a [ 506.882956][T31741] should_fail_ex+0x24a/0x260 [ 506.883039][T31741] should_fail+0xb/0x10 [ 506.883071][T31741] should_fail_usercopy+0x1a/0x20 [ 506.883170][T31741] _copy_from_user+0x1c/0xa0 [ 506.883212][T31741] kstrtouint_from_user+0x76/0xe0 [ 506.883248][T31741] ? 0xffffffff81000000 [ 506.883265][T31741] ? selinux_file_permission+0x22a/0x360 [ 506.883326][T31741] proc_fail_nth_write+0x4f/0x150 [ 506.883357][T31741] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 506.883394][T31741] vfs_write+0x27d/0x920 [ 506.883476][T31741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.883506][T31741] ? __fget_files+0x17c/0x1c0 [ 506.883588][T31741] ksys_write+0xe8/0x1b0 [ 506.883617][T31741] __x64_sys_write+0x42/0x50 [ 506.883649][T31741] x64_sys_call+0x287e/0x2dc0 [ 506.883750][T31741] do_syscall_64+0xc9/0x1c0 [ 506.883782][T31741] ? clear_bhb_loop+0x55/0xb0 [ 506.883894][T31741] ? clear_bhb_loop+0x55/0xb0 [ 506.883969][T31741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.884120][T31741] RIP: 0033:0x7f4829bfb89f [ 506.884135][T31741] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 506.884157][T31741] RSP: 002b:00007f4828267030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 506.884188][T31741] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4829bfb89f [ 506.884200][T31741] RDX: 0000000000000001 RSI: 00007f48282670a0 RDI: 0000000000000008 [ 506.884212][T31741] RBP: 00007f4828267090 R08: 0000000000000000 R09: 0000000000000000 [ 506.884224][T31741] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 506.884236][T31741] R13: 0000000000000000 R14: 00007f4829e15fa0 R15: 00007ffd9c88fda8 [ 506.884258][T31741] [ 507.127477][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.358131][T27663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.380564][T31765] loop9: detected capacity change from 0 to 128 [ 507.444814][T31768] loop8: detected capacity change from 0 to 1024 [ 507.453052][T31766] lo speed is unknown, defaulting to 1000 [ 507.456822][T31770] netlink: 'syz.6.11073': attribute type 2 has an invalid length. [ 507.484382][T31768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.712137][T31777] syzkaller0: entered promiscuous mode [ 507.717703][T31777] syzkaller0: entered allmulticast mode [ 507.820353][T27663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.914674][T31803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.922291][T31803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.941309][T31803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.949018][T31803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.206836][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 508.206863][ T29] audit: type=1400 audit(508.203:29027): avc: denied { setopt } for pid=31804 comm="syz.8.11084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 508.331082][T31808] netlink: 'syz.0.11086': attribute type 2 has an invalid length. [ 508.419214][T31814] lo speed is unknown, defaulting to 1000 [ 508.480631][T17369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.618087][T31836] loop9: detected capacity change from 0 to 1024 [ 508.627430][T31836] EXT4-fs: Ignoring removed i_version option [ 508.637872][T31836] EXT4-fs (loop9): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 508.663972][T31830] syzkaller0: entered promiscuous mode [ 508.669715][T31830] syzkaller0: entered allmulticast mode [ 508.704278][T31836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.717226][T31836] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.753133][ T29] audit: type=1400 audit(508.783:29028): avc: denied { connect } for pid=31842 comm="syz.0.11098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 508.776838][T31850] lo speed is unknown, defaulting to 1000 [ 508.833749][ T29] audit: type=1400 audit(508.863:29029): avc: denied { shutdown } for pid=31855 comm="syz.0.11101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 508.883205][ T29] audit: type=1326 audit(508.863:29030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.0.11101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 508.906417][ T29] audit: type=1326 audit(508.863:29031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.0.11101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 508.929497][ T29] audit: type=1326 audit(508.893:29032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.0.11101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 508.952578][ T29] audit: type=1326 audit(508.893:29033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.0.11101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 508.975778][ T29] audit: type=1326 audit(508.893:29034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.0.11101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 508.999008][ T29] audit: type=1326 audit(508.893:29035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.0.11101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 509.022134][ T29] audit: type=1326 audit(508.893:29036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31855 comm="syz.0.11101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579edacde9 code=0x7ffc0000 [ 509.138740][T31867] __nla_validate_parse: 5 callbacks suppressed [ 509.138760][T31867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11105'. [ 509.414111][T31877] syzkaller0: entered promiscuous mode [ 509.419829][T31877] syzkaller0: entered allmulticast mode [ 509.615606][T31889] lo speed is unknown, defaulting to 1000 [ 510.154304][T31920] loop9: detected capacity change from 0 to 128 [ 510.261359][T31937] loop9: detected capacity change from 0 to 128 [ 510.280945][T31937] vfat: Unknown parameter 'uni_xxBlate' [ 510.305861][T31937] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11124'. [ 510.455075][T31951] syzkaller0: entered promiscuous mode [ 510.460663][T31951] syzkaller0: entered allmulticast mode [ 510.472065][T31965] loop6: detected capacity change from 0 to 1024 [ 510.480132][T31965] EXT4-fs: Ignoring removed i_version option [ 510.489949][T31965] EXT4-fs (loop6): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 510.513026][T31965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.582481][T31965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.656829][T31996] lo speed is unknown, defaulting to 1000 [ 510.703047][T32001] netlink: 'syz.8.11131': attribute type 1 has an invalid length. [ 510.711023][T32001] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11131'. [ 510.772632][T32008] loop9: detected capacity change from 0 to 128 [ 510.803050][T32010] pim6reg1: entered promiscuous mode [ 510.808519][T32010] pim6reg1: entered allmulticast mode [ 510.933037][T32018] loop8: detected capacity change from 0 to 512 [ 510.940963][T32018] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 510.949839][T32018] EXT4-fs (loop8): orphan cleanup on readonly fs [ 510.957267][T32018] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11138: invalid indirect mapped block 256 (level 2) [ 510.971437][T32018] EXT4-fs (loop8): 2 truncates cleaned up [ 510.977890][T32018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 510.998425][T32018] netlink: 'syz.8.11138': attribute type 29 has an invalid length. [ 511.022379][T27663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.048923][T32021] syzkaller0: entered promiscuous mode [ 511.054424][T32021] syzkaller0: entered allmulticast mode [ 511.086053][T32026] lo speed is unknown, defaulting to 1000 [ 511.179424][T32030] loop8: detected capacity change from 0 to 8192 [ 511.204981][T32030] vfat: Unknown parameter 'asymmetric' [ 511.251891][T32030] lo speed is unknown, defaulting to 1000 [ 511.347805][T32030] lo speed is unknown, defaulting to 1000 [ 511.358055][T32030] lo speed is unknown, defaulting to 1000 [ 511.363983][T32030] lo speed is unknown, defaulting to 1000 [ 511.382175][T32030] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 511.396780][T32030] lo speed is unknown, defaulting to 1000 [ 511.408214][T32030] lo speed is unknown, defaulting to 1000 [ 511.414504][T32030] lo speed is unknown, defaulting to 1000 [ 511.422876][T32030] lo speed is unknown, defaulting to 1000 [ 511.460017][T32030] lo speed is unknown, defaulting to 1000 [ 511.486787][T32050] GUP no longer grows the stack in syz.5.11151 (32050): 400000004000-400000009000 (400000002000) [ 511.497394][T32050] CPU: 0 UID: 0 PID: 32050 Comm: syz.5.11151 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 511.497484][T32050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 511.497512][T32050] Call Trace: [ 511.497520][T32050] [ 511.497534][T32050] dump_stack_lvl+0xf2/0x150 [ 511.497586][T32050] dump_stack+0x15/0x1a [ 511.497613][T32050] __get_user_pages+0x1de5/0x2350 [ 511.497720][T32050] ? __rcu_read_unlock+0x4e/0x70 [ 511.497748][T32050] get_user_pages_remote+0x1df/0x790 [ 511.497783][T32050] __access_remote_vm+0x15b/0x580 [ 511.497824][T32050] access_remote_vm+0x34/0x50 [ 511.497994][T32050] proc_pid_cmdline_read+0x3e5/0x6b0 [ 511.498029][T32050] vfs_readv+0x3e2/0x660 [ 511.498074][T32050] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 511.498112][T32050] __x64_sys_preadv+0xf4/0x1c0 [ 511.498171][T32050] x64_sys_call+0x2680/0x2dc0 [ 511.498198][T32050] do_syscall_64+0xc9/0x1c0 [ 511.498226][T32050] ? clear_bhb_loop+0x55/0xb0 [ 511.498306][T32050] ? clear_bhb_loop+0x55/0xb0 [ 511.498336][T32050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.498392][T32050] RIP: 0033:0x7f4829bfcde9 [ 511.498407][T32050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.498429][T32050] RSP: 002b:00007f4828267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 511.498448][T32050] RAX: ffffffffffffffda RBX: 00007f4829e15fa0 RCX: 00007f4829bfcde9 [ 511.498530][T32050] RDX: 0000000000000001 RSI: 0000400000000040 RDI: 0000000000000006 [ 511.498545][T32050] RBP: 00007f4829c7e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 511.498559][T32050] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 511.498574][T32050] R13: 0000000000000000 R14: 00007f4829e15fa0 R15: 00007ffd9c88fda8 [ 511.498597][T32050] [ 511.508860][T32030] lo speed is unknown, defaulting to 1000 [ 511.553757][T32050] netlink: 'syz.5.11151': attribute type 13 has an invalid length. [ 511.558543][T32030] lo speed is unknown, defaulting to 1000 [ 511.764007][T32050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.779525][T32030] lo speed is unknown, defaulting to 1000 [ 511.786437][T32030] lo speed is unknown, defaulting to 1000 [ 511.840617][T32059] syzkaller0: entered promiscuous mode [ 511.846225][T32059] syzkaller0: entered allmulticast mode [ 511.853340][T32030] lo speed is unknown, defaulting to 1000 [ 511.860049][T32030] lo speed is unknown, defaulting to 1000 [ 511.866126][T32030] lo speed is unknown, defaulting to 1000 [ 511.872275][T32030] lo speed is unknown, defaulting to 1000 [ 511.885705][T32030] lo speed is unknown, defaulting to 1000 [ 511.914344][T32062] pim6reg1: entered promiscuous mode [ 511.919824][T32062] pim6reg1: entered allmulticast mode [ 511.944871][T32064] loop6: detected capacity change from 0 to 1024 [ 511.977437][T32064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.049203][T32073] pim6reg1: entered promiscuous mode [ 512.054588][T32073] pim6reg1: entered allmulticast mode [ 512.062940][T32078] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11161'. [ 512.072563][T32080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11155'. [ 512.156776][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.166545][T32086] netlink: 'syz.9.11164': attribute type 46 has an invalid length. [ 512.182253][T32086] loop9: detected capacity change from 0 to 512 [ 512.189825][T32086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 512.207217][T32086] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.277428][T32098] syzkaller0: entered promiscuous mode [ 512.283034][T32098] syzkaller0: entered allmulticast mode [ 512.358735][T32102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11169'. [ 512.368114][T32102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11169'. [ 512.404363][T32102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11169'. [ 512.420182][T32102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11169'. [ 512.473833][T32102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11169'. [ 512.475983][T32115] pim6reg1: entered promiscuous mode [ 512.488304][T32115] pim6reg1: entered allmulticast mode [ 512.841862][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.104777][T32137] lo speed is unknown, defaulting to 1000 [ 513.151043][T32138] ip6_vti0: entered allmulticast mode [ 513.341607][T32146] pim6reg1: entered promiscuous mode [ 513.347100][T32146] pim6reg1: entered allmulticast mode [ 513.381469][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 513.381486][ T29] audit: type=1326 audit(513.413:29251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32147 comm="syz.6.11186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 513.411093][ T29] audit: type=1326 audit(513.413:29252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32147 comm="syz.6.11186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 513.434388][ T29] audit: type=1326 audit(513.413:29253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32147 comm="syz.6.11186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 513.457559][ T29] audit: type=1326 audit(513.413:29254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32147 comm="syz.6.11186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 513.480745][ T29] audit: type=1326 audit(513.413:29255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32147 comm="syz.6.11186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 513.503867][ T29] audit: type=1326 audit(513.413:29256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32147 comm="syz.6.11186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 513.527078][ T29] audit: type=1326 audit(513.413:29257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32147 comm="syz.6.11186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 513.543262][T32152] loop6: detected capacity change from 0 to 1024 [ 513.550301][ T29] audit: type=1326 audit(513.413:29258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32147 comm="syz.6.11186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8f2cde9 code=0x7ffc0000 [ 513.597894][T32160] FAULT_INJECTION: forcing a failure. [ 513.597894][T32160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.611019][T32160] CPU: 1 UID: 0 PID: 32160 Comm: syz.0.11189 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 513.611051][T32160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 513.611142][T32160] Call Trace: [ 513.611151][T32160] [ 513.611159][T32160] dump_stack_lvl+0xf2/0x150 [ 513.611195][T32160] dump_stack+0x15/0x1a [ 513.611221][T32160] should_fail_ex+0x24a/0x260 [ 513.611258][T32160] should_fail+0xb/0x10 [ 513.611346][T32160] should_fail_usercopy+0x1a/0x20 [ 513.611378][T32160] _copy_from_user+0x1c/0xa0 [ 513.611420][T32160] move_addr_to_kernel+0x82/0x120 [ 513.611468][T32160] copy_msghdr_from_user+0x271/0x2a0 [ 513.611511][T32160] __sys_sendmsg+0x13e/0x230 [ 513.611581][T32160] __x64_sys_sendmsg+0x46/0x50 [ 513.611610][T32160] x64_sys_call+0x2734/0x2dc0 [ 513.611643][T32160] do_syscall_64+0xc9/0x1c0 [ 513.611678][T32160] ? clear_bhb_loop+0x55/0xb0 [ 513.611746][T32160] ? clear_bhb_loop+0x55/0xb0 [ 513.611779][T32160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.611812][T32160] RIP: 0033:0x7f579edacde9 [ 513.611831][T32160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.611934][T32160] RSP: 002b:00007f579d411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.611958][T32160] RAX: ffffffffffffffda RBX: 00007f579efc5fa0 RCX: 00007f579edacde9 [ 513.611973][T32160] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 513.611988][T32160] RBP: 00007f579d411090 R08: 0000000000000000 R09: 0000000000000000 [ 513.612003][T32160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.612017][T32160] R13: 0000000000000000 R14: 00007f579efc5fa0 R15: 00007ffe3470ada8 [ 513.612055][T32160] [ 513.612959][T32152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.659903][T32165] loop9: detected capacity change from 0 to 512 [ 513.754514][T32169] lo speed is unknown, defaulting to 1000 [ 513.764744][T32165] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 513.829081][T32165] EXT4-fs (loop9): 1 truncate cleaned up [ 513.835285][T32165] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.861940][T32173] FAULT_INJECTION: forcing a failure. [ 513.861940][T32173] name failslab, interval 1, probability 0, space 0, times 0 [ 513.874661][T32173] CPU: 0 UID: 0 PID: 32173 Comm: syz.0.11193 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 513.874692][T32173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 513.874707][T32173] Call Trace: [ 513.874715][T32173] [ 513.874783][T32173] dump_stack_lvl+0xf2/0x150 [ 513.874818][T32173] dump_stack+0x15/0x1a [ 513.874843][T32173] should_fail_ex+0x24a/0x260 [ 513.874875][T32173] should_failslab+0x8f/0xb0 [ 513.874911][T32173] kmem_cache_alloc_noprof+0x52/0x320 [ 513.874939][T32173] ? getname_flags+0x81/0x3b0 [ 513.874973][T32173] getname_flags+0x81/0x3b0 [ 513.875007][T32173] getname+0x17/0x20 [ 513.875144][T32173] do_sys_openat2+0x67/0x120 [ 513.875192][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.875170][T32173] __x64_sys_creat+0x66/0x90 [ 513.875224][T32173] x64_sys_call+0x1084/0x2dc0 [ 513.875263][T32173] do_syscall_64+0xc9/0x1c0 [ 513.875301][T32173] ? clear_bhb_loop+0x55/0xb0 [ 513.875347][T32173] ? clear_bhb_loop+0x55/0xb0 [ 513.875431][T32173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.875466][T32173] RIP: 0033:0x7f579edacde9 [ 513.875486][T32173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.875511][T32173] RSP: 002b:00007f579d411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 513.875535][T32173] RAX: ffffffffffffffda RBX: 00007f579efc5fa0 RCX: 00007f579edacde9 [ 513.875573][T32173] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000400000000380 [ 513.875600][T32173] RBP: 00007f579d411090 R08: 0000000000000000 R09: 0000000000000000 [ 513.875616][T32173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.875631][T32173] R13: 0000000000000000 R14: 00007f579efc5fa0 R15: 00007ffe3470ada8 [ 513.875657][T32173] [ 513.950818][T32177] netlink: 'syz.5.11196': attribute type 2 has an invalid length. [ 514.090146][ T29] audit: type=1326 audit(514.123:29259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32180 comm="syz.5.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 514.113618][ T29] audit: type=1326 audit(514.123:29260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32180 comm="syz.5.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 514.191758][T32189] pim6reg1: entered promiscuous mode [ 514.197302][T32189] pim6reg1: entered allmulticast mode [ 514.247587][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.275768][T32191] loop6: detected capacity change from 0 to 128 [ 514.282508][T32191] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 514.294575][T32191] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 514.327925][T17362] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 514.354401][T32195] lo speed is unknown, defaulting to 1000 [ 514.383840][T32197] loop8: detected capacity change from 0 to 1024 [ 514.394332][T32195] __nla_validate_parse: 7 callbacks suppressed [ 514.394350][T32195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11204'. [ 514.396079][T32199] netlink: 'syz.0.11205': attribute type 2 has an invalid length. [ 514.417381][T32199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11205'. [ 514.419233][T32197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.469595][T32197] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11206'. [ 514.504779][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.528448][T32209] netlink: 'syz.9.11209': attribute type 2 has an invalid length. [ 514.536446][T32209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11209'. [ 514.577378][T27663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.622246][T32217] loop8: detected capacity change from 0 to 128 [ 514.642190][T32213] syzkaller0: entered promiscuous mode [ 514.647945][T32213] syzkaller0: entered allmulticast mode [ 514.733356][T32219] syzkaller0: entered promiscuous mode [ 514.739210][T32219] syzkaller0: entered allmulticast mode [ 514.785078][T32223] loop8: detected capacity change from 0 to 128 [ 514.823784][T32225] lo speed is unknown, defaulting to 1000 [ 514.844462][T32227] netlink: 'syz.9.11218': attribute type 2 has an invalid length. [ 514.852397][T32227] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11218'. [ 514.879717][T32228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11217'. [ 514.889420][T32228] ip6_vti0: entered promiscuous mode [ 514.894846][T32228] ip6_vti0: entered allmulticast mode [ 514.930293][T32232] lo speed is unknown, defaulting to 1000 [ 514.971061][T32237] loop8: detected capacity change from 0 to 1024 [ 515.008004][T32237] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.052099][T32237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11222'. [ 515.125299][T32247] loop9: detected capacity change from 0 to 128 [ 515.136955][T27663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.230537][T32251] lo speed is unknown, defaulting to 1000 [ 515.342121][T32255] loop6: detected capacity change from 0 to 128 [ 515.361894][T32253] syzkaller0: entered promiscuous mode [ 515.367536][T32253] syzkaller0: entered allmulticast mode [ 515.396988][T32260] netlink: 'syz.9.11230': attribute type 2 has an invalid length. [ 515.403262][T32262] FAULT_INJECTION: forcing a failure. [ 515.403262][T32262] name failslab, interval 1, probability 0, space 0, times 0 [ 515.404838][T32260] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11230'. [ 515.417559][T32262] CPU: 1 UID: 0 PID: 32262 Comm: syz.6.11232 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 515.417597][T32262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 515.417614][T32262] Call Trace: [ 515.417623][T32262] [ 515.417633][T32262] dump_stack_lvl+0xf2/0x150 [ 515.417671][T32262] dump_stack+0x15/0x1a [ 515.417699][T32262] should_fail_ex+0x24a/0x260 [ 515.417751][T32262] should_failslab+0x8f/0xb0 [ 515.417860][T32262] kmem_cache_alloc_noprof+0x52/0x320 [ 515.417887][T32262] ? copy_fs_struct+0x31/0x110 [ 515.417919][T32262] ? __fget_files+0x17c/0x1c0 [ 515.417962][T32262] copy_fs_struct+0x31/0x110 [ 515.418018][T32262] ksys_unshare+0x2c0/0x6e0 [ 515.418058][T32262] ? ksys_write+0x176/0x1b0 [ 515.418096][T32262] __x64_sys_unshare+0x1f/0x30 [ 515.418156][T32262] x64_sys_call+0x1a3e/0x2dc0 [ 515.418190][T32262] do_syscall_64+0xc9/0x1c0 [ 515.418235][T32262] ? clear_bhb_loop+0x55/0xb0 [ 515.418271][T32262] ? clear_bhb_loop+0x55/0xb0 [ 515.418395][T32262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.418430][T32262] RIP: 0033:0x7fb3d8f2cde9 [ 515.418451][T32262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.418474][T32262] RSP: 002b:00007fb3d7597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 515.418498][T32262] RAX: ffffffffffffffda RBX: 00007fb3d9145fa0 RCX: 00007fb3d8f2cde9 [ 515.418514][T32262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 515.418529][T32262] RBP: 00007fb3d7597090 R08: 0000000000000000 R09: 0000000000000000 [ 515.418583][T32262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.418598][T32262] R13: 0000000000000000 R14: 00007fb3d9145fa0 R15: 00007fff24366f58 [ 515.418625][T32262] [ 515.524412][T32268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11231'. [ 515.645996][T32259] lo speed is unknown, defaulting to 1000 [ 515.651064][T32272] loop6: detected capacity change from 0 to 1024 [ 515.681365][T32272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.704833][T32278] loop8: detected capacity change from 0 to 1024 [ 515.711861][T32278] EXT4-fs: Ignoring removed i_version option [ 515.724190][T32278] EXT4-fs (loop8): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 515.778024][T32278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.793235][T32278] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.794785][T32288] block device autoloading is deprecated and will be removed. [ 515.810475][T32272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11236'. [ 515.811314][T32288] syz.9.11240: attempt to access beyond end of device [ 515.811314][T32288] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 515.859036][T32288] bridge0: port 3(batadv1) entered blocking state [ 515.865603][T32288] bridge0: port 3(batadv1) entered disabled state [ 515.872199][T32288] batadv1: entered allmulticast mode [ 515.880412][T32288] batadv1: entered promiscuous mode [ 515.892163][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.951514][T32295] loop9: detected capacity change from 0 to 1024 [ 515.961741][T32295] EXT4-fs: Ignoring removed i_version option [ 515.968905][T32295] EXT4-fs (loop9): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 515.983290][T32298] netlink: 'syz.6.11244': attribute type 2 has an invalid length. [ 515.993054][T32295] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.006588][T32295] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.116973][T32306] syzkaller0: entered promiscuous mode [ 516.122527][T32306] syzkaller0: entered allmulticast mode [ 516.206115][T32308] pim6reg1: entered promiscuous mode [ 516.211591][T32308] pim6reg1: entered allmulticast mode [ 516.303139][T32310] lo speed is unknown, defaulting to 1000 [ 516.365671][ T8697] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 516.375004][ T8697] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 516.476916][T32316] loop6: detected capacity change from 0 to 1024 [ 516.498281][T32316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.592297][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.635873][T32331] netlink: 'syz.6.11256': attribute type 2 has an invalid length. [ 516.649315][T32334] loop0: detected capacity change from 0 to 128 [ 516.668932][T32337] pim6reg1: entered promiscuous mode [ 516.674293][T32337] pim6reg1: entered allmulticast mode [ 516.694898][T32339] lo speed is unknown, defaulting to 1000 [ 516.784663][T32343] loop6: detected capacity change from 0 to 1024 [ 516.794053][T32343] EXT4-fs: Ignoring removed i_version option [ 516.804629][T32343] EXT4-fs (loop6): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 516.834558][T32346] loop0: detected capacity change from 0 to 512 [ 516.869933][T32346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.916906][T32355] loop9: detected capacity change from 0 to 1024 [ 516.941778][T32343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.974224][T32355] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.005655][T32343] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.472030][T32368] netlink: 'syz.8.11271': attribute type 2 has an invalid length. [ 517.542084][T32372] pim6reg1: entered promiscuous mode [ 517.547858][T32372] pim6reg1: entered allmulticast mode [ 517.645189][T32376] loop6: detected capacity change from 0 to 128 [ 517.691808][T32378] loop6: detected capacity change from 0 to 1024 [ 517.701143][T32378] EXT4-fs: Ignoring removed i_version option [ 517.709674][T32378] EXT4-fs (loop6): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 517.729041][T32378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.747810][T32378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.808886][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.899953][T32345] syz.0.11264 (32345) used greatest stack depth: 8984 bytes left [ 517.919609][T26362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.969177][T32394] loop9: detected capacity change from 0 to 512 [ 517.988515][T32394] EXT4-fs (loop9): orphan cleanup on readonly fs [ 517.995996][T32394] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11278: bg 0: block 248: padding at end of block bitmap is not set [ 518.010951][T32394] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.11278: Failed to acquire dquot type 1 [ 518.023155][T32394] EXT4-fs (loop9): 1 truncate cleaned up [ 518.030339][T32394] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.062781][T28211] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.103402][T32403] loop9: detected capacity change from 0 to 1024 [ 518.116161][T32403] EXT4-fs: Ignoring removed i_version option [ 518.123393][T32403] EXT4-fs (loop9): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 518.158471][T32403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.189943][T32403] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.400097][T32416] pim6reg1: entered promiscuous mode [ 518.405620][T32416] pim6reg1: entered allmulticast mode [ 518.591233][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 518.591251][ T29] audit: type=1326 audit(518.623:29497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 518.641393][T32423] FAULT_INJECTION: forcing a failure. [ 518.641393][T32423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.654580][T32423] CPU: 0 UID: 60928 PID: 32423 Comm: syz.6.11291 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 518.654607][T32423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 518.654619][T32423] Call Trace: [ 518.654665][T32423] [ 518.654675][T32423] dump_stack_lvl+0xf2/0x150 [ 518.654754][T32423] dump_stack+0x15/0x1a [ 518.654776][T32423] should_fail_ex+0x24a/0x260 [ 518.654809][T32423] should_fail+0xb/0x10 [ 518.654859][T32423] should_fail_usercopy+0x1a/0x20 [ 518.654899][T32423] _copy_to_user+0x20/0xa0 [ 518.654950][T32423] simple_read_from_buffer+0xa0/0x110 [ 518.654979][T32423] proc_fail_nth_read+0xf9/0x140 [ 518.655089][T32423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 518.655124][T32423] vfs_read+0x19b/0x6f0 [ 518.655199][T32423] ? __rcu_read_unlock+0x4e/0x70 [ 518.655281][T32423] ? __fget_files+0x17c/0x1c0 [ 518.655325][T32423] ksys_read+0xe8/0x1b0 [ 518.655359][T32423] __x64_sys_read+0x42/0x50 [ 518.655387][T32423] x64_sys_call+0x2874/0x2dc0 [ 518.655461][T32423] do_syscall_64+0xc9/0x1c0 [ 518.655498][T32423] ? clear_bhb_loop+0x55/0xb0 [ 518.655581][T32423] ? clear_bhb_loop+0x55/0xb0 [ 518.655611][T32423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.655643][T32423] RIP: 0033:0x7fb3d8f2b7fc [ 518.655667][T32423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 518.655690][T32423] RSP: 002b:00007fb3d7597030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 518.655713][T32423] RAX: ffffffffffffffda RBX: 00007fb3d9145fa0 RCX: 00007fb3d8f2b7fc [ 518.655729][T32423] RDX: 000000000000000f RSI: 00007fb3d75970a0 RDI: 0000000000000005 [ 518.655744][T32423] RBP: 00007fb3d7597090 R08: 0000000000000000 R09: 0000000000000000 [ 518.655759][T32423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.655774][T32423] R13: 0000000000000000 R14: 00007fb3d9145fa0 R15: 00007fff24366f58 [ 518.655798][T32423] [ 518.699370][ T29] audit: type=1326 audit(518.623:29498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 518.872375][ T29] audit: type=1326 audit(518.623:29499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 518.895455][ T29] audit: type=1326 audit(518.623:29500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 518.918909][ T29] audit: type=1326 audit(518.623:29501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 518.942008][ T29] audit: type=1326 audit(518.623:29502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 518.965120][ T29] audit: type=1326 audit(518.623:29503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 518.988205][ T29] audit: type=1326 audit(518.623:29504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 519.011287][ T29] audit: type=1326 audit(518.623:29505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 519.034363][ T29] audit: type=1326 audit(518.623:29506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32422 comm="syz.5.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 519.167984][T32436] lo speed is unknown, defaulting to 1000 [ 519.256253][T32445] pim6reg1: entered promiscuous mode [ 519.261595][T32445] pim6reg1: entered allmulticast mode [ 519.278892][T32449] loop9: detected capacity change from 0 to 1024 [ 519.287458][T32449] EXT4-fs: Ignoring removed i_version option [ 519.293945][T32449] EXT4-fs (loop9): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 519.317285][T32455] loop6: detected capacity change from 0 to 512 [ 519.324475][T32455] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 519.362104][T17369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.383328][T32449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.402518][T32449] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.428899][T32455] EXT4-fs (loop6): 1 truncate cleaned up [ 519.442187][T32455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.472842][T32461] loop8: detected capacity change from 0 to 1024 [ 519.482804][T32461] EXT4-fs: Ignoring removed i_version option [ 519.489578][T32461] EXT4-fs (loop8): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 519.520674][T26841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.533138][T32461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.552430][T32461] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.608600][T32480] lo speed is unknown, defaulting to 1000 [ 519.639608][T32480] __nla_validate_parse: 11 callbacks suppressed [ 519.639624][T32480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11315'. [ 519.818324][T32495] FAULT_INJECTION: forcing a failure. [ 519.818324][T32495] name failslab, interval 1, probability 0, space 0, times 0 [ 519.831049][T32495] CPU: 0 UID: 0 PID: 32495 Comm: syz.5.11319 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 519.831094][T32495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 519.831109][T32495] Call Trace: [ 519.831116][T32495] [ 519.831126][T32495] dump_stack_lvl+0xf2/0x150 [ 519.831160][T32495] dump_stack+0x15/0x1a [ 519.831186][T32495] should_fail_ex+0x24a/0x260 [ 519.831265][T32495] should_failslab+0x8f/0xb0 [ 519.831375][T32495] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 519.831403][T32495] ? __d_alloc+0x3d/0x350 [ 519.831431][T32495] __d_alloc+0x3d/0x350 [ 519.831458][T32495] d_alloc_pseudo+0x1e/0x80 [ 519.831484][T32495] alloc_file_pseudo+0x73/0x160 [ 519.831516][T32495] __shmem_file_setup+0x1bb/0x1f0 [ 519.831561][T32495] shmem_file_setup+0x3b/0x50 [ 519.831605][T32495] __se_sys_memfd_create+0x2e1/0x5a0 [ 519.831637][T32495] __x64_sys_memfd_create+0x31/0x40 [ 519.831666][T32495] x64_sys_call+0x2d4c/0x2dc0 [ 519.831750][T32495] do_syscall_64+0xc9/0x1c0 [ 519.831783][T32495] ? clear_bhb_loop+0x55/0xb0 [ 519.831818][T32495] ? clear_bhb_loop+0x55/0xb0 [ 519.831846][T32495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.831913][T32495] RIP: 0033:0x7f4829bfcde9 [ 519.831962][T32495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.832074][T32495] RSP: 002b:00007f4828266e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 519.832097][T32495] RAX: ffffffffffffffda RBX: 0000000000000d7c RCX: 00007f4829bfcde9 [ 519.832113][T32495] RDX: 00007f4828266ef0 RSI: 0000000000000000 RDI: 00007f4829c7ec51 [ 519.832128][T32495] RBP: 0000400000000e40 R08: 00007f4828266bb7 R09: 00007f4828266e40 [ 519.832143][T32495] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000dc0 [ 519.832158][T32495] R13: 00007f4828266ef0 R14: 00007f4828266eb0 R15: 0000400000000e00 [ 519.832189][T32495] [ 520.140707][T32501] pim6reg1: entered promiscuous mode [ 520.146095][T32501] pim6reg1: entered allmulticast mode [ 520.213427][T32499] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11318'. [ 520.320874][T32511] netlink: 'syz.9.11323': attribute type 10 has an invalid length. [ 520.328954][T32511] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11323'. [ 520.447003][T32511] team0: Port device geneve1 added [ 520.536499][T32518] lo speed is unknown, defaulting to 1000 [ 520.573381][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11326'. [ 520.578279][T32516] lo speed is unknown, defaulting to 1000 [ 520.605987][T32519] ip6_vti0: left promiscuous mode [ 520.611066][T32519] ip6_vti0: left allmulticast mode [ 520.622263][T32511] loop9: detected capacity change from 0 to 512 [ 520.639106][T32511] ext4: Unknown parameter 'nouser_xattr' [ 520.700303][T32530] netlink: 'syz.5.11330': attribute type 2 has an invalid length. [ 520.708332][T32530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11330'. [ 520.758194][T32532] loop6: detected capacity change from 0 to 1024 [ 520.764862][T32538] loop8: detected capacity change from 0 to 1024 [ 520.774882][T32532] EXT4-fs: Ignoring removed i_version option [ 520.778680][T32538] EXT4-fs: Ignoring removed i_version option [ 520.798993][T32532] EXT4-fs (loop6): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 520.818574][T32538] EXT4-fs (loop8): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 520.833489][T32532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.856310][T32532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.878804][T32538] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.895988][T32538] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.969514][T32551] pim6reg1: entered promiscuous mode [ 520.974885][T32551] pim6reg1: entered allmulticast mode [ 521.179261][T32563] FAULT_INJECTION: forcing a failure. [ 521.179261][T32563] name failslab, interval 1, probability 0, space 0, times 0 [ 521.191961][T32563] CPU: 0 UID: 0 PID: 32563 Comm: syz.6.11341 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 521.191987][T32563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 521.192002][T32563] Call Trace: [ 521.192010][T32563] [ 521.192019][T32563] dump_stack_lvl+0xf2/0x150 [ 521.192055][T32563] dump_stack+0x15/0x1a [ 521.192139][T32563] should_fail_ex+0x24a/0x260 [ 521.192176][T32563] should_failslab+0x8f/0xb0 [ 521.192209][T32563] kmem_cache_alloc_noprof+0x52/0x320 [ 521.192235][T32563] ? audit_log_start+0x34c/0x6b0 [ 521.192336][T32563] audit_log_start+0x34c/0x6b0 [ 521.192442][T32563] audit_seccomp+0x4b/0x130 [ 521.192480][T32563] __seccomp_filter+0x6fa/0x1180 [ 521.192504][T32563] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 521.192538][T32563] ? vfs_write+0x644/0x920 [ 521.192614][T32563] ? __schedule+0x75b/0x990 [ 521.192663][T32563] __secure_computing+0x9f/0x1c0 [ 521.192691][T32563] syscall_trace_enter+0xd1/0x1f0 [ 521.192723][T32563] do_syscall_64+0xaa/0x1c0 [ 521.192759][T32563] ? clear_bhb_loop+0x55/0xb0 [ 521.192793][T32563] ? clear_bhb_loop+0x55/0xb0 [ 521.192827][T32563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.192855][T32563] RIP: 0033:0x7fb3d8f2cde9 [ 521.192886][T32563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.192904][T32563] RSP: 002b:00007fb3d7597038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 521.192924][T32563] RAX: ffffffffffffffda RBX: 00007fb3d9145fa0 RCX: 00007fb3d8f2cde9 [ 521.192936][T32563] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000000000001e [ 521.192948][T32563] RBP: 00007fb3d7597090 R08: 0000000000000000 R09: 0000000000000000 [ 521.192960][T32563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.192972][T32563] R13: 0000000000000000 R14: 00007fb3d9145fa0 R15: 00007fff24366f58 [ 521.193058][T32563] [ 521.497420][T32574] netlink: 332 bytes leftover after parsing attributes in process `syz.6.11343'. [ 521.529157][T32582] lo speed is unknown, defaulting to 1000 [ 521.572497][T32565] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11338'. [ 521.614493][T32590] loop9: detected capacity change from 0 to 1024 [ 521.633134][T32590] EXT4-fs: Ignoring removed i_version option [ 521.649248][T32590] EXT4-fs (loop9): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 521.677709][T32594] loop8: detected capacity change from 0 to 512 [ 521.765536][T32594] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 521.902692][T32590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.942752][T32590] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.951989][T32594] EXT4-fs (loop8): 1 truncate cleaned up [ 521.963303][T32594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.010265][T32607] netlink: 'syz.9.11351': attribute type 2 has an invalid length. [ 522.018205][T32607] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11351'. [ 522.067765][T27663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.099368][T32609] netlink: 'syz.9.11353': attribute type 2 has an invalid length. [ 522.107345][T32609] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11353'. [ 522.290289][T32611] syzkaller0: entered promiscuous mode [ 522.295893][T32611] syzkaller0: entered allmulticast mode [ 522.755405][T32630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11360'. [ 522.914190][T32634] loop6: detected capacity change from 0 to 128 [ 523.031103][T32638] netlink: 'syz.5.11363': attribute type 2 has an invalid length. [ 523.054306][T32640] loop6: detected capacity change from 0 to 128 [ 523.091130][T32642] loop0: detected capacity change from 0 to 1024 [ 523.114925][T32642] EXT4-fs: Ignoring removed i_version option [ 523.142993][T32642] EXT4-fs (loop0): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 523.157519][T32647] loop6: detected capacity change from 0 to 128 [ 523.252400][T32642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.308892][T32642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.726033][T32664] syzkaller0: entered promiscuous mode [ 523.731587][T32664] syzkaller0: entered allmulticast mode [ 523.839889][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 523.839908][ T29] audit: type=1400 audit(523.853:29665): avc: denied { setopt } for pid=32671 comm="syz.5.11375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 523.865330][ T29] audit: type=1400 audit(523.853:29666): avc: denied { bind } for pid=32671 comm="syz.5.11375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 523.884392][ T29] audit: type=1400 audit(523.853:29667): avc: denied { name_bind } for pid=32671 comm="syz.5.11375" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 523.906043][ T29] audit: type=1400 audit(523.853:29668): avc: denied { node_bind } for pid=32671 comm="syz.5.11375" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 523.927470][ T29] audit: type=1400 audit(523.853:29669): avc: denied { write } for pid=32671 comm="syz.5.11375" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 523.948642][ T29] audit: type=1400 audit(523.853:29670): avc: denied { connect } for pid=32671 comm="syz.5.11375" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 523.969889][ T29] audit: type=1400 audit(523.853:29671): avc: denied { name_connect } for pid=32671 comm="syz.5.11375" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 523.991703][ T29] audit: type=1326 audit(523.853:29672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.5.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 524.014829][ T29] audit: type=1326 audit(523.853:29673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.5.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 524.037803][ T29] audit: type=1326 audit(523.863:29674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.5.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4829bfcde9 code=0x7ffc0000 [ 524.237871][T32673] netlink: 'syz.8.11376': attribute type 2 has an invalid length. [ 524.387788][T32682] netlink: 'syz.8.11378': attribute type 10 has an invalid length. [ 524.396839][T32682] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.405847][T32682] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.414821][T32682] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.423870][T32682] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.479642][T32684] loop0: detected capacity change from 0 to 128 [ 524.575771][T32690] loop8: detected capacity change from 0 to 512 [ 524.597543][T32682] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.606392][T32682] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.615189][T32682] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.623994][T32682] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.697494][T32693] loop0: detected capacity change from 0 to 1024 [ 524.700119][T32690] ext4: Unknown parameter 'noacl' [ 524.721322][T32682] team0: Port device geneve1 added [ 524.724707][T32698] loop6: detected capacity change from 0 to 128 [ 524.740013][T32685] lo speed is unknown, defaulting to 1000 [ 524.752255][T32693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.861916][T32702] __nla_validate_parse: 4 callbacks suppressed [ 524.861952][T32702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11381'. [ 524.955776][T26362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.075631][T32712] pim6reg1: entered promiscuous mode [ 525.080967][T32712] pim6reg1: entered allmulticast mode [ 525.117373][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.142367][T32714] loop0: detected capacity change from 0 to 1024 [ 525.165651][T32714] EXT4-fs: Ignoring removed i_version option [ 525.194644][T32714] EXT4-fs (loop0): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 525.254285][T32714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.298156][T32714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.398097][T32723] loop8: detected capacity change from 0 to 512 [ 525.437510][T32725] loop9: detected capacity change from 0 to 128 [ 525.445918][T32723] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 525.486610][T32723] EXT4-fs (loop8): 1 truncate cleaned up [ 525.498328][T32723] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.614030][T32732] FAULT_INJECTION: forcing a failure. [ 525.614030][T32732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.627356][T32732] CPU: 1 UID: 0 PID: 32732 Comm: syz.8.11390 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 525.627387][T32732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 525.627403][T32732] Call Trace: [ 525.627411][T32732] [ 525.627420][T32732] dump_stack_lvl+0xf2/0x150 [ 525.627449][T32732] dump_stack+0x15/0x1a [ 525.627471][T32732] should_fail_ex+0x24a/0x260 [ 525.627591][T32732] should_fail+0xb/0x10 [ 525.627618][T32732] should_fail_usercopy+0x1a/0x20 [ 525.627656][T32732] _copy_to_iter+0x248/0xd00 [ 525.627726][T32732] ? should_fail_ex+0xd7/0x260 [ 525.627755][T32732] ? down_read+0x171/0x4b0 [ 525.627789][T32732] copy_page_to_iter+0x171/0x2b0 [ 525.627829][T32732] process_vm_rw+0x5b6/0x890 [ 525.627897][T32732] ? ksys_write+0x176/0x1b0 [ 525.627954][T32732] __x64_sys_process_vm_readv+0x7a/0x90 [ 525.627985][T32732] x64_sys_call+0xb24/0x2dc0 [ 525.628055][T32732] do_syscall_64+0xc9/0x1c0 [ 525.628089][T32732] ? clear_bhb_loop+0x55/0xb0 [ 525.628146][T32732] ? clear_bhb_loop+0x55/0xb0 [ 525.628187][T32732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.628219][T32732] RIP: 0033:0x7fa50f55cde9 [ 525.628284][T32732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.628306][T32732] RSP: 002b:00007fa50dba6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 525.628329][T32732] RAX: ffffffffffffffda RBX: 00007fa50f776080 RCX: 00007fa50f55cde9 [ 525.628344][T32732] RDX: 0000000000000002 RSI: 0000400000008400 RDI: 0000000000000360 [ 525.628359][T32732] RBP: 00007fa50dba6090 R08: 0000000000000286 R09: 0000000000000000 [ 525.628374][T32732] R10: 0000400000008640 R11: 0000000000000246 R12: 0000000000000001 [ 525.628388][T32732] R13: 0000000000000000 R14: 00007fa50f776080 R15: 00007fff394c2808 [ 525.628451][T32732] [ 525.883832][T32738] loop0: detected capacity change from 0 to 512 [ 525.926762][T27663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.933196][T32738] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 525.976938][T32744] loop0: detected capacity change from 0 to 128 [ 525.982177][T32746] loop6: detected capacity change from 0 to 128 [ 525.994547][T32740] pim6reg1: entered promiscuous mode [ 526.000046][T32740] pim6reg1: entered allmulticast mode [ 526.170887][T32745] hub 9-0:1.0: USB hub found [ 526.189096][T32745] hub 9-0:1.0: 8 ports detected [ 526.211249][T32745] binfmt_misc: register: failed to install interpreter file ./file2 [ 526.577431][T32765] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11401'. [ 526.608151][ T305] loop8: detected capacity change from 0 to 128 [ 526.678519][ T310] loop8: detected capacity change from 0 to 1024 [ 526.956756][ T310] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.191402][ T317] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11409'. [ 527.263202][T27663] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.357115][ T328] netlink: 'syz.8.11411': attribute type 2 has an invalid length. [ 527.365006][ T328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11411'. [ 527.381685][ T331] loop6: detected capacity change from 0 to 128 [ 527.399507][ T333] loop0: detected capacity change from 0 to 1024 [ 527.419158][ T333] EXT4-fs: Ignoring removed i_version option [ 527.436799][ T333] EXT4-fs (loop0): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 527.475112][ T333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.484754][ T337] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 527.511729][ T333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.643458][ T363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11423'. [ 527.687241][ T361] siw: device registration error -23 [ 527.761209][ T365] netlink: 'syz.0.11425': attribute type 2 has an invalid length. [ 527.769163][ T365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11425'. [ 527.868226][ T375] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11424'. [ 528.017962][T26362] ================================================================== [ 528.026100][T26362] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 528.033604][T26362] [ 528.035946][T26362] read-write to 0xffff88810cdcc010 of 8 bytes by task 386 on cpu 1: [ 528.043943][T26362] shmem_recalc_inode+0x36/0x1b0 [ 528.048929][T26362] shmem_get_folio_gfp+0x7ce/0xd90 [ 528.054082][T26362] shmem_write_begin+0xa2/0x180 [ 528.058960][T26362] generic_perform_write+0x1a8/0x4a0 [ 528.064271][T26362] shmem_file_write_iter+0xc2/0xe0 [ 528.069495][T26362] __kernel_write_iter+0x247/0x4c0 [ 528.074629][T26362] dump_user_range+0x3ac/0x550 [ 528.079428][T26362] elf_core_dump+0x1d17/0x1ea0 [ 528.084230][T26362] do_coredump+0x17fe/0x1f40 [ 528.088862][T26362] get_signal+0xd4f/0x1000 [ 528.093309][T26362] arch_do_signal_or_restart+0x95/0x4b0 [ 528.098882][T26362] irqentry_exit_to_user_mode+0xa7/0x120 [ 528.104559][T26362] irqentry_exit+0x12/0x50 [ 528.109047][T26362] asm_exc_page_fault+0x26/0x30 [ 528.113926][T26362] [ 528.116259][T26362] read to 0xffff88810cdcc010 of 8 bytes by task 26362 on cpu 0: [ 528.123906][T26362] shmem_getattr+0x42/0x200 [ 528.128427][T26362] vfs_getattr+0x172/0x1b0 [ 528.132873][T26362] vfs_statx+0x12d/0x320 [ 528.137146][T26362] vfs_fstatat+0xe4/0x130 [ 528.141517][T26362] __se_sys_newfstatat+0x58/0x260 [ 528.146563][T26362] __x64_sys_newfstatat+0x55/0x70 [ 528.151605][T26362] x64_sys_call+0x236d/0x2dc0 [ 528.156313][T26362] do_syscall_64+0xc9/0x1c0 [ 528.160854][T26362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.166788][T26362] [ 528.169220][T26362] value changed: 0x00000000000001a1 -> 0x00000000000001a6 [ 528.176515][T26362] [ 528.178856][T26362] Reported by Kernel Concurrency Sanitizer on: [ 528.185022][T26362] CPU: 0 UID: 0 PID: 26362 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 528.195976][T26362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 528.206058][T26362] ================================================================== [ 530.876642][ T8697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.635580][ T8697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration