last executing test programs: 4m40.528258508s ago: executing program 32 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000290000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 4m24.026851662s ago: executing program 33 (id=508): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xfd, 0x120c, &(0x7f0000004500)="$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") perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x4, @perf_bp={0x0, 0x1}, 0x1101a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000475706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000a28404000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) 4m5.289777296s ago: executing program 34 (id=784): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0xa000000a}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) nanosleep(0x0, 0x0) finit_module(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2}) close_range(r9, 0xffffffffffffffff, 0x0) 3m59.683265072s ago: executing program 35 (id=832): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) 3m52.919541792s ago: executing program 36 (id=902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r5}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000e8000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = dup2(r6, r6) write$tun(r8, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 3m47.927564494s ago: executing program 37 (id=970): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="270e000000000000000004"], 0x88}, 0x1, 0x40030000000000}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="22000080", @ANYRES16=r2, @ANYBLOB="100029bd7000fbdbdf25010000000900010073797a31000000000900010073797a32000000001400020076657468315f746f5f6873720000000005000400020000000900010073797a31000000000900030073797a31000000000900030073797a31000000001400020076657468305f746f5f7465616d000000"], 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6gretap0\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000980)={0x6, &(0x7f0000000480)=[{0xdb, 0x0, 0x3, 0x80000000}, {0x5, 0x9, 0x8, 0x10}, {0x9, 0x4, 0x36, 0x4}, {0x1, 0x6, 0x90, 0x3}, {0x80, 0x0, 0x1, 0x10000}, {0x8, 0xb2, 0x80, 0x5}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES16=r2], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000038ba9a7e7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000780)=""/94, 0x5e}], 0x7, 0x5f6, 0xfffffffd) setxattr$incfs_metadata(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000880)="1967e18d673d6aadf0cf209028a6248e2b1d8f7d9be0df40272e08e29fe72f18cccd52e9ea46e97af8c338049f5ad83925cf9b0b66ba6587a2367062d8abfc2de32bca8367ac78efebcd026a7e6bc1cd1614fe78fb1bddf7cd7e2c67fe91685e86cdadb899e8b3aac905db730d105d00fbbb39a8ed25cbd0341c71f1916b8f39eee3ff70a68b324e12294233e38fc1f087df8dec46c040", 0x97, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x11, 0x3, &(0x7f0000002b00)=ANY=[@ANYBLOB="180000006760fe29f2aeb7c10800000095000000000000007bdc97c89f58b71c68159f650ae52f4968348d14db059ddd4417a4320530ce91b8b3674afbb47406830d807faa3afa181a605d03cf8dc6f4db47fed94e773b625d13147618bed62f2932dd67a33293ca19ec138013d58b461b720cb95118b8d9d7161e4149df077a1f82a2d5ed35977f0fbe9697d20c2bf656ff796cd8c7ce8f2cc56c1a31ee715b9e204c8bd6a0bffa7030152e0dd71a556785dfb38c67779920bba07c7acf6068f95d5800"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r9, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=ANY=[@ANYRES32=r10], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff83, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003fc0)) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x839, 0x0, 0x25dfdbfb, {}, [{0x8, 0xb, 0x4}]}, 0x2c}}, 0x44000) 3m19.022281925s ago: executing program 38 (id=1363): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 3m2.077441361s ago: executing program 3 (id=1671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xb176, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 3m1.986202691s ago: executing program 3 (id=1672): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0xc41, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='io_uring_register\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="20010000", @ANYRES16=r3, @ANYBLOB="050000000000000000", @ANYRES32=r0, @ANYBLOB='G\x00', @ANYRESHEX, @ANYRESHEX=r3, @ANYRES32=r2], 0x120}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x3f, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1830000000000000000000000200000095000000000000007d867575011b25abf17bca0ef7af7f6a24c78d0f58c8fb349ea55a56237fc8a7faedfb5fc5552f20cb81e05a192e73399ecb009ebcc7b6cf5ed4a7"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32=r4, @ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40005, @void, @value}, 0x94) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) r10 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0xc) setsockopt$inet6_int(r9, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='dlm_unlock_start\x00', r7, 0x0, 0x2}, 0x18) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3m1.959671481s ago: executing program 3 (id=1675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) socket(0x25, 0x1, 0xfffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800490000380000000000069078ac1e0001ac1e0001070b05ac1414bb00000000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4170d26aa2f6346c"], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000314010000070000fedbdf250900020073797a320000000008004100736977001400330073797a6b616c6c6572300000000000003e98f9296e02d951f5ba3d7a14c2e133c1609ba559e5a9b95fbdf7907107770a277742e171b8810e6baf63ca46ed5a09ad5cd5520ce1a49bfcb43c8f3ca9396f2323b27da3e9c4b3b7e384bfd7f0770220f37ca1005e898e40d3a5e36e7ba6666625bf02c88dd2077fbdc5852a9d3000b38b06a5f2e2dc115e3a3dcd490b495d01d279c6da5bd312fa52724a6888e9c94de8125fd9f7b9660500"/221], 0x38}}, 0x0) 3m1.857657952s ago: executing program 3 (id=1680): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x4e, &(0x7f0000000180)=[{0xff, 0x1, 0x9, 0x100006}]}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x201, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$packet(0x11, 0x2, 0x300) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001442, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 3m1.633711283s ago: executing program 3 (id=1684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001e80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)={0x230, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x230}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040000) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r2, r3, 0x0) 3m1.030608036s ago: executing program 3 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000100)={{0x5, 0x3}, 'port0\x00', 0x45, 0x4, 0x6, 0x1c, 0xc039, 0x8, 0x3ff, 0x0, 0x4, 0x3}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x45c}}, 0x20050800) 3m1.030523666s ago: executing program 39 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000100)={{0x5, 0x3}, 'port0\x00', 0x45, 0x4, 0x6, 0x1c, 0xc039, 0x8, 0x3ff, 0x0, 0x4, 0x3}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x45c}}, 0x20050800) 1m57.231466582s ago: executing program 6 (id=2932): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x160, 0x1170, 0x1170, 0x160, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@state={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@local, @mcast2, [], [0x0, 0xff], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffd, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 1m57.055961413s ago: executing program 6 (id=2937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000190001002abd7000fedbdf2580201008fe00fe050020000008001900", @ANYRES32=0x0, @ANYBLOB="08001000ff07000008000700e000000206001c004e2000000c0016800a0006000000000806001d004e230000080005006401010108"], 0x60}, 0x1, 0x0, 0x0, 0x40811}, 0x4850) 1m57.013712773s ago: executing program 6 (id=2938): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000003a80)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1m57.013294364s ago: executing program 6 (id=2939): r0 = socket$inet6(0xa, 0x3, 0x803a) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = dup2(r0, r0) write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0xfffffffd, 0xfffffffd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x800000003, 0x3}}, 0x43) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) writev(r2, &(0x7f0000000b00)=[{&(0x7f0000000280)="72ed8a485ca511304e1dec65a1451ae604b468fcfef84042a6cc11ab3b63ba157d", 0x21}, {&(0x7f00000002c0)="4981f231056972287e89b8a905090ac68dd81a12ea7040de4e7908795de676aff254ff9c95a3a05a8a0c1beb706c15d43b458c0f8afee9fb036dd8fc7d54b68086ce660183d8768a51ace06911b1f0acd69f2746b432e954e27d8526a215e41ccd2b9ef82f4d62628d22f4991f607efe74da5cfa003d8df6663e299b7efa26f01e888e1cced97dab833981e9cc72d5fcc34ed6708e65d7b10e714560e31c98bd7e93e7380353a74d32a53f1ae2ad3f89d042aee3d24f1ebc27f29f0d93b9d0105fe7901f9c4688ee070f85", 0xcb}, {&(0x7f00000004c0)="e080bf538963c1f3b080d1fa63b4a1192d7bc177e553f5a89c82f415f7d746b6bec2f274b1914e8e5f25d0761ed636646fe9ad5a6edc8e7129d4311e6d7df14a49df518087a6d0519b7bb575a5e07574aa97b3d0ef03e5f158b391e5128752e80bb3cef4d39f92b05318d4727321ded16cfba219251fca547d0f38a64c372abab700ff7b81700a7b59ecd7232ed2c02f9dd343f727c647dd95c835377e084767ebff494365", 0xa5}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="fd1a0177825752aa1a0900297cdb12a0e9b23dabd034672975ecbf4cb7a5f783bd338f", 0x23}, {&(0x7f0000000680)="9ce6ba627f0a0395f8de68b183701c9e4f0e252715f3b6e9dae89e6192766ab6d07a00895a9755e7c7cf8d015574e41219eaf07ec8a4abdc093774e200d8bfce36d6f3031b83e145be73ed0d144284dade35a1be3e713f1331c4fb0137dd181082b3576429f53877784f114879dfe528158bad44be6a9420da60a4f502fc576849586cdbeaa068ff8c19adbe0d91422f1769ff7ef8868e99d197c7068574dc306859df2522bc7e16f45eee5878d647ce6af3e35cccebdbffb873f3bcc9581a850082f2ad87da7ca4d77690cc34dccaf62aab5e09113787bce3423eb1", 0xdc}, {&(0x7f0000000580)="17dd5448e0faece30f7eab3ee98a6d8d579398372a93fe1378de7f78e630916251ba358f777097c341f6a463274541030bb23b0d0017b1f4587875648f549854386c7aad1d5763561976fddd3880f2f5682babd7fb8a97244b4d06f8287f509ad531a1790c4ca122566043b85daf73adbb9284ad6391805a92542fb94ef130da4259721dd9c191188d46d70415e4e51da1e1c4613b377813f59e6bee1edb32b0f687fc1ccce105f38327e9e5962aa7ddd8279de2cf9cde50e8d1867c625f", 0xbe}, {&(0x7f0000000780)="f18e4e5374a022108de68e9e4d3c329f23dc0b7173b01ca4e66b7cc58fdd46307cc562c0eb3d14b031d7e071ad13a2f9d78009987dd975f85a4d1c7141a88662a9fb9b61ef028f3a4ec854c603c3fa71e5d227e872ab3ffce4f11f60c75cda88faadbd56f4e77b23b185cbb011eb49625036b70081ebf0b01819d336e774ded74faa62d448f447bc8eb0f36cd6bc845481afe0f6600c57f43c7417deaf034a471345b5d725067336eb37b836d4508401fea78d385903461ad91d774870", 0xbd}, {&(0x7f00000008c0)="a14ce72c6e95165271bce13cbe0dce29507e9a33cd787bf376e438968c4e9bee1be14ebcd38c60dbc42b6c4493c045c9e1787ae4718ce1fdba9bcce66ee97614af1aa0fe527e230f5cbf", 0x4a}, {&(0x7f0000000940)="e4019df3924d8dc4b4b454d588e7c67c654db5527b413567ab2795f3f8b3f6a575065bbc2909202b7f5def10d6cce26d057beb52435cf438e6d90112070b290283d89ecba87993e77d9c61d215cfda3ae0f462cbc5f74aa5f0c2345ad34a98370f2a447cde098942d0e73396a54295082b704ae543e33fdafe90c826a9e60712b26b0982adb4740bd0b12afecd61cf5b94d362a8c98fdbe3441cd6a07a5da24c3c5adedf", 0xa4}], 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$eJzs3U1rG9caAOB3xnbifNxrB0K4t4tiyKIpaaTY7kcKXaTL0oYG2n0qbMUEy1Gw5BC7gSaLZtNNCYVSGijtvvsuQ/9Af0WgDYQSTLvoxmXkkaPEki078kei54Gxz5kZ+ZxXM+/xGY2EAuhbY9mPNOL/EfF1EjHSsm0w8o1jq/stP745lS1JrKx88mcSSb6uuX+S/z6SV/4XEb9+GXE6Xd9ubXFptlSplOfzejGSa8Xa4tKZK3OlmfJM+erE5OS5tyYn3n3n7Z7F+vrFv7/7+P4H5746ufztzw+P3U3ifBzNt7XG8RxutVbGYix/Tobi/DM7jvegsf0k2esOsC0DeZ4PRTYGjMRAnvVtrYzsZteAHfZFltZAn0rkP/Sp5jygeW3fo+vgF8aj91cvgNbHP7j62kgMN66NDi8nT10ZZde7oz1oP2vjlz/u3c2W6N3rEACbunU7Is4ODq4f/5J8/Nu+s13s82wbxj/YPfez+c8b7eY/6dr8J9rMf460yd3t2Dz/04c9aKajbP73Xtv579pNq9GBvPafxpxvKLl8pVLOxrb/RsSpGDqY1Te4n/NZuvxgpdPG1vlftmTtN+eCeT8eDh58+jHTpXrpuYJu8eh2xCtt57/J2vFP2hz/7Pm42GUbJ8r3Xu20bfP4d9bKjxGvtT3+T+5oZaVifa7T/cli43woNs+K9f66c+K3Tu3vdfzZ8T+8cfyjSev92trW2/hh+J9yp23bPf8PJJ82ygfydTdK9fr8eMSB5KP16yeePLZZb+6fxX/q5MbjX7vz/1CW2F3Gf+f4ndZdh7cW/87K4p/e0vHfeuHBh59/36n97o7/m43SqXxNN+Nftx18nucOAAAAAAAA9ps0Io5GkhbWymlaKKy+v+N4HE4r1Vr99OXqwtXpaHxWdjSG0uad7pGW90OM5++HbdYnnqlPRsSxiPhm4FCjXpiqVqb3OngAAAAAAAAAAAAAAAAAAADYJ45EDLf7/H/m94G97h2w4zb4ym/gJdc5//MtvfimJ2Bfas3/g3vYD2D3mf9D/+oi/9Pd6Aew+/z/h/4l/6F/yX/oX/If+tdW8v+nCzvYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAHg5XLxwIVtWlh/fnMrq09cXF2ar189Ml2uzhbmFqcJUdf5aYaZanamUC1PVuc3+XqVavTY+EQs3ivVyrV6sLS5dmqsuXK1fujJXmilfKg/tSlQAAAAAAAAAAAAAAAAAAADwYqktLs2WKpXyvILCtgqD+6MbnQppfqLvl/68MIU9HpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMW/AQAA//+LGzah") r3 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0xb8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd14) writev(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)="ec0b54df7a", 0x5}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioperm(0x2, 0xb4a8, 0x7) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) ptrace$getregset(0x4204, r6, 0x1, &(0x7f0000000040)={0x0}) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 1m56.916898524s ago: executing program 6 (id=2940): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d00"], 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x8}], 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1m56.251751527s ago: executing program 6 (id=2956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) socket(0x25, 0x1, 0xfffffffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/11, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x14) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800490000380000000000069078ac1e0001ac1e0001070b05ac1414bb00000000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4170d26aa2f6346c"], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000314010000070000fedbdf250900020073797a320000000008004100736977001400330073797a6b616c6c6572300000000000003e98f9296e02d951f5ba3d7a14c2e133c1609ba559e5a9b95fbdf7907107770a277742e171b8810e6baf63ca46ed5a09ad5cd5520ce1a49bfcb43c8f3ca9396f2323b27da3e9c4b3b7e384bfd7f0770220f37ca1005e898e40d3a5e36e7ba6666625bf02c88dd2077fbdc5852a9d3000b38b06a5f2e2dc115e3a3dcd490b495d01d279c6da5bd312fa52724a6888e9c94de8125fd9f7b9660500"/221], 0x38}}, 0x0) 1m56.216374847s ago: executing program 40 (id=2956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) socket(0x25, 0x1, 0xfffffffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/11, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x14) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800490000380000000000069078ac1e0001ac1e0001070b05ac1414bb00000000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4170d26aa2f6346c"], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000314010000070000fedbdf250900020073797a320000000008004100736977001400330073797a6b616c6c6572300000000000003e98f9296e02d951f5ba3d7a14c2e133c1609ba559e5a9b95fbdf7907107770a277742e171b8810e6baf63ca46ed5a09ad5cd5520ce1a49bfcb43c8f3ca9396f2323b27da3e9c4b3b7e384bfd7f0770220f37ca1005e898e40d3a5e36e7ba6666625bf02c88dd2077fbdc5852a9d3000b38b06a5f2e2dc115e3a3dcd490b495d01d279c6da5bd312fa52724a6888e9c94de8125fd9f7b9660500"/221], 0x38}}, 0x0) 1m6.974021809s ago: executing program 4 (id=3859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) chdir(0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/232}, 0xf0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7}]}, @struct={0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, @void, @value, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bind$inet6(r3, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) r6 = dup2(r3, r3) write$P9_RSTATFS(r6, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x6, 0xfffffffd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x4a}}, 0x43) 1m6.848126039s ago: executing program 4 (id=3860): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x20000042, 0x22004, 0x1}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="000202"], 0x18) 1m6.780076359s ago: executing program 4 (id=3861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), 0x0}, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1m6.779696329s ago: executing program 4 (id=3862): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000b533e40018110000208139aadf56530fcd6c88eaa82f0762e2daceeaeeb5a961c22783dff6516bb84d2583c2eb5712fe22823a083dd3cd3056a22bd800ace66e37f97e82addfe18bce195ad5f6954757f70aa52e207dce5c74399532d6f6d38318ca0246b8c190c09741f2cac2375090a70fecf0e6afb555f662d1e286f0f1222391a65dfb998a289b8c8443970153b3390f47c845caa8ec731f1f1776d6ab9e2795f1e7a5dfc3d3d5708d4747fa04ca9a40a6a4fa79d5fe9f2b80f427dc386c69d1ff", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setreuid(0xee01, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "bf0a5c9f11aa2ad1df8d9fde4844e5917a77b6b6a0"}, 0x25) ioprio_get$uid(0x3, 0xee01) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r7, 0x5, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000000c0)) utimensat(r7, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4403c04e2b20d868fc1ebe2bc3297e79dd", 0x11}], 0x1, 0x1200, 0x41002, 0x0) 1m6.456103631s ago: executing program 4 (id=3870): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 1m5.952580083s ago: executing program 4 (id=3880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1m5.921358093s ago: executing program 41 (id=3880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 28.355652962s ago: executing program 7 (id=4524): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 28.338893572s ago: executing program 7 (id=4525): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="f85e7ef0f7a5a1e3bfad227e45120552f036a209dc3e4d3c55d27a905b77e7b9b5e1cc7c3ceb7f5012dce40c17e1c82570d9511738ebcca74a1a646fe49476a7fdcef3178d1146aa06d41792e507ee11577007cb77783b3383182551660a55a71a1b", @ANYRES64=r0, @ANYRES8=r1, @ANYRES64=r0], 0x48) sysfs$1(0x1, &(0x7f0000000540)='/dev/ptmx\x00') 28.299338213s ago: executing program 7 (id=4526): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001e80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)={0x238, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x238}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040000) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) read$msr(r5, &(0x7f0000000200)=""/35, 0x23) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)={0x58, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r8}, {0x3a}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000e80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000f80)=@newchain={0xc38, 0x64, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0xfff1}, {0xc, 0xc}, {0x9, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x8bc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9e}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_FW_POLICE={0x89c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb3c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x1, 0xfd8, 0x0, 0x1ff, 0x2, 0x6, 0x2, 0x45, 0x3, 0x40, 0x9, 0xa45, 0x2, 0xfffffffd, 0xc, 0x3, 0x5, 0x9, 0xca, 0x6, 0x6, 0x1, 0x0, 0x1, 0xfff, 0x8000, 0x2, 0x7, 0x800, 0x3, 0x7, 0x6, 0x3, 0xff, 0xfff, 0x451d3b07, 0x8, 0x7f, 0x101, 0x8, 0x8, 0x9, 0x7, 0x1, 0x6, 0x6, 0x401, 0x8000, 0x9, 0x1, 0x2c0000, 0x1, 0x3, 0x1, 0x7, 0x2, 0x6, 0xee, 0x5be, 0xa0, 0x140, 0xbf58, 0x9, 0x1, 0x9, 0x1, 0x3, 0x0, 0x10001, 0xee9e, 0x7fffffff, 0x7, 0x100, 0xa, 0x2, 0x3, 0xda01, 0xe, 0xfffffffd, 0x8, 0x7, 0x0, 0x5, 0x7, 0x8000, 0x6, 0x1, 0x0, 0x7fff, 0xf896, 0x8, 0x0, 0x1, 0x400, 0x4, 0x7, 0xb, 0x1, 0x21, 0x2, 0x1ff, 0x6, 0x8, 0x1000, 0x0, 0x9, 0xfffeffff, 0x5, 0x7fffffff, 0x8, 0x7, 0x2, 0x8, 0x400, 0x7c, 0x200, 0x23d, 0x8001, 0x55, 0x38, 0x1ff, 0x9, 0x7fffffff, 0x100, 0x3, 0x2, 0x3, 0x5, 0x618d, 0x8, 0x0, 0x2, 0x4da7, 0x8, 0x41, 0xffffffff, 0x9, 0x6, 0x6, 0x0, 0x6db0, 0x5, 0x24, 0x6, 0x100, 0x5b46, 0x42, 0x72, 0x8b, 0x0, 0x9585, 0x8, 0x1000, 0x4a91, 0x1, 0xf, 0x236d, 0x81, 0x0, 0x7e7, 0x5, 0x0, 0x0, 0x21, 0xfffffffa, 0x800, 0xb, 0xa853, 0x3, 0x80000001, 0x9, 0x5, 0x0, 0x1, 0x3, 0xfff, 0x6, 0x9, 0x3132, 0x2, 0x0, 0x0, 0x7f, 0x9, 0x56, 0x1, 0x10000, 0x7, 0x3, 0x9, 0x3, 0x7, 0x9, 0x7, 0x80, 0xfffffff9, 0x8766cfca, 0x3, 0x9, 0x8, 0x8, 0x9, 0x7, 0xc4d, 0xad00, 0x1, 0x9, 0xa26, 0x8, 0x0, 0x9, 0x4, 0x2, 0x2, 0xf1, 0x0, 0x2, 0x91, 0x3, 0x4db, 0x4, 0x7, 0x5f000000, 0x8, 0xa83b, 0x7f, 0x101, 0x5, 0xc5fa, 0xb, 0x4, 0x1000, 0x2, 0x236, 0x2, 0x0, 0x8000, 0x8, 0x4, 0x2, 0x5, 0x9, 0x4, 0x8950, 0x401, 0xb0, 0x1, 0x6, 0xcf2, 0x9, 0x5, 0x1, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x6, 0x3, 0x3, 0x200, 0x4f5d, 0x8, 0x7, 0x101, 0x2, 0x15a, 0x0, 0x1, 0x40, 0x29c, 0x10, 0x0, 0x5, 0x2, 0x181c, 0x9, 0xc64b, 0x93dc, 0x6, 0x0, 0xeb, 0x6, 0x0, 0x7ff, 0x2, 0x4, 0x0, 0x8, 0xfff, 0x7, 0x1000, 0x7, 0x9, 0x80000001, 0x6, 0x3ff, 0x1000, 0x2, 0x1d2, 0x10000, 0x9, 0xa, 0x8, 0x9, 0x1, 0x0, 0x4, 0x9, 0x7, 0xfff, 0x9, 0x1, 0x6, 0x8, 0x0, 0x8, 0x80000001, 0x0, 0x1, 0x35e6, 0x1, 0x1, 0x2, 0x10001, 0x6, 0x3, 0x8, 0x1, 0x8, 0x1, 0x800, 0x67, 0x9, 0x400, 0xa, 0x40, 0xc2f9, 0xff, 0x7, 0x9, 0x3, 0x2, 0x9, 0x8, 0x2, 0x4ee5bd82, 0x657, 0x1, 0x7, 0xd, 0x9, 0x2, 0x2, 0xe, 0x1de20000, 0x1, 0x67, 0x5, 0x0, 0x41, 0x4, 0xa9cd, 0xe, 0x1, 0x206196fc, 0x9, 0x8, 0x7, 0x7, 0x0, 0x663e, 0x1, 0x2, 0x4, 0x8, 0x81, 0x8, 0x2, 0x1, 0x0, 0xc, 0x7fcab04, 0x8, 0xe3171c3, 0x5, 0x0, 0xffffff81, 0x9, 0x0, 0x2, 0x9, 0x2, 0x8, 0x8, 0x625c, 0x7, 0xd45d, 0x57b, 0x9, 0x3, 0x2, 0x4, 0x9, 0x7, 0xffffff01, 0x40, 0x9, 0x1, 0x6d0, 0xf10, 0x7e5, 0x8, 0x8, 0x590, 0xffff, 0x80, 0xf1, 0x6, 0xd0a4, 0x0, 0x9, 0xe, 0x5, 0x7, 0x6, 0xbc, 0x10000, 0x5e2e, 0xf2, 0x1, 0xe, 0x8, 0x6, 0x3, 0xc37, 0x2, 0xfffffff6, 0xd, 0x5d4384ca, 0x2, 0xf, 0x7, 0x4, 0x5, 0x7, 0x2, 0x0, 0x4, 0xffffff7f, 0x7, 0x7, 0x6, 0xf9, 0x8, 0x0, 0x2, 0x1, 0x11, 0x0, 0x9, 0x1, 0xd, 0x6, 0x4, 0x401, 0xffff, 0x2, 0x7, 0x8000, 0x5, 0x1000, 0x0, 0x80000000, 0x4, 0x9, 0xfffffff3, 0x6e, 0x1ff, 0x3, 0xa, 0x26, 0xf, 0x4, 0x0, 0x9, 0x5, 0x7, 0x4, 0x2000000, 0x0, 0xf, 0x2, 0x6, 0x200, 0x1, 0x5, 0x3, 0x401, 0x6, 0x0, 0xa0, 0x28db, 0x7fffffff, 0x9, 0x4, 0xa6f6, 0x6, 0x30000, 0xfff, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5d, 0xfffffffffffffffb, 0x200, 0x5, 0x460, {0x5, 0x0, 0xc, 0x6, 0xbb, 0x8}, {0x9, 0x0, 0x8, 0x800, 0x8, 0x3}, 0x7f, 0xf, 0xd02}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd8db, 0x3, 0x613, 0x9, 0x0, {0x2, 0x1, 0x200, 0x6, 0xffff, 0x8}, {0x1, 0x0, 0x9, 0x3ff, 0xffff, 0x8}, 0x3, 0x80000001, 0x6}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x50}, @TCA_U32_DIVISOR={0x8, 0x4, 0xc}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_LINK={0x8, 0x3, 0xe}, @TCA_U32_CLASSID={0x8, 0x1, {0xfffc, 0xe}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x7e}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2e0, 0x2, [@TCA_CGROUP_ACT={0x2dc, 0x1, [@m_connmark={0xec, 0x19, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x7, 0x3, 0x2a7}, 0xfff}}]}, {0x9e, 0x6, "cfb093892a111d4d919373124f5e582fb5c8371aa291f577be68fa5d82e03d42a215f7f9778866b17bb5eb182c34445d8ae618f5a03499bccf936c3e6aeb2b14c299037cd04489e8d69e49bdf1647a228331b40312a66b8d433d569d507589e2f562dd0f86759a5fa716df61f44552f25055047b516ccc4769144106bca4171db2b6fc81502542a73ed21f2ff7cfab5fb3e3c02e1040836a33d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x104, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0xd2, 0x6, "59ef2de83e2d3ebc84dd9cf97eb0f470aabbd30d3c9a1ce2a96687be95def5338e3efa1f880bfd61c534bc3db3dc20edf59ddbfeb2e08d2a1c445fb945a9a017ea9687b6105db0bdf98254b040cbad5b80c1b875929b123ab2641d557ba24bb5a603e40422e377f64e3e7cec591125ad3c172c9f14701728079df275a55d6f409a4d1b83184570a39f4ccc8b3332176b32d7876b30689750f1118c627c12e37d59a83830a9c5e0a620b8e2afdfae39ec81651f8acfe361e304b15aa8ed660a65f2e40bb573f6ac1f9632218c4a3b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xe8, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x6, 0x3, 0x4}, 0x3a}}]}, {0x9f, 0x6, "3f2330efe2b0f6ebc38bd9b6cd07ab3aeeb262438027f7740bc972b4b9d0df96a2beda4c4ff0b906a79f51c5f92954d72a5b1bd66aea2b1c843e7f3e1ade9942858ba76ba3df1d6d20f08d4e01798e751ef3cca2068f38509b8d3f6bba6a1c2fa42362a8043707fa8dbee394eaae180a734fe056b5455065fcc54a99bb8fc1c706ba48a7040e085b3cc2a396b28902224835b0dc276714ea673751"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf1, 0x8}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0xc38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x73, 0x5a, 0x8, 0x0, 0x3, 0x80509, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x10042, 0x8, 0x1, 0xf, 0x1, 0x8, 0x9, 0x0, 0x0, 0x0, 0x7a}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r11], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r13, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@private=0xa010100, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x0, 0x9, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x8000, 0x401, 0x7, 0xd, 0x5, 0x476a, 'gre0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0x44}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@loopback, @rand_addr=0x64010100, 0xff000000, 0xff000000, 0xa, 0xe, {@mac=@link_local, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x2, 0x1ff, 0x2, 0x955d, 0xe, 0x2, 'gretap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x9c}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 0x5, 0xc, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x4, 0x0, 0x8, 0x1, 0xe, 'geneve0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x28c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @mac=@local, @rand_addr=0x64010100, @multicast1, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r14 = syz_usb_connect$cdc_ncm(0x5, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x81, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1b1e2fe16e"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x6, 0x24}, {0x6, 0x24, 0x1a, 0x0, 0xc}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x1, [0x2]}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x5, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8b, 0x3, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x0, 0x2e, 0x8, 0x5}, 0x84, &(0x7f0000000900)={0x5, 0xf, 0x84, 0x3, [@generic={0x5d, 0x10, 0xa, "e3a75116d08372a70cf7695a76473909645dcfbca7c9452fc829b46e3b53c073f04f4f781e20b3b8b9871a68c1001eca9f939aee3cbccae595adcbedf863679ebf366d69abf996f5092d5e31ee1bf161f159935b41752315d0c4"}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0xf87, 0x7800, 0x7, [0xffc0cf, 0xff00, 0xc0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x3, 0xca}]}, 0x1, [{0x37, &(0x7f0000000080)=@string={0x37, 0x3, "d7409afa7a021215bd3b4754adf0d26e4a4d14eba8900803a480d2611b8df6550877b3ee47c053c670554a8372b9a28a01b85dee2c"}}]}) syz_usb_control_io$cdc_ncm(r14, &(0x7f0000000280)={0x14, &(0x7f00000009c0)={0x20, 0x9, 0xd3, {0xd3, 0x2, "c31f88ca518671d1f0aa3573628c25082a135349ab5b63a8baa87728e3adc6d48cfc6b24e588292d461b3cecb77e14f23023eda6b3152b3083c7728a18d6eb6a52a0c4958f312023e40ce56da456c30f58b68a4103689e65a841c554dcad173eb40473d89e397254451df1aed060f5796eecbc9850cd87c555b17dd3bf21a407fc7672f06af02946828f50bd51d4a0333a7838c7f72351b883ff44ffdb9529d35b8484b61a005c5a07386368fb357da024dfff29f2c1329d905fccc8fc4210946736b59dbbb6494b99f7b4658e7272cda8"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x20, 0x3, 0xf0, "0fe2f3a7717640c66f26b37584a1289f36afd1a09b5d7b9a934988c0982395d873ec498bd0f6165df7c7210205a94e182e485f1a357dabb0e9471e2ea7c87bf07532864dcc833fd3e107b81c38d53f3def4f86d76c2f64462d29a27e416c9f5e96f4a23a8756a65f4a6698cca8f7a79c761e97e8a83de048f1a756b3f1640eb0395792c0ee9ed224462fee718d7d901c529274786328edb29175f9d6aa35eac8b7798db75b2beabbc382209612818b0e9c6b64143126d759d44018845aebb0058f4f2cd929208a7e932da61415c4dffab8ba155fbf917b64c9d6d633195c12628cfd7441d901557cc68f49f3dbcabf33"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0x1f80, 0x9, 0x6584, 0xffff, 0xa, 0x6, 0x3, 0xf44, 0x1, 0x3ff}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000cc0)={0x20, 0x83, 0x2}, &(0x7f0000000d00)={0x20, 0x87, 0x2, 0x3f8}, &(0x7f0000000d40)={0x20, 0x89, 0x2, 0x1}}) writev(r13, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 27.754788075s ago: executing program 7 (id=4540): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001be000001000076fa000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) write$UHID_INPUT(r1, &(0x7f0000001740)={0x8, {"b0084407b9fd0fb21fdf0a24d45cb8da24cf14d6946f3b72126fbaddbbd4cc076c41c349dee84adb5de5c50cf09cabd9357265cf0e0cf055fc7bedb48523261117fe1d98db5344582d684421d2e43583eaf264063e6128a059b97da6581fee4fd88bf3fdad33d4cc82fdff3f64d8362bc56b0e0995d371f2f22ce0a3cb847e1ff608b0fd36df0c59addd68fb1e0382d815f6c128669ac626ccf44866bfb254f2ad962648a2aace17dd41296f8e43a7644b2037b105e6c248c27279b3ff4f480c0dc6bc015adccdbc217d1515b9626dc95e8b73522701c743fd9ed48b5ef7e394a2a4981f584be7020206908e93ed1d7e7b5bad6818ac577b1a146bd0aa7354803514325e6e837fdae96a8021f7a8d313624ae75b2a8d04dd14d48ec68bc1e6b214c5cd62a87380d9965e08a98684e5ec3550661c873da3aed20f94148d39600964431474fbf22484736acace5ed21d389734ab9856b93d47e7b428135d52cb0900765bfe8ef08061a981c11caac4567202a8e0217ac5bd7f2924f3545776aca3b4db27a5506f5b3dbced295cc9b10bbb1e436e89b1d6b99a78684a613266f48376fd714903b9c49eeb3e5d7816586205cfa476ff9c581f8beb0bd34b1c3060c5bfb2e9aef4083218f8a23c5fd37ff64777b79b38e3bea84daeb952ef8ceedd41fc19ded6d24099907eac7ab847df161880541de75b2c27667c60b16e38d45869a34ee952ca37a21523aa658ca4fb337b452d2da254af46d7e46cd7cc39e4e47a8c56cded99455657a24ca53b907c2cef732dfa6b0fcfc3257534e6f904ff2a493a67fadcc555dbed3008c686a408051ea66762295b016d15bd4df49f07436ccd41dc3c6495666b5c27f2d8fd6f162cefd8154cf06ec96292d0635e7cf176ccc2b3c5f2be0ac5a11b65ef30e4f0034fe21619ab35b140c458b9a9a2af7fefc323b93cdc49dcf52fe703bc8a1d4567e9de75db03b0aa2b591d5769e5b59705a83a90c2a123337024a288ea4b3724535c2530cebb7e8265fa2445d94508e4519eec5027b5d217f018562a17b470f30ec6f338be42447098666684c6133a6b9cd2c4afa79cbf912a4304a7a5d03fb2e038a38ada00ef398c7f64889c5d64dced084142022f887f216b6755fa81912fa6ae430500a9f5ef608953f576d703337311ce930c4c53b7f7d1c62b06c279e6227da5a4e7d012881dd0f6029cd870faf8883b32d8c5d1acdadb57803e6eeb47db56ce18283767f29a438031b6b964be56c941b4a677f463efa2f9f1d90ce401d76202131ae279fcad73742af904bd1d500db3262a8ea627d6c538c2847800829d285b5864d432031a3d179c2ccfe76f1071e955d1d991a02b8d029e18868f7aed77aae370e41ce9f0ef4ec67c3fa3add1f7100158730ceddea3b6116e350fbaef0dbd30beb166a8d18a90be7478e6d6e7913df0aa0746fd343652a4e23e2992cda1a16825a73918b1b52e107af0ed6f13a5f8567389f4f76ba47806c4fc31e4d3347ff9dd3a1246276e1a21a7e90d7f0de8aa5de3d67b3588f10700702f1fe24a8c9222b0f3a780de5d4d26dd75fb4d3e8c20f48e3a9a4a2a33f4a067297d6c2d74ce685f7b1a80f2b2c0c3580ba8d02c55e325e516d0ac48f1e5ccd6f149e0eb453c6eaf1187c32714182dd7d211e32b209d690df6a7ced89ba47df180a8c6236fb31a8854e9a795eb8285b7238043ee6a693794c96a996f77640975293ffd9b0049ffa1c2475b02bd5e66fd94780646b02b6fd52feee28b0c543ef7602fa6fdb30d2aac8d244cb2365c60b31eb5ff7d13c6f90c078d5bd8b88e4c4991be4ec0c60718f45ab17156528dbb8a97d52f3b0831640a48daaa3c543d195cb21440cc39d6c612f10b5af18fe9514ccde18383c084a7afaf52035f7e9931d518dc1c460020689f2847139cee76ce13aa9abbb50e3b39bf7085d1c3e305f3f71c27db86e216faf47d7326ca8ebb90fecc056a756fb7d097e7fb3bec5a07ba45e93a4e7e6f5be3cedb0531369ce75ca4da25bdf1bad949bb03c87e95ed401ef051b83461d1c58439207ec59fce9d4055617aa14f5ea18ce05a00c482ec6cc1f4a36a5b9abd82926ffcbb04dcefa81ac2d9e895c6ddb5f076952637fefbaf3772e1964f6848c446514f2c9c5600364e42b57e80b4b0da37b853b5fa11ebf9e0d8b3a05227d86b2bcd3f0ba898ef54ba1c3001cec0aa1bd9f286faddff59f1a6421912c3a6e5eca2482732ca998b1bb958ff60e537dc3a2e391edfe9fda8a058865b87d09040f043581558238eef3d0eaabceec4ad83f1ca70e5257c4aef93580d3c3d685d567761e0f9883787f2f47fe4e48c3a817e388a83e974decb4295808d2fb0d99ff469950baa2e23aa067bafa35268473629cc3fba4a118e233d9c578cc3bd6f4983dd8a3c6283a7dce3141d94eb9ef6c081c553bed36aa8f8936e0569d3cea8161dc60108fadaf37642b0c4cc9c7396b17de368a940a903f6c2bb7f0c0cb9d3db034b6401fe584d4b1729870984c5c16f05b2d23cf91d0438fa7d27cfea7ba1ef67cb638ba2fa4be69470b00358f78ebd911000f437d87a1ffdf9cae35c2e9ccf09a9bd9b3ae1fc9a5dbfee3bba1f5874d255c2d23709bdd6eec9131a88a65d994506e7bc5d6a921f590854763c5a04e35639fc4be67131dc1c3c86a0690bae8bb59ce52422577cced8ab1eefe36c78718fbb81aabba3c58bc40c5032f825587357444a7c8f43666eb493e24d6eb23399239c18445eae8da1443851c7806fae4857926c67015dae7d990baf01267f727e85bd9dfac234478ae1d60b39bbc725d8d77cbad132fa3437b3246dd16f3d4318cdee5ee80336c64e7efcf5ae06ebf2060d61b144af72dfa0de1e605931c9ab8eb44c0668c97ced3a8b3519d8c2b82692348aebf2babebcd2d53bd3894a8ccaff91f4abbd8c667c38535565546eb4924b40247ffcb03cb469c817bba3ccf2f57a84f92052c171e0f84a9531d0d10988a13918a711fed45fbd0d3d0bc898095a0e747cbf3a72587c7d193ae108168e82dd4f82073b568e0a2031d659b7a138cb59a78e8e6c1eff56d6c07eed3802a6125e5d3104a8dc863d51a77e655092de5d35ae867d695b78400f0f0d1a3dd43f43748967f42d9d823c7ddf52e20eb5451c32392102528d7ea89d11f118ec3f8fdcc9f5e79e9683f9bb397e61baefc5f648a4116200a34610c576cd34b19c8248dd388162fa091726e1cdca2da048164e211bd34c1bfb553d951d3c36aa2417a1132f6b3f8969eb7059d04fa8c90577b979a8588848bf5c63b74f41dba5a658f2a2e8c692fda69880ddbfe8172101c705660f2ea8cdbfa5b43376254824c85da0cdf8c5e8fb1eab0fbcf722d19fb69692788e530b54a12f030c5a3a350df64439f8c2d9d7086134bd3e10eeca3e3900a54b13ed4f773f14d0ae0719fbbab5e53e07d502642ac84e1b99b395afb9a7585a1be5b31f043bb29a5d2b1aba98edf6f078a23b9543dbd4ed989a1763845698d9239aae86b2db9fcf5e58b965f34b1a64d0d1ce1f4624a90a4d80482fe1fb58b7006c847691593949858045cf93b3141e6aa0e85cde8fe6ad7f7a09af81204fb6e101d499a758b7a5c825051bf420b7c59678ae3fb31d5903ba2e29eb38d1a4891f98ed08394b9e32fb3aa75ae285cd9c92512512597bba909b6b73aeac15e49b0b70d6257b00dc5ece5bbbddc528edba0b7371e0ed7c318554119585a25692092e8245cc50c59b984a482d3ca9616ebd25ac183ffd0f5fecd6e2960dbf57820f3989b7859594c8b1f69166531eadee92f18b386c4b277bc939761fd59f86a7dbb88bcf23b6eb3a2e14e449c7808ab0e0fb54fd5b30031011576a69258330f651feec1efbd0b534506bb1d4f86b9ae41bb6721cb5c2086aa9ef902f121d9483e6be78605d8b642300e00dff3567e3a26b155d9d881f6ee0769a2cfeaa1f26927153182766c5390826bc8e8723ed565f922a6b68c9c745daf322a778e82aaa65d3f8cf9ab091409b02a0cc2042d777608152157f8b9ebd455a6c7a9b614aa87c1640a3b325b69f8c7f06699f254b2e5ec1d38cd3d02e9227bd2c98895c25dc770ed5debf8cdc42b9c7a290473fa9b9f8a53899c1cf363c36f46999f0f742201ae7657e3561ff5973173c17bd3cb4174a25f8ff1cb42b2d15a570dea98855e6b254a22034052cf1dcae3f5ebe439efc2674d47e73ca4261fbf72537b5e87d161d286f4f5f52fc60061d6c92a0761cc76aef14d8c4275c05737361597c13326c40302fa3c293f4d6d918b0098ceac702d38bbcc0dc8a26d980bdb476bdb9dcbf3ebe50c97da2c4d1083da2b5e7979816160a138fae6a429a27a1c0d3f10b7a852f822cd8f11aa46614394cdc0d6b34450f36a5c7eee0d53b4be883e9fb013d2f2e61edd68b11e5d707cadab2492e155ec6e6b6290091b59c4c0bfa101821459ae440c2a8257a29e637f0e231b47e7ddca20d87831e73a9364674f5cb7c7f114e42173e25a1fb1bd46f312e11f3d27c0fbdac398a918edcb9e90f82b0c66a5198b35596ce2497b5088ce3012cbc6fb142a0bec8130021825e7730c0d5e4609a300555f7194bc48fddfa453f53735e49ecd443d5888e5c625b4cdc0002a05fce9ed7a479cb5d5abc25b66904c8ad9ac020fe31bc670f0ebb709f128fcfde2b706fde8b168be49376600895a1fd3e3d438ca03a134e24ada5d4e360a80bda6ac88f6714f7328a7f1f76ea925295cc5da65ea0e5f5488eb4230e0f04c97cef2a00b82bcdae06247945f83b2bf6821e62e5e09b44bf8b5fab7fc54da1f7d95d6854a7d019ffdd90c6cbbdc3089982340677a52d0fab2a71edc003da5a975b19de29e3b09add2134b0b44538e740150d54f772cf952cbeb140b9602edbabca733e7af825fd50ecb0472e6939f07821d51299b05987e1699f5329dcc5b87c8b88e14b2851769d87a0dd643c2519c107158e1a92d53eeeb9e88101c5d264df2f4ab57e63d439c10ae98eb6d67288f4be3f547718c4cfa3957f8987d1ca2748ae5003817275a151f16c3cff971edf714e137d2797e4b20a8a5626f571572ecc56e5bb5461b50f8972a1200dabf250f34882f732337e7becbc5ae78493e94ceccfa8fec9e68fcf89b7dc838afc27c00d5566b72dd343e78e8b904a53c5b6efa1b33bfa22249feb0d3c2d237d8802f057de71f57e6bb2e4a9ad48d260f25e84dc8b8eae8ca7285ae89d451653d43d2636a4c64d2439195661cb0109ebff2ebbd03c174b8425d3bc6cb8d09618c02b098ef4f8889c41dfdc27507d65e47a74330191431bad7ef01c2f07e4c93961cca8e9300906beee35d8fabbfb4a13abb11be53e8726dc5daa146490b5045670f70175d302c7c53c100dc45299c647a0e5f538bb2890ec2a6d5a9ec82c349114b5cb54041d014521313db45213ef9a76c8deb455afadad2decdbcb554ee603efb796813fb52ea728a48b9718cf047c5a88f25393a8509509d7f7474916160c3afcee149969691fc8184b3799c597f32a0fb68fec81d7260b5f5973721e06ab5b5a58ecdff07f87c25eb23a32ead2f760e9abfb32493985e67faa17342c67494b85b119a9e8340d2c8d1da37651692463d906a326cfc6054f07c85c86454602262b243eef9ffd2c1f6a9347cb64505c666222e3eb5d4d306d5adebab7164923a7830db53697bbc0da8d9c46a1f5a4cc13bb6403030f33e96f8912fa2e6baf8f4b92f131f3927e99abf2d7d315d16e64854ca3cbe9117dc0eb3a60f9759ac7", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f00000011c0)=""/201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff290000003b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x7ffffe, 0x4, 0x0) syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x40080) 26.60578241s ago: executing program 7 (id=4552): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="1f55f2c7c22b372f", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)='*', 0x1}, {0x0, 0x500}], 0x2}}], 0x2, 0x0) 26.382982911s ago: executing program 7 (id=4559): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 26.382790591s ago: executing program 42 (id=4559): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13.025407041s ago: executing program 5 (id=4801): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000280), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x200000, 0x0, &(0x7f0000000080)) 12.999232111s ago: executing program 5 (id=4802): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x1}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 12.944139402s ago: executing program 5 (id=4804): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "df3e0400000000000000000000000609000040"}) r3 = syz_open_pts(r2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) dup3(r3, r2, 0x0) 12.691145533s ago: executing program 5 (id=4807): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 11.876983227s ago: executing program 5 (id=4819): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) (fail_nth: 12) 11.522499468s ago: executing program 5 (id=4826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket(0x1d, 0x2, 0x6) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000100)={[{@sysvgroups}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x8001}}, {@grpjquota}]}, 0xfe, 0x244, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x2) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) 11.517012908s ago: executing program 43 (id=4826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket(0x1d, 0x2, 0x6) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000100)={[{@sysvgroups}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x8001}}, {@grpjquota}]}, 0xfe, 0x244, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x2) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) 2.806345017s ago: executing program 0 (id=5013): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(&(0x7f0000000080), &(0x7f00000001c0), 0x6, &(0x7f0000b2e000/0x4000)=nil, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000380)='./file2\x00', 0x844010, &(0x7f0000000740)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 2.407989499s ago: executing program 0 (id=5020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.13256412s ago: executing program 0 (id=5023): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x1}, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (fail_nth: 5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) syz_io_uring_setup(0x100, &(0x7f0000000580)={0x0, 0xfad6, 0x200}, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0x0) 1.805162702s ago: executing program 0 (id=5030): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0xfffffffc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x8, 0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) listen(r6, 0x0) shutdown(r6, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x8, @remote, 0x10}, 0x1c) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r10, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x20004040) 1.422950683s ago: executing program 2 (id=5041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x20, 0x0) (fail_nth: 3) 1.144461385s ago: executing program 2 (id=5044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x8e00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.127136085s ago: executing program 8 (id=5045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.086299865s ago: executing program 8 (id=5046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 1.077243085s ago: executing program 2 (id=5047): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) socket$inet6(0xa, 0x2, 0x3a) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 1.002192626s ago: executing program 2 (id=5049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (fail_nth: 12) 996.951035ms ago: executing program 8 (id=5050): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x4040, 0x88, 0x8}, 0x18) 934.716395ms ago: executing program 2 (id=5052): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 933.974536ms ago: executing program 8 (id=5053): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001e80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)={0x238, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x238}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040000) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) read$msr(r4, &(0x7f0000000200)=""/35, 0x23) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)={0x58, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x3a}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000e80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000f80)=@newchain={0xc38, 0x64, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xc, 0xc}, {0x9, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x8bc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9e}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_FW_POLICE={0x89c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb3c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x1, 0xfd8, 0x0, 0x1ff, 0x2, 0x6, 0x2, 0x45, 0x3, 0x40, 0x9, 0xa45, 0x2, 0xfffffffd, 0xc, 0x3, 0x5, 0x9, 0xca, 0x6, 0x6, 0x1, 0x0, 0x1, 0xfff, 0x8000, 0x2, 0x7, 0x800, 0x3, 0x7, 0x6, 0x3, 0xff, 0xfff, 0x451d3b07, 0x8, 0x7f, 0x101, 0x8, 0x8, 0x9, 0x7, 0x1, 0x6, 0x6, 0x401, 0x8000, 0x9, 0x1, 0x2c0000, 0x1, 0x3, 0x1, 0x7, 0x2, 0x6, 0xee, 0x5be, 0xa0, 0x140, 0xbf58, 0x9, 0x1, 0x9, 0x1, 0x3, 0x0, 0x10001, 0xee9e, 0x7fffffff, 0x7, 0x100, 0xa, 0x2, 0x3, 0xda01, 0xe, 0xfffffffd, 0x8, 0x7, 0x0, 0x5, 0x7, 0x8000, 0x6, 0x1, 0x0, 0x7fff, 0xf896, 0x8, 0x0, 0x1, 0x400, 0x4, 0x7, 0xb, 0x1, 0x21, 0x2, 0x1ff, 0x6, 0x8, 0x1000, 0x0, 0x9, 0xfffeffff, 0x5, 0x7fffffff, 0x8, 0x7, 0x2, 0x8, 0x400, 0x7c, 0x200, 0x23d, 0x8001, 0x55, 0x38, 0x1ff, 0x9, 0x7fffffff, 0x100, 0x3, 0x2, 0x3, 0x5, 0x618d, 0x8, 0x0, 0x2, 0x4da7, 0x8, 0x41, 0xffffffff, 0x9, 0x6, 0x6, 0x0, 0x6db0, 0x5, 0x24, 0x6, 0x100, 0x5b46, 0x42, 0x72, 0x8b, 0x0, 0x9585, 0x8, 0x1000, 0x4a91, 0x1, 0xf, 0x236d, 0x81, 0x0, 0x7e7, 0x5, 0x0, 0x0, 0x21, 0xfffffffa, 0x800, 0xb, 0xa853, 0x3, 0x80000001, 0x9, 0x5, 0x0, 0x1, 0x3, 0xfff, 0x6, 0x9, 0x3132, 0x2, 0x0, 0x0, 0x7f, 0x9, 0x56, 0x1, 0x10000, 0x7, 0x3, 0x9, 0x3, 0x7, 0x9, 0x7, 0x80, 0xfffffff9, 0x8766cfca, 0x3, 0x9, 0x8, 0x8, 0x9, 0x7, 0xc4d, 0xad00, 0x1, 0x9, 0xa26, 0x8, 0x0, 0x9, 0x4, 0x2, 0x2, 0xf1, 0x0, 0x2, 0x91, 0x3, 0x4db, 0x4, 0x7, 0x5f000000, 0x8, 0xa83b, 0x7f, 0x101, 0x5, 0xc5fa, 0xb, 0x4, 0x1000, 0x2, 0x236, 0x2, 0x0, 0x8000, 0x8, 0x4, 0x2, 0x5, 0x9, 0x4, 0x8950, 0x401, 0xb0, 0x1, 0x6, 0xcf2, 0x9, 0x5, 0x1, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x6, 0x3, 0x3, 0x200, 0x4f5d, 0x8, 0x7, 0x101, 0x2, 0x15a, 0x0, 0x1, 0x40, 0x29c, 0x10, 0x0, 0x5, 0x2, 0x181c, 0x9, 0xc64b, 0x93dc, 0x6, 0x0, 0xeb, 0x6, 0x0, 0x7ff, 0x2, 0x4, 0x0, 0x8, 0xfff, 0x7, 0x1000, 0x7, 0x9, 0x80000001, 0x6, 0x3ff, 0x1000, 0x2, 0x1d2, 0x10000, 0x9, 0xa, 0x8, 0x9, 0x1, 0x0, 0x4, 0x9, 0x7, 0xfff, 0x9, 0x1, 0x6, 0x8, 0x0, 0x8, 0x80000001, 0x0, 0x1, 0x35e6, 0x1, 0x1, 0x2, 0x10001, 0x6, 0x3, 0x8, 0x1, 0x8, 0x1, 0x800, 0x67, 0x9, 0x400, 0xa, 0x40, 0xc2f9, 0xff, 0x7, 0x9, 0x3, 0x2, 0x9, 0x8, 0x2, 0x4ee5bd82, 0x657, 0x1, 0x7, 0xd, 0x9, 0x2, 0x2, 0xe, 0x1de20000, 0x1, 0x67, 0x5, 0x0, 0x41, 0x4, 0xa9cd, 0xe, 0x1, 0x206196fc, 0x9, 0x8, 0x7, 0x7, 0x0, 0x663e, 0x1, 0x2, 0x4, 0x8, 0x81, 0x8, 0x2, 0x1, 0x0, 0xc, 0x7fcab04, 0x8, 0xe3171c3, 0x5, 0x0, 0xffffff81, 0x9, 0x0, 0x2, 0x9, 0x2, 0x8, 0x8, 0x625c, 0x7, 0xd45d, 0x57b, 0x9, 0x3, 0x2, 0x4, 0x9, 0x7, 0xffffff01, 0x40, 0x9, 0x1, 0x6d0, 0xf10, 0x7e5, 0x8, 0x8, 0x590, 0xffff, 0x80, 0xf1, 0x6, 0xd0a4, 0x0, 0x9, 0xe, 0x5, 0x7, 0x6, 0xbc, 0x10000, 0x5e2e, 0xf2, 0x1, 0xe, 0x8, 0x6, 0x3, 0xc37, 0x2, 0xfffffff6, 0xd, 0x5d4384ca, 0x2, 0xf, 0x7, 0x4, 0x5, 0x7, 0x2, 0x0, 0x4, 0xffffff7f, 0x7, 0x7, 0x6, 0xf9, 0x8, 0x0, 0x2, 0x1, 0x11, 0x0, 0x9, 0x1, 0xd, 0x6, 0x4, 0x401, 0xffff, 0x2, 0x7, 0x8000, 0x5, 0x1000, 0x0, 0x80000000, 0x4, 0x9, 0xfffffff3, 0x6e, 0x1ff, 0x3, 0xa, 0x26, 0xf, 0x4, 0x0, 0x9, 0x5, 0x7, 0x4, 0x2000000, 0x0, 0xf, 0x2, 0x6, 0x200, 0x1, 0x5, 0x3, 0x401, 0x6, 0x0, 0xa0, 0x28db, 0x7fffffff, 0x9, 0x4, 0xa6f6, 0x6, 0x30000, 0xfff, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5d, 0xfffffffffffffffb, 0x200, 0x5, 0x460, {0x5, 0x0, 0xc, 0x6, 0xbb, 0x8}, {0x9, 0x0, 0x8, 0x800, 0x8, 0x3}, 0x7f, 0xf, 0xd02}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd8db, 0x3, 0x613, 0x9, 0x0, {0x2, 0x1, 0x200, 0x6, 0xffff, 0x8}, {0x1, 0x0, 0x9, 0x3ff, 0xffff, 0x8}, 0x3, 0x80000001, 0x6}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x50}, @TCA_U32_DIVISOR={0x8, 0x4, 0xc}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_LINK={0x8, 0x3, 0xe}, @TCA_U32_CLASSID={0x8, 0x1, {0xfffc, 0xe}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x7e}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2e0, 0x2, [@TCA_CGROUP_ACT={0x2dc, 0x1, [@m_connmark={0xec, 0x19, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x7, 0x3, 0x2a7}, 0xfff}}]}, {0x9e, 0x6, "cfb093892a111d4d919373124f5e582fb5c8371aa291f577be68fa5d82e03d42a215f7f9778866b17bb5eb182c34445d8ae618f5a03499bccf936c3e6aeb2b14c299037cd04489e8d69e49bdf1647a228331b40312a66b8d433d569d507589e2f562dd0f86759a5fa716df61f44552f25055047b516ccc4769144106bca4171db2b6fc81502542a73ed21f2ff7cfab5fb3e3c02e1040836a33d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x104, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0xd2, 0x6, "59ef2de83e2d3ebc84dd9cf97eb0f470aabbd30d3c9a1ce2a96687be95def5338e3efa1f880bfd61c534bc3db3dc20edf59ddbfeb2e08d2a1c445fb945a9a017ea9687b6105db0bdf98254b040cbad5b80c1b875929b123ab2641d557ba24bb5a603e40422e377f64e3e7cec591125ad3c172c9f14701728079df275a55d6f409a4d1b83184570a39f4ccc8b3332176b32d7876b30689750f1118c627c12e37d59a83830a9c5e0a620b8e2afdfae39ec81651f8acfe361e304b15aa8ed660a65f2e40bb573f6ac1f9632218c4a3b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xe8, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x6, 0x3, 0x4}, 0x3a}}]}, {0x9f, 0x6, "3f2330efe2b0f6ebc38bd9b6cd07ab3aeeb262438027f7740bc972b4b9d0df96a2beda4c4ff0b906a79f51c5f92954d72a5b1bd66aea2b1c843e7f3e1ade9942858ba76ba3df1d6d20f08d4e01798e751ef3cca2068f38509b8d3f6bba6a1c2fa42362a8043707fa8dbee394eaae180a734fe056b5455065fcc54a99bb8fc1c706ba48a7040e085b3cc2a396b28902224835b0dc276714ea673751"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf1, 0x8}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0xc38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x73, 0x5a, 0x8, 0x0, 0x3, 0x80509, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x10042, 0x8, 0x1, 0xf, 0x1, 0x8, 0x9, 0x0, 0x0, 0x0, 0x7a}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r10], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@private=0xa010100, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x0, 0x9, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x8000, 0x401, 0x7, 0xd, 0x5, 0x476a, 'gre0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0x44}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@loopback, @rand_addr=0x64010100, 0xff000000, 0xff000000, 0xa, 0xe, {@mac=@link_local, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x2, 0x1ff, 0x2, 0x955d, 0xe, 0x2, 'gretap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x9c}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 0x5, 0xc, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x4, 0x0, 0x8, 0x1, 0xe, 'geneve0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x28c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @mac=@local, @rand_addr=0x64010100, @multicast1, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r13 = syz_usb_connect$cdc_ncm(0x5, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x81, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1b1e2fe16e"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x6, 0x24}, {0x6, 0x24, 0x1a, 0x0, 0xc}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x1, [0x2]}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x5, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8b, 0x3, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x0, 0x2e, 0x8, 0x5}, 0x84, &(0x7f0000000900)={0x5, 0xf, 0x84, 0x3, [@generic={0x5d, 0x10, 0xa, "e3a75116d08372a70cf7695a76473909645dcfbca7c9452fc829b46e3b53c073f04f4f781e20b3b8b9871a68c1001eca9f939aee3cbccae595adcbedf863679ebf366d69abf996f5092d5e31ee1bf161f159935b41752315d0c4"}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0xf87, 0x7800, 0x7, [0xffc0cf, 0xff00, 0xc0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x3, 0xca}]}, 0x1, [{0x37, &(0x7f0000000080)=@string={0x37, 0x3, "d7409afa7a021215bd3b4754adf0d26e4a4d14eba8900803a480d2611b8df6550877b3ee47c053c670554a8372b9a28a01b85dee2c"}}]}) syz_usb_control_io$cdc_ncm(r13, &(0x7f0000000280)={0x14, &(0x7f00000009c0)={0x20, 0x9, 0xd3, {0xd3, 0x2, "c31f88ca518671d1f0aa3573628c25082a135349ab5b63a8baa87728e3adc6d48cfc6b24e588292d461b3cecb77e14f23023eda6b3152b3083c7728a18d6eb6a52a0c4958f312023e40ce56da456c30f58b68a4103689e65a841c554dcad173eb40473d89e397254451df1aed060f5796eecbc9850cd87c555b17dd3bf21a407fc7672f06af02946828f50bd51d4a0333a7838c7f72351b883ff44ffdb9529d35b8484b61a005c5a07386368fb357da024dfff29f2c1329d905fccc8fc4210946736b59dbbb6494b99f7b4658e7272cda8"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x20, 0x3, 0xf0, "0fe2f3a7717640c66f26b37584a1289f36afd1a09b5d7b9a934988c0982395d873ec498bd0f6165df7c7210205a94e182e485f1a357dabb0e9471e2ea7c87bf07532864dcc833fd3e107b81c38d53f3def4f86d76c2f64462d29a27e416c9f5e96f4a23a8756a65f4a6698cca8f7a79c761e97e8a83de048f1a756b3f1640eb0395792c0ee9ed224462fee718d7d901c529274786328edb29175f9d6aa35eac8b7798db75b2beabbc382209612818b0e9c6b64143126d759d44018845aebb0058f4f2cd929208a7e932da61415c4dffab8ba155fbf917b64c9d6d633195c12628cfd7441d901557cc68f49f3dbcabf33"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0x1f80, 0x9, 0x6584, 0xffff, 0xa, 0x6, 0x3, 0xf44, 0x1, 0x3ff}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000cc0)={0x20, 0x83, 0x2}, &(0x7f0000000d00)={0x20, 0x87, 0x2, 0x3f8}, &(0x7f0000000d40)={0x20, 0x89, 0x2, 0x1}}) writev(r12, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 828.595196ms ago: executing program 0 (id=5054): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="001676df96e10080b7080000000e00007b8af800bfa200000000000007020000f8ffffffb703000008000000b704000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) 828.136336ms ago: executing program 2 (id=5055): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$watch_queue(r2, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 789.643896ms ago: executing program 1 (id=5057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x8e00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 780.902116ms ago: executing program 9 (id=5058): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x1}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 767.945416ms ago: executing program 1 (id=5059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) (fail_nth: 13) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 499.059408ms ago: executing program 9 (id=5060): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 462.818638ms ago: executing program 9 (id=5061): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 438.284888ms ago: executing program 9 (id=5062): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000170001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 404.534758ms ago: executing program 1 (id=5063): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x4040, 0x88, 0x8}, 0x18) 404.276268ms ago: executing program 1 (id=5064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="380100001000130728bd700000000000ac141422000000000000000000000000e000000100000000000000000000000000000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e00000020000000000000000000000000000000032000000ff0100000000000000000000000000010000000000000000d1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000481000000000001000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x24000070}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r2) socket$inet6(0xa, 0x2, 0x3a) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 349.247008ms ago: executing program 1 (id=5065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 348.961088ms ago: executing program 9 (id=5066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) 318.295398ms ago: executing program 9 (id=5067): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001e80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)={0x238, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x238}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040000) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) read$msr(r4, &(0x7f0000000200)=""/35, 0x23) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)={0x58, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x3a}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000e80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000f80)=@newchain={0xc38, 0x64, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xc, 0xc}, {0x9, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x8bc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9e}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_FW_POLICE={0x89c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb3c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x1, 0xfd8, 0x0, 0x1ff, 0x2, 0x6, 0x2, 0x45, 0x3, 0x40, 0x9, 0xa45, 0x2, 0xfffffffd, 0xc, 0x3, 0x5, 0x9, 0xca, 0x6, 0x6, 0x1, 0x0, 0x1, 0xfff, 0x8000, 0x2, 0x7, 0x800, 0x3, 0x7, 0x6, 0x3, 0xff, 0xfff, 0x451d3b07, 0x8, 0x7f, 0x101, 0x8, 0x8, 0x9, 0x7, 0x1, 0x6, 0x6, 0x401, 0x8000, 0x9, 0x1, 0x2c0000, 0x1, 0x3, 0x1, 0x7, 0x2, 0x6, 0xee, 0x5be, 0xa0, 0x140, 0xbf58, 0x9, 0x1, 0x9, 0x1, 0x3, 0x0, 0x10001, 0xee9e, 0x7fffffff, 0x7, 0x100, 0xa, 0x2, 0x3, 0xda01, 0xe, 0xfffffffd, 0x8, 0x7, 0x0, 0x5, 0x7, 0x8000, 0x6, 0x1, 0x0, 0x7fff, 0xf896, 0x8, 0x0, 0x1, 0x400, 0x4, 0x7, 0xb, 0x1, 0x21, 0x2, 0x1ff, 0x6, 0x8, 0x1000, 0x0, 0x9, 0xfffeffff, 0x5, 0x7fffffff, 0x8, 0x7, 0x2, 0x8, 0x400, 0x7c, 0x200, 0x23d, 0x8001, 0x55, 0x38, 0x1ff, 0x9, 0x7fffffff, 0x100, 0x3, 0x2, 0x3, 0x5, 0x618d, 0x8, 0x0, 0x2, 0x4da7, 0x8, 0x41, 0xffffffff, 0x9, 0x6, 0x6, 0x0, 0x6db0, 0x5, 0x24, 0x6, 0x100, 0x5b46, 0x42, 0x72, 0x8b, 0x0, 0x9585, 0x8, 0x1000, 0x4a91, 0x1, 0xf, 0x236d, 0x81, 0x0, 0x7e7, 0x5, 0x0, 0x0, 0x21, 0xfffffffa, 0x800, 0xb, 0xa853, 0x3, 0x80000001, 0x9, 0x5, 0x0, 0x1, 0x3, 0xfff, 0x6, 0x9, 0x3132, 0x2, 0x0, 0x0, 0x7f, 0x9, 0x56, 0x1, 0x10000, 0x7, 0x3, 0x9, 0x3, 0x7, 0x9, 0x7, 0x80, 0xfffffff9, 0x8766cfca, 0x3, 0x9, 0x8, 0x8, 0x9, 0x7, 0xc4d, 0xad00, 0x1, 0x9, 0xa26, 0x8, 0x0, 0x9, 0x4, 0x2, 0x2, 0xf1, 0x0, 0x2, 0x91, 0x3, 0x4db, 0x4, 0x7, 0x5f000000, 0x8, 0xa83b, 0x7f, 0x101, 0x5, 0xc5fa, 0xb, 0x4, 0x1000, 0x2, 0x236, 0x2, 0x0, 0x8000, 0x8, 0x4, 0x2, 0x5, 0x9, 0x4, 0x8950, 0x401, 0xb0, 0x1, 0x6, 0xcf2, 0x9, 0x5, 0x1, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x6, 0x3, 0x3, 0x200, 0x4f5d, 0x8, 0x7, 0x101, 0x2, 0x15a, 0x0, 0x1, 0x40, 0x29c, 0x10, 0x0, 0x5, 0x2, 0x181c, 0x9, 0xc64b, 0x93dc, 0x6, 0x0, 0xeb, 0x6, 0x0, 0x7ff, 0x2, 0x4, 0x0, 0x8, 0xfff, 0x7, 0x1000, 0x7, 0x9, 0x80000001, 0x6, 0x3ff, 0x1000, 0x2, 0x1d2, 0x10000, 0x9, 0xa, 0x8, 0x9, 0x1, 0x0, 0x4, 0x9, 0x7, 0xfff, 0x9, 0x1, 0x6, 0x8, 0x0, 0x8, 0x80000001, 0x0, 0x1, 0x35e6, 0x1, 0x1, 0x2, 0x10001, 0x6, 0x3, 0x8, 0x1, 0x8, 0x1, 0x800, 0x67, 0x9, 0x400, 0xa, 0x40, 0xc2f9, 0xff, 0x7, 0x9, 0x3, 0x2, 0x9, 0x8, 0x2, 0x4ee5bd82, 0x657, 0x1, 0x7, 0xd, 0x9, 0x2, 0x2, 0xe, 0x1de20000, 0x1, 0x67, 0x5, 0x0, 0x41, 0x4, 0xa9cd, 0xe, 0x1, 0x206196fc, 0x9, 0x8, 0x7, 0x7, 0x0, 0x663e, 0x1, 0x2, 0x4, 0x8, 0x81, 0x8, 0x2, 0x1, 0x0, 0xc, 0x7fcab04, 0x8, 0xe3171c3, 0x5, 0x0, 0xffffff81, 0x9, 0x0, 0x2, 0x9, 0x2, 0x8, 0x8, 0x625c, 0x7, 0xd45d, 0x57b, 0x9, 0x3, 0x2, 0x4, 0x9, 0x7, 0xffffff01, 0x40, 0x9, 0x1, 0x6d0, 0xf10, 0x7e5, 0x8, 0x8, 0x590, 0xffff, 0x80, 0xf1, 0x6, 0xd0a4, 0x0, 0x9, 0xe, 0x5, 0x7, 0x6, 0xbc, 0x10000, 0x5e2e, 0xf2, 0x1, 0xe, 0x8, 0x6, 0x3, 0xc37, 0x2, 0xfffffff6, 0xd, 0x5d4384ca, 0x2, 0xf, 0x7, 0x4, 0x5, 0x7, 0x2, 0x0, 0x4, 0xffffff7f, 0x7, 0x7, 0x6, 0xf9, 0x8, 0x0, 0x2, 0x1, 0x11, 0x0, 0x9, 0x1, 0xd, 0x6, 0x4, 0x401, 0xffff, 0x2, 0x7, 0x8000, 0x5, 0x1000, 0x0, 0x80000000, 0x4, 0x9, 0xfffffff3, 0x6e, 0x1ff, 0x3, 0xa, 0x26, 0xf, 0x4, 0x0, 0x9, 0x5, 0x7, 0x4, 0x2000000, 0x0, 0xf, 0x2, 0x6, 0x200, 0x1, 0x5, 0x3, 0x401, 0x6, 0x0, 0xa0, 0x28db, 0x7fffffff, 0x9, 0x4, 0xa6f6, 0x6, 0x30000, 0xfff, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5d, 0xfffffffffffffffb, 0x200, 0x5, 0x460, {0x5, 0x0, 0xc, 0x6, 0xbb, 0x8}, {0x9, 0x0, 0x8, 0x800, 0x8, 0x3}, 0x7f, 0xf, 0xd02}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd8db, 0x3, 0x613, 0x9, 0x0, {0x2, 0x1, 0x200, 0x6, 0xffff, 0x8}, {0x1, 0x0, 0x9, 0x3ff, 0xffff, 0x8}, 0x3, 0x80000001, 0x6}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x50}, @TCA_U32_DIVISOR={0x8, 0x4, 0xc}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_LINK={0x8, 0x3, 0xe}, @TCA_U32_CLASSID={0x8, 0x1, {0xfffc, 0xe}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x7e}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2e0, 0x2, [@TCA_CGROUP_ACT={0x2dc, 0x1, [@m_connmark={0xec, 0x19, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x7, 0x3, 0x2a7}, 0xfff}}]}, {0x9e, 0x6, "cfb093892a111d4d919373124f5e582fb5c8371aa291f577be68fa5d82e03d42a215f7f9778866b17bb5eb182c34445d8ae618f5a03499bccf936c3e6aeb2b14c299037cd04489e8d69e49bdf1647a228331b40312a66b8d433d569d507589e2f562dd0f86759a5fa716df61f44552f25055047b516ccc4769144106bca4171db2b6fc81502542a73ed21f2ff7cfab5fb3e3c02e1040836a33d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x104, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0xd2, 0x6, "59ef2de83e2d3ebc84dd9cf97eb0f470aabbd30d3c9a1ce2a96687be95def5338e3efa1f880bfd61c534bc3db3dc20edf59ddbfeb2e08d2a1c445fb945a9a017ea9687b6105db0bdf98254b040cbad5b80c1b875929b123ab2641d557ba24bb5a603e40422e377f64e3e7cec591125ad3c172c9f14701728079df275a55d6f409a4d1b83184570a39f4ccc8b3332176b32d7876b30689750f1118c627c12e37d59a83830a9c5e0a620b8e2afdfae39ec81651f8acfe361e304b15aa8ed660a65f2e40bb573f6ac1f9632218c4a3b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xe8, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x6, 0x3, 0x4}, 0x3a}}]}, {0x9f, 0x6, "3f2330efe2b0f6ebc38bd9b6cd07ab3aeeb262438027f7740bc972b4b9d0df96a2beda4c4ff0b906a79f51c5f92954d72a5b1bd66aea2b1c843e7f3e1ade9942858ba76ba3df1d6d20f08d4e01798e751ef3cca2068f38509b8d3f6bba6a1c2fa42362a8043707fa8dbee394eaae180a734fe056b5455065fcc54a99bb8fc1c706ba48a7040e085b3cc2a396b28902224835b0dc276714ea673751"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf1, 0x8}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0xc38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x73, 0x5a, 0x8, 0x0, 0x3, 0x80509, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x10042, 0x8, 0x1, 0xf, 0x1, 0x8, 0x9, 0x0, 0x0, 0x0, 0x7a}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r10], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@private=0xa010100, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x0, 0x9, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x8000, 0x401, 0x7, 0xd, 0x5, 0x476a, 'gre0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0x44}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@loopback, @rand_addr=0x64010100, 0xff000000, 0xff000000, 0xa, 0xe, {@mac=@link_local, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x2, 0x1ff, 0x2, 0x955d, 0xe, 0x2, 'gretap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x9c}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 0x5, 0xc, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x4, 0x0, 0x8, 0x1, 0xe, 'geneve0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x28c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @mac=@local, @rand_addr=0x64010100, @multicast1, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r13 = syz_usb_connect$cdc_ncm(0x5, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x81, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1b1e2fe16e"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x6, 0x24}, {0x6, 0x24, 0x1a, 0x0, 0xc}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x1, [0x2]}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x5, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8b, 0x3, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x0, 0x2e, 0x8, 0x5}, 0x84, &(0x7f0000000900)={0x5, 0xf, 0x84, 0x3, [@generic={0x5d, 0x10, 0xa, "e3a75116d08372a70cf7695a76473909645dcfbca7c9452fc829b46e3b53c073f04f4f781e20b3b8b9871a68c1001eca9f939aee3cbccae595adcbedf863679ebf366d69abf996f5092d5e31ee1bf161f159935b41752315d0c4"}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0xf87, 0x7800, 0x7, [0xffc0cf, 0xff00, 0xc0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x3, 0xca}]}, 0x1, [{0x37, &(0x7f0000000080)=@string={0x37, 0x3, "d7409afa7a021215bd3b4754adf0d26e4a4d14eba8900803a480d2611b8df6550877b3ee47c053c670554a8372b9a28a01b85dee2c"}}]}) syz_usb_control_io$cdc_ncm(r13, &(0x7f0000000280)={0x14, &(0x7f00000009c0)={0x20, 0x9, 0xd3, {0xd3, 0x2, "c31f88ca518671d1f0aa3573628c25082a135349ab5b63a8baa87728e3adc6d48cfc6b24e588292d461b3cecb77e14f23023eda6b3152b3083c7728a18d6eb6a52a0c4958f312023e40ce56da456c30f58b68a4103689e65a841c554dcad173eb40473d89e397254451df1aed060f5796eecbc9850cd87c555b17dd3bf21a407fc7672f06af02946828f50bd51d4a0333a7838c7f72351b883ff44ffdb9529d35b8484b61a005c5a07386368fb357da024dfff29f2c1329d905fccc8fc4210946736b59dbbb6494b99f7b4658e7272cda8"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x20, 0x3, 0xf0, "0fe2f3a7717640c66f26b37584a1289f36afd1a09b5d7b9a934988c0982395d873ec498bd0f6165df7c7210205a94e182e485f1a357dabb0e9471e2ea7c87bf07532864dcc833fd3e107b81c38d53f3def4f86d76c2f64462d29a27e416c9f5e96f4a23a8756a65f4a6698cca8f7a79c761e97e8a83de048f1a756b3f1640eb0395792c0ee9ed224462fee718d7d901c529274786328edb29175f9d6aa35eac8b7798db75b2beabbc382209612818b0e9c6b64143126d759d44018845aebb0058f4f2cd929208a7e932da61415c4dffab8ba155fbf917b64c9d6d633195c12628cfd7441d901557cc68f49f3dbcabf33"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0x1f80, 0x9, 0x6584, 0xffff, 0xa, 0x6, 0x3, 0xf44, 0x1, 0x3ff}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000cc0)={0x20, 0x83, 0x2}, &(0x7f0000000d00)={0x20, 0x87, 0x2, 0x3f8}, &(0x7f0000000d40)={0x20, 0x89, 0x2, 0x1}}) writev(r12, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 304.659789ms ago: executing program 8 (id=5068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 240.192459ms ago: executing program 8 (id=5069): ioperm(0x0, 0x3, 0x4) r0 = socket$kcm(0x15, 0x5, 0x0) ioperm(0x3ff, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x2, 0xe23, @broadcast}, 0x10, 0x0}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$igmp(0x2, 0x3, 0x2) unshare(0x6020400) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) dup2(r3, r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x3dd, &(0x7f00000008c0)="$eJzs3M1uG0UcAPD/bj5K0g8HiQMqHCyBIAiI60CAIiQKVz4uwANYSVoq3KZqjERLDgVx4sQBcePQF+DAA1QVQkLiFXgBVKlCaQ5wC1p713FjO8SKHdPk95NGnlmPO/Pf3a5mNrsTwLFVjogLETEREYsRUcq3p3mKW62U1XuwubG8tbmxnMT29kd/JZHk24p/K8k/T+aF+TQi/SbiqVvd7a7fuPlZrV5fvZ6XK40r1yrrN26+fPlK7dLqpdWr1dfPV6tLi29UXx1arD88+8L5iXcvnP3xj9Ldpenpmay/p/LvOuMYlnKU2/tkt6VhNzZm0+PuAAAA+5LmY//J5vi/FBPNXEspKhtj7RwAAAAwFNtv558AAADAEZaY+wMAAMARVzwH8GBzY7lIY3wc4dDdfyci5nbebd5qxz8Zj+V1pkb4fms5Iq49l5SyFCN6DxkAoNPdbPxzrtf4L40nO+qdiGiOh2aG3H55V7l7/JPeG3KTD8nGf29FxFbX+C8tqsxN5KXTzaHiVHLxcn31XESciYj5mDqRlat7tPHe3z992O+7LP5fk9NnipS1n33u1EjvTZ54+DcrtUbtIDF3uv9VxNnJXvEn7fFvEhGzB2hj4svbb/b77r/jH63t2xHP9zz+Oyv3JHuvT1Rpng+V4qzo9s/XP3/Qr/1xx58d/9m9459LOtdrWh+8jTuf/v50M9Mjqs75zyDn/3TycTNfzMu+qDUa16sR08n73dsXd35blIv6Wfzzz/T+/19c/5J8TatT+TVgUN9+98tLe9doxZ+lrP1iLngYsvhXBjr+g2deu/PbJ/3a7zz+vePPjn9rDbD5fMt+rn/77eBB9h0AAAA8KtLmfY0kXWjn03RhoXW/44mYTetr640XL659fnWldf9jLqbS4k5XqeN+aLX1Z/R2eXFX+ZWIeDwivi/NNMsLy2v1lXEHDwAAAMfEyT7z/8yfh/YUAgAAADByc+PuAAAAADBy5v8AAABwpB1kXb/jm8n23P+gGzIyI8uM+8oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaPs3AAD//9oMtCQ=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1) open_by_handle_at(r7, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x30326e) 222.856808ms ago: executing program 1 (id=5070): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0xff2e) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r2, 0x0) r6 = dup3(r5, r2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000008, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r9, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 0s ago: executing program 0 (id=5071): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0xff2e) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r2, 0x0) r6 = dup3(r5, r2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000008, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r9, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) kernel console output (not intermixed with test programs): ock 0, lost sync page write [ 299.742251][T16557] EXT4-fs (loop7): I/O error while writing superblock [ 299.751329][T16557] EXT4-fs error (device loop7): ext4_get_inode_loc:4573: inode #18: block 6: comm syz.7.4540: unable to read itable block [ 299.864699][T16557] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 299.890296][T16557] EXT4-fs (loop7): I/O error while writing superblock [ 299.897186][T16557] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: IO failure [ 299.907801][T16578] syz.8.4549[16578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.912353][T16578] loop8: detected capacity change from 0 to 256 [ 299.929446][T16580] netlink: 54 bytes leftover after parsing attributes in process `syz.5.4550'. [ 299.951667][T16557] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 299.952861][T16580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.961279][T16557] EXT4-fs (loop7): I/O error while writing superblock [ 299.975242][T16557] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #18: comm syz.7.4540: mark_inode_dirty error [ 299.988790][T16580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.989202][T16557] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 300.008961][T16557] EXT4-fs (loop7): I/O error while writing superblock [ 300.015996][T16557] EXT4-fs error (device loop7): ext4_wait_block_bitmap:584: comm syz.7.4540: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 300.031784][T16557] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 300.040283][T16557] EXT4-fs error (device loop7): ext4_wait_block_bitmap:584: comm syz.7.4540: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 300.056402][T16557] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 300.231797][T16593] loop8: detected capacity change from 0 to 512 [ 300.262423][T16593] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 300.274284][T16593] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4557: invalid indirect mapped block 4294967295 (level 0) [ 300.289010][T16593] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4557: invalid indirect mapped block 4294967295 (level 1) [ 300.303851][T16593] EXT4-fs (loop8): 1 orphan inode deleted [ 300.309675][T16593] EXT4-fs (loop8): 1 truncate cleaned up [ 300.313757][T11987] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.324901][T16593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.342886][T16595] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 300.353722][T16593] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 300.408482][T11987] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.552928][T11987] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.618522][T11987] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.757494][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.769494][T11987] bridge_slave_1: left allmulticast mode [ 300.775224][T11987] bridge_slave_1: left promiscuous mode [ 300.780930][T11987] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.829075][T11987] bridge_slave_0: left allmulticast mode [ 300.834852][T11987] bridge_slave_0: left promiscuous mode [ 300.840704][T11987] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.923395][T16633] loop8: detected capacity change from 0 to 1024 [ 300.930603][T11987] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 300.941725][T16633] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 300.967630][T16633] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4567: Invalid block bitmap block 0 in block_group 0 [ 300.982158][T16633] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4567: Failed to acquire dquot type 0 [ 300.995516][T16633] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.4567: Freeing blocks not in datazone - block = 0, count = 4096 [ 301.009341][T16633] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4567: Invalid inode bitmap blk 0 in block_group 0 [ 301.010322][T11987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.025278][ T50] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 301.030810][T16633] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 301.050860][T16633] EXT4-fs (loop8): 1 orphan inode deleted [ 301.057045][T16633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.080981][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4567'. [ 301.094617][T11987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.105125][T11987] bond0 (unregistering): Released all slaves [ 301.117339][T16602] chnl_net:caif_netlink_parms(): no params data found [ 301.156802][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.187594][T16652] loop5: detected capacity change from 0 to 1024 [ 301.199147][T11987] hsr_slave_0: left promiscuous mode [ 301.205802][T11987] hsr_slave_1: left promiscuous mode [ 301.216272][T11987] veth1_vlan: left promiscuous mode [ 301.221721][T16652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.221739][T11987] veth0_vlan: left promiscuous mode [ 301.303771][T11987] team0 (unregistering): Port device team_slave_1 removed [ 301.313797][T11987] team0 (unregistering): Port device team_slave_0 removed [ 301.353312][T16602] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.360372][T16602] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.367674][T16602] bridge_slave_0: entered allmulticast mode [ 301.374555][T16602] bridge_slave_0: entered promiscuous mode [ 301.381284][T16602] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.388410][T16602] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.399987][T16602] bridge_slave_1: entered allmulticast mode [ 301.406620][T16602] bridge_slave_1: entered promiscuous mode [ 301.428633][T16602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.439803][T16602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.465617][T16602] team0: Port device team_slave_0 added [ 301.475598][T16602] team0: Port device team_slave_1 added [ 301.495173][T16602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.502221][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.528145][T16602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.539846][T16602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.546944][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.572977][T16602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.602601][T16602] hsr_slave_0: entered promiscuous mode [ 301.608753][T16602] hsr_slave_1: entered promiscuous mode [ 301.615150][T16602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.622996][T16602] Cannot create hsr debugfs directory [ 301.886513][T16602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.895203][T16602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.904547][T16602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.913746][T16602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.927921][T16602] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.935014][T16602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.942337][T16602] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.949401][T16602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.978956][T16602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.989941][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.998449][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.014215][T16602] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.031396][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.038562][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.074239][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.081377][ T6546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.160432][T14786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.186784][T16672] loop8: detected capacity change from 0 to 512 [ 302.207504][T16676] loop5: detected capacity change from 0 to 128 [ 302.222134][T16676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.229311][T16602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.238246][T16676] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.255027][T16676] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.291020][T16672] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 302.306269][T16672] EXT4-fs (loop8): mount failed [ 302.369636][T16602] veth0_vlan: entered promiscuous mode [ 302.383743][T16602] veth1_vlan: entered promiscuous mode [ 302.390526][T16696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4586'. [ 302.401481][T16696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4586'. [ 302.414243][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4586'. [ 302.418110][T16602] veth0_macvtap: entered promiscuous mode [ 302.433169][T16602] veth1_macvtap: entered promiscuous mode [ 302.458976][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.469532][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.470425][T16700] netlink: 'syz.1.4586': attribute type 10 has an invalid length. [ 302.479463][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.479484][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.508047][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.518636][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.528543][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.539074][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.549065][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.559673][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.569641][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.580104][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.590049][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.600537][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.611228][T16602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.621029][T16700] geneve1: entered promiscuous mode [ 302.634170][T16700] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 302.651794][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.662344][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.672215][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.682728][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.692638][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.703083][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.713008][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.723495][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.733396][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.743903][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.753804][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.764243][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.774100][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.784559][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.795678][T16602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.805836][T16602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.814645][T16602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.823474][T16602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.832656][T16602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.953454][T14786] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.986596][T16715] loop5: detected capacity change from 0 to 512 [ 302.994240][T16715] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.007974][T16715] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4590: invalid indirect mapped block 4294967295 (level 0) [ 303.024875][T16715] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4590: invalid indirect mapped block 4294967295 (level 1) [ 303.039535][T16715] EXT4-fs (loop5): 1 orphan inode deleted [ 303.045442][T16715] EXT4-fs (loop5): 1 truncate cleaned up [ 303.053861][T16715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.071119][T16715] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 303.378994][T16725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.426538][T16725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.455665][T14786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.567854][T16733] loop5: detected capacity change from 0 to 512 [ 303.604265][T16733] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 303.621069][T16733] EXT4-fs (loop5): mount failed [ 303.748447][T16747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4598'. [ 303.757892][T16747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4598'. [ 303.760284][T16750] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4599'. [ 303.786007][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4598'. [ 303.800002][T16747] netlink: 'syz.1.4598': attribute type 10 has an invalid length. [ 303.862607][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4599'. [ 304.036943][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 304.036962][ T29] audit: type=1400 audit(2000003021.440:26472): avc: denied { execmem } for pid=16767 comm="syz.2.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 304.195803][ T29] audit: type=1400 audit(2000003021.600:26473): avc: denied { create } for pid=16770 comm="syz.8.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.220773][ T29] audit: type=1400 audit(2000003021.630:26474): avc: denied { write } for pid=16770 comm="syz.8.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.312442][ T29] audit: type=1400 audit(2000003021.680:26475): avc: denied { write } for pid=16767 comm="syz.2.4605" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 304.335531][ T29] audit: type=1400 audit(2000003021.690:26476): avc: denied { write } for pid=16767 comm="syz.2.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.355167][ T29] audit: type=1400 audit(2000003021.690:26477): avc: denied { name_connect } for pid=16767 comm="syz.2.4605" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 304.388294][ T29] audit: type=1400 audit(2000003021.790:26478): avc: denied { ioctl } for pid=16767 comm="syz.2.4605" path="socket:[53803]" dev="sockfs" ino=53803 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.538418][ T29] audit: type=1400 audit(2000003021.850:26479): avc: denied { map } for pid=16770 comm="syz.8.4606" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 304.562605][ T29] audit: type=1400 audit(2000003021.850:26480): avc: denied { execute } for pid=16770 comm="syz.8.4606" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 304.575621][T16776] dvmrp0: entered allmulticast mode [ 304.623640][T16774] dvmrp0: left allmulticast mode [ 304.646928][ T29] audit: type=1400 audit(2000003022.050:26481): avc: denied { bind } for pid=16779 comm="syz.5.4608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.648495][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4608'. [ 304.676239][T16780] bridge_slave_1: left allmulticast mode [ 304.679513][T16776] loop8: detected capacity change from 0 to 512 [ 304.682089][T16780] bridge_slave_1: left promiscuous mode [ 304.694288][T16780] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.695703][T16776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.714302][T16780] bridge_slave_0: left allmulticast mode [ 304.720192][T16780] bridge_slave_0: left promiscuous mode [ 304.726009][T16780] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.776320][T16787] netlink: 'syz.0.4610': attribute type 3 has an invalid length. [ 304.788146][T16787] netlink: 'syz.0.4610': attribute type 10 has an invalid length. [ 304.796967][T16787] geneve1: entered promiscuous mode [ 304.809080][T16787] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 304.988008][T16801] netlink: 54 bytes leftover after parsing attributes in process `syz.2.4616'. [ 305.018656][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.037745][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.059324][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.414890][T16825] Invalid ELF header magic: != ELF [ 305.535987][T16827] loop8: detected capacity change from 0 to 512 [ 305.545681][T16827] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.4623: casefold flag without casefold feature [ 305.559773][T16827] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4623: couldn't read orphan inode 15 (err -117) [ 305.572862][T16827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.617966][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.660621][T16833] loop8: detected capacity change from 0 to 512 [ 305.695861][T16833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 305.716072][T16833] System zones: 0-2, 18-18, 34-34 [ 305.741110][T16833] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4625: bg 0: block 248: padding at end of block bitmap is not set [ 305.756114][T16833] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4625: Failed to acquire dquot type 1 [ 305.770824][T16833] EXT4-fs (loop8): 1 truncate cleaned up [ 305.777158][T16833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.789777][T16833] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.860037][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.870174][T16841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4628'. [ 305.879572][ T58] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 1 [ 305.880082][T16841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4628'. [ 305.908177][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4628'. [ 305.919070][T16841] netlink: 'syz.2.4628': attribute type 10 has an invalid length. [ 306.197335][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.205825][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.280618][T16863] FAULT_INJECTION: forcing a failure. [ 306.280618][T16863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.293767][T16863] CPU: 0 UID: 0 PID: 16863 Comm: syz.2.4636 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 306.305756][T16863] Tainted: [W]=WARN [ 306.309579][T16863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 306.319661][T16863] Call Trace: [ 306.323023][T16863] [ 306.325980][T16863] dump_stack_lvl+0xf2/0x150 [ 306.330624][T16863] dump_stack+0x15/0x1a [ 306.334863][T16863] should_fail_ex+0x223/0x230 [ 306.339567][T16863] should_fail+0xb/0x10 [ 306.343754][T16863] should_fail_usercopy+0x1a/0x20 [ 306.348916][T16863] _copy_to_user+0x20/0xa0 [ 306.353454][T16863] simple_read_from_buffer+0xa0/0x110 [ 306.358892][T16863] proc_fail_nth_read+0xf9/0x140 [ 306.363863][T16863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.369446][T16863] vfs_read+0x1a2/0x700 [ 306.373632][T16863] ? __rcu_read_unlock+0x4e/0x70 [ 306.378677][T16863] ? __fget_files+0x17c/0x1c0 [ 306.383560][T16863] ksys_read+0xe8/0x1b0 [ 306.387804][T16863] __x64_sys_read+0x42/0x50 [ 306.392346][T16863] x64_sys_call+0x2874/0x2dc0 [ 306.397053][T16863] do_syscall_64+0xc9/0x1c0 [ 306.401603][T16863] ? clear_bhb_loop+0x55/0xb0 [ 306.406433][T16863] ? clear_bhb_loop+0x55/0xb0 [ 306.411150][T16863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.417134][T16863] RIP: 0033:0x7fc8e07df25c [ 306.421575][T16863] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 306.441276][T16863] RSP: 002b:00007fc8dee57050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.449724][T16863] RAX: ffffffffffffffda RBX: 00007fc8e09a5fa0 RCX: 00007fc8e07df25c [ 306.457742][T16863] RDX: 000000000000000f RSI: 00007fc8dee570b0 RDI: 0000000000000006 [ 306.465772][T16863] RBP: 00007fc8dee570a0 R08: 0000000000000000 R09: 0000000000000000 [ 306.474027][T16863] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 306.482020][T16863] R13: 0000000000000000 R14: 00007fc8e09a5fa0 R15: 00007ffd00bf8bb8 [ 306.490103][T16863] [ 306.497354][T16868] syz.0.4637[16868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.497431][T16868] syz.0.4637[16868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.520994][T16868] syz.0.4637[16868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.775406][T16894] FAULT_INJECTION: forcing a failure. [ 306.775406][T16894] name failslab, interval 1, probability 0, space 0, times 0 [ 306.799622][T16894] CPU: 0 UID: 0 PID: 16894 Comm: syz.8.4647 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 306.811557][T16894] Tainted: [W]=WARN [ 306.815404][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 306.825490][T16894] Call Trace: [ 306.828822][T16894] [ 306.831774][T16894] dump_stack_lvl+0xf2/0x150 [ 306.836467][T16894] dump_stack+0x15/0x1a [ 306.840660][T16894] should_fail_ex+0x223/0x230 [ 306.845429][T16894] should_failslab+0x8f/0xb0 [ 306.850054][T16894] __kmalloc_noprof+0xab/0x3f0 [ 306.854909][T16894] ? memcg_list_lru_alloc+0x187/0x4e0 [ 306.860307][T16894] memcg_list_lru_alloc+0x187/0x4e0 [ 306.865698][T16894] __memcg_slab_post_alloc_hook+0x1a2/0x660 [ 306.871694][T16894] ? alloc_inode+0x6a/0x160 [ 306.876237][T16894] ? should_fail_ex+0xd7/0x230 [ 306.881028][T16894] kmem_cache_alloc_lru_noprof+0x230/0x320 [ 306.886893][T16894] ? alloc_inode+0x6a/0x160 [ 306.891427][T16894] alloc_inode+0x6a/0x160 [ 306.895808][T16894] new_inode_pseudo+0x15/0x20 [ 306.900616][T16894] alloc_anon_inode+0x1e/0x170 [ 306.905421][T16894] __se_sys_memfd_secret+0x122/0x2c0 [ 306.910744][T16894] __x64_sys_memfd_secret+0x1f/0x30 [ 306.915993][T16894] x64_sys_call+0x1b0f/0x2dc0 [ 306.920747][T16894] do_syscall_64+0xc9/0x1c0 [ 306.925333][T16894] ? clear_bhb_loop+0x55/0xb0 [ 306.930028][T16894] ? clear_bhb_loop+0x55/0xb0 [ 306.934724][T16894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.940641][T16894] RIP: 0033:0x7f0157030849 [ 306.945063][T16894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.964682][T16894] RSP: 002b:00007f01556a7058 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 306.973110][T16894] RAX: ffffffffffffffda RBX: 00007f01571f5fa0 RCX: 00007f0157030849 [ 306.981086][T16894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 306.989187][T16894] RBP: 00007f01556a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 306.997163][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.005140][T16894] R13: 0000000000000000 R14: 00007f01571f5fa0 R15: 00007ffdebcdc6a8 [ 307.013164][T16894] [ 307.020117][T16898] netlink: 'syz.0.4649': attribute type 29 has an invalid length. [ 307.028972][T16898] FAULT_INJECTION: forcing a failure. [ 307.028972][T16898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.042118][T16898] CPU: 0 UID: 0 PID: 16898 Comm: syz.0.4649 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 307.054155][T16898] Tainted: [W]=WARN [ 307.054332][T16900] loop8: detected capacity change from 0 to 1024 [ 307.057976][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 307.064782][T16900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.074365][T16898] Call Trace: [ 307.074376][T16898] [ 307.074386][T16898] dump_stack_lvl+0xf2/0x150 [ 307.082712][T16900] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 307.084254][T16898] dump_stack+0x15/0x1a [ 307.105831][T16898] should_fail_ex+0x223/0x230 [ 307.110607][T16898] should_fail+0xb/0x10 [ 307.114770][T16898] should_fail_usercopy+0x1a/0x20 [ 307.117482][T16900] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.119810][T16898] _copy_from_user+0x1e/0xb0 [ 307.136853][T16898] copy_msghdr_from_user+0x54/0x2a0 [ 307.138463][T16900] lo speed is unknown, defaulting to 1000 [ 307.142075][T16898] ? __fget_files+0x17c/0x1c0 [ 307.149189][T16900] lo speed is unknown, defaulting to 1000 [ 307.152500][T16898] __sys_recvmsg+0x140/0x260 [ 307.158739][T16900] lo speed is unknown, defaulting to 1000 [ 307.162828][T16898] __x64_sys_recvmsg+0x46/0x50 [ 307.162873][T16898] x64_sys_call+0xc64/0x2dc0 [ 307.162901][T16898] do_syscall_64+0xc9/0x1c0 [ 307.182522][T16898] ? clear_bhb_loop+0x55/0xb0 [ 307.187297][T16898] ? clear_bhb_loop+0x55/0xb0 [ 307.192133][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.198066][T16898] RIP: 0033:0x7ffb02390849 [ 307.202505][T16898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.204194][T16900] infiniband sz1: set active [ 307.222121][T16898] RSP: 002b:00007ffb00a07058 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 307.222147][T16898] RAX: ffffffffffffffda RBX: 00007ffb02555fa0 RCX: 00007ffb02390849 [ 307.222164][T16898] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 307.222179][T16898] RBP: 00007ffb00a070a0 R08: 0000000000000000 R09: 0000000000000000 [ 307.222195][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.222216][T16898] R13: 0000000000000000 R14: 00007ffb02555fa0 R15: 00007ffefedd0038 [ 307.222242][T16898] [ 307.226899][T16900] infiniband sz1: added lo [ 307.283290][ T3374] lo speed is unknown, defaulting to 1000 [ 307.296442][T16900] RDS/IB: sz1: added [ 307.300530][T16900] smc: adding ib device sz1 with port count 1 [ 307.307254][T16900] smc: ib device sz1 port 1 has pnetid [ 307.313550][ T8] lo speed is unknown, defaulting to 1000 [ 307.323005][T16900] lo speed is unknown, defaulting to 1000 [ 307.354837][T16912] syz.0.4654[16912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.354976][T16912] syz.0.4654[16912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.361918][T16900] lo speed is unknown, defaulting to 1000 [ 307.367772][T16912] syz.0.4654[16912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.407425][T16900] lo speed is unknown, defaulting to 1000 [ 307.450434][T16900] lo speed is unknown, defaulting to 1000 [ 307.485157][T16900] lo speed is unknown, defaulting to 1000 [ 307.525978][T16900] lo speed is unknown, defaulting to 1000 [ 307.563638][T16900] lo speed is unknown, defaulting to 1000 [ 307.609693][T16900] lo speed is unknown, defaulting to 1000 [ 307.660793][T16900] lo speed is unknown, defaulting to 1000 [ 307.740961][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.827371][T16945] syz.8.4665[16945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.827456][T16945] syz.8.4665[16945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.836071][T16942] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 307.839498][T16945] syz.8.4665[16945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.038877][T16947] loop8: detected capacity change from 0 to 256 [ 308.057291][T16947] vfat: Unknown parameter 'uni_xlate71' [ 308.156679][T16954] netlink: '+}[@': attribute type 29 has an invalid length. [ 308.165216][T16954] netlink: '+}[@': attribute type 29 has an invalid length. [ 308.385864][T16962] FAULT_INJECTION: forcing a failure. [ 308.385864][T16962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.399098][T16962] CPU: 1 UID: 0 PID: 16962 Comm: +}[@ Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 308.410504][T16962] Tainted: [W]=WARN [ 308.414383][T16962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.424459][T16962] Call Trace: [ 308.427744][T16962] [ 308.430782][T16962] dump_stack_lvl+0xf2/0x150 [ 308.435462][T16962] dump_stack+0x15/0x1a [ 308.439679][T16962] should_fail_ex+0x223/0x230 [ 308.444371][T16962] should_fail+0xb/0x10 [ 308.448538][T16962] should_fail_usercopy+0x1a/0x20 [ 308.453646][T16962] _copy_from_user+0x1e/0xb0 [ 308.458251][T16962] load_msg+0x17a/0x2c0 [ 308.462437][T16962] ? proc_fail_nth_write+0x12a/0x150 [ 308.467858][T16962] do_msgsnd+0xdd/0xaf0 [ 308.472100][T16962] ? __fget_files+0x17c/0x1c0 [ 308.476896][T16962] ? fput+0x1c4/0x200 [ 308.480980][T16962] __x64_sys_msgsnd+0xa1/0xc0 [ 308.485673][T16962] x64_sys_call+0x2752/0x2dc0 [ 308.490410][T16962] do_syscall_64+0xc9/0x1c0 [ 308.494941][T16962] ? clear_bhb_loop+0x55/0xb0 [ 308.499652][T16962] ? clear_bhb_loop+0x55/0xb0 [ 308.504470][T16962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.510381][T16962] RIP: 0033:0x7ffb02390849 [ 308.514815][T16962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.534584][T16962] RSP: 002b:00007ffb00a07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 308.543008][T16962] RAX: ffffffffffffffda RBX: 00007ffb02555fa0 RCX: 00007ffb02390849 [ 308.550986][T16962] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000000 [ 308.559024][T16962] RBP: 00007ffb00a070a0 R08: 0000000000000000 R09: 0000000000000000 [ 308.567014][T16962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.574997][T16962] R13: 0000000000000000 R14: 00007ffb02555fa0 R15: 00007ffefedd0038 [ 308.582989][T16962] [ 308.598925][T16968] netlink: 'syz.2.4675': attribute type 21 has an invalid length. [ 308.606947][T16968] netlink: 'syz.2.4675': attribute type 4 has an invalid length. [ 308.614825][T16968] netlink: 'syz.2.4675': attribute type 3 has an invalid length. [ 308.667789][T16977] syz.5.4678[16977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.717678][T16984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.740354][T16984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.854750][T16990] __nla_validate_parse: 18 callbacks suppressed [ 308.854768][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4683'. [ 308.972448][T16995] netlink: 54 bytes leftover after parsing attributes in process `syz.0.4685'. [ 308.985226][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.993812][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.051665][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 309.051681][ T29] audit: type=1400 audit(2000003026.441:26845): avc: denied { read write } for pid=13689 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.082802][ T29] audit: type=1400 audit(2000003026.441:26846): avc: denied { open } for pid=13689 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.107230][ T29] audit: type=1400 audit(2000003026.441:26847): avc: denied { ioctl } for pid=13689 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.133286][ T29] audit: type=1400 audit(2000003026.451:26848): avc: denied { map_create } for pid=16996 comm="syz.8.4686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 309.152751][ T29] audit: type=1400 audit(2000003026.451:26849): avc: denied { bpf } for pid=16996 comm="syz.8.4686" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.173502][ T29] audit: type=1400 audit(2000003026.451:26850): avc: denied { map_read map_write } for pid=16996 comm="syz.8.4686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 309.193526][ T29] audit: type=1400 audit(2000003026.461:26851): avc: denied { read } for pid=16996 comm="syz.8.4686" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.216756][ T29] audit: type=1400 audit(2000003026.461:26852): avc: denied { open } for pid=16996 comm="syz.8.4686" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.240892][ T29] audit: type=1400 audit(2000003026.461:26853): avc: denied { read write } for pid=16088 comm="syz-executor" name="loop1" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.264401][ T29] audit: type=1400 audit(2000003026.461:26854): avc: denied { open } for pid=16088 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.328450][T17003] bond0: (slave bond_slave_0): Releasing backup interface [ 309.347135][T17003] bond0: (slave bond_slave_1): Releasing backup interface [ 309.372286][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4688'. [ 309.379891][T17003] team0: Port device team_slave_0 removed [ 309.406310][T17003] team0: Port device team_slave_1 removed [ 309.425945][T17003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.433496][T17003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.444911][T17003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.452569][T17003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.469683][T17003] bond0: (slave geneve1): Releasing backup interface [ 309.487810][T17012] tipc: Enabling of bearer rejected, failed to enable media [ 309.574212][T17019] loop5: detected capacity change from 0 to 512 [ 309.586790][T17024] FAULT_INJECTION: forcing a failure. [ 309.586790][T17024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.587448][T17019] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 309.600240][T17024] CPU: 0 UID: 0 PID: 17024 Comm: syz.0.4696 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 309.610335][T17019] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 309.621909][T17024] Tainted: [W]=WARN [ 309.621920][T17024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.621936][T17024] Call Trace: [ 309.647952][T17024] [ 309.650960][T17024] dump_stack_lvl+0xf2/0x150 [ 309.655661][T17024] dump_stack+0x15/0x1a [ 309.659922][T17024] should_fail_ex+0x223/0x230 [ 309.664615][T17024] should_fail_alloc_page+0xfd/0x110 [ 309.670050][T17024] __alloc_pages_noprof+0x109/0x340 [ 309.675271][T17024] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 309.680726][T17024] alloc_pages_noprof+0xe1/0x100 [ 309.685682][T17024] pte_alloc_one+0x31/0x110 [ 309.690280][T17024] __pte_alloc+0x33/0x2a0 [ 309.694636][T17024] handle_mm_fault+0x1b4a/0x2ac0 [ 309.699605][T17024] exc_page_fault+0x3b9/0x650 [ 309.704443][T17024] asm_exc_page_fault+0x26/0x30 [ 309.709383][T17024] RIP: 0033:0x7ffb02251986 [ 309.713805][T17024] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 309.733426][T17024] RSP: 002b:00007ffb00a064c0 EFLAGS: 00010246 [ 309.739548][T17024] RAX: 0000000000000001 RBX: 00007ffb00a06560 RCX: 0000000000000101 [ 309.747557][T17024] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ffb00a06600 [ 309.755535][T17024] RBP: 0000000000000102 R08: 00007ffaf85e7000 R09: 0000000000000000 [ 309.763622][T17024] R10: 0000000000000000 R11: 00007ffb00a06570 R12: 0000000000000001 [ 309.771601][T17024] R13: 00007ffb02418320 R14: 0000000000000000 R15: 00007ffb00a06600 [ 309.779589][T17024] [ 309.782721][T17024] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 309.801436][T17024] loop0: detected capacity change from 0 to 512 [ 309.809206][T17019] netem: change failed [ 309.824813][T17024] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4696: couldn't read orphan inode 26 (err -116) [ 309.837449][T17024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.849680][T17032] netlink: 54 bytes leftover after parsing attributes in process `syz.2.4699'. [ 309.856207][T17024] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.863568][T17032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.877844][T17032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.933719][T17042] FAULT_INJECTION: forcing a failure. [ 309.933719][T17042] name failslab, interval 1, probability 0, space 0, times 0 [ 309.946421][T17042] CPU: 0 UID: 0 PID: 17042 Comm: syz.1.4703 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 309.958407][T17042] Tainted: [W]=WARN [ 309.962302][T17042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.972450][T17042] Call Trace: [ 309.975731][T17042] [ 309.978873][T17042] dump_stack_lvl+0xf2/0x150 [ 309.983540][T17042] dump_stack+0x15/0x1a [ 309.987715][T17042] should_fail_ex+0x223/0x230 [ 309.992420][T17042] should_failslab+0x8f/0xb0 [ 309.997096][T17042] __kmalloc_node_noprof+0xad/0x410 [ 310.002306][T17042] ? crypto_create_tfm_node+0x57/0x230 [ 310.007828][T17042] crypto_create_tfm_node+0x57/0x230 [ 310.013183][T17042] crypto_spawn_tfm2+0x43/0x70 [ 310.017985][T17042] crypto_gcm_init_tfm+0x56/0x100 [ 310.023154][T17042] ? __pfx_crypto_gcm_init_tfm+0x10/0x10 [ 310.028881][T17042] crypto_aead_init_tfm+0x9a/0xb0 [ 310.033973][T17042] crypto_create_tfm_node+0xe7/0x230 [ 310.039310][T17042] crypto_alloc_tfm_node+0xd1/0x250 [ 310.044527][T17042] crypto_alloc_aead+0x2f/0x40 [ 310.049439][T17042] macsec_validate_attr+0x109/0x600 [ 310.054695][T17042] rtnl_newlink+0x7cb/0x1200 [ 310.059392][T17042] ? free_unref_page_commit+0x67/0x270 [ 310.064936][T17042] ? bsearch+0x98/0xc0 [ 310.069021][T17042] ? __pfx_cmp_ex_search+0x10/0x10 [ 310.074199][T17042] ? rep_movs_alternative+0x13/0x70 [ 310.079438][T17042] ? fixup_exception+0x7c0/0xca0 [ 310.084442][T17042] ? memcg_list_lru_alloc+0xce/0x4e0 [ 310.089746][T17042] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 310.095219][T17042] ? __rcu_read_unlock+0x4e/0x70 [ 310.100203][T17042] ? avc_has_perm_noaudit+0x1cc/0x210 [ 310.105629][T17042] ? selinux_capable+0x1f2/0x260 [ 310.110592][T17042] ? security_capable+0x81/0x90 [ 310.115498][T17042] ? ns_capable+0x7d/0xb0 [ 310.119854][T17042] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.124918][T17042] rtnetlink_rcv_msg+0x651/0x710 [ 310.129934][T17042] ? ref_tracker_free+0x3a5/0x410 [ 310.134969][T17042] ? __dev_queue_xmit+0x186/0x2090 [ 310.140127][T17042] netlink_rcv_skb+0x12c/0x230 [ 310.145038][T17042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.150554][T17042] rtnetlink_rcv+0x1c/0x30 [ 310.155015][T17042] netlink_unicast+0x599/0x670 [ 310.159887][T17042] netlink_sendmsg+0x5cc/0x6e0 [ 310.164792][T17042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.170084][T17042] __sock_sendmsg+0x140/0x180 [ 310.174775][T17042] ____sys_sendmsg+0x312/0x410 [ 310.179644][T17042] __sys_sendmsg+0x19d/0x230 [ 310.184349][T17042] __x64_sys_sendmsg+0x46/0x50 [ 310.189215][T17042] x64_sys_call+0x2734/0x2dc0 [ 310.193901][T17042] do_syscall_64+0xc9/0x1c0 [ 310.198483][T17042] ? clear_bhb_loop+0x55/0xb0 [ 310.203240][T17042] ? clear_bhb_loop+0x55/0xb0 [ 310.207940][T17042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.213923][T17042] RIP: 0033:0x7f8990c30849 [ 310.218401][T17042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.238101][T17042] RSP: 002b:00007f898f2a7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.246525][T17042] RAX: ffffffffffffffda RBX: 00007f8990df5fa0 RCX: 00007f8990c30849 [ 310.254521][T17042] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 310.262497][T17042] RBP: 00007f898f2a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 310.270477][T17042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.278568][T17042] R13: 0000000000000000 R14: 00007f8990df5fa0 R15: 00007ffd0535a878 [ 310.286580][T17042] [ 310.299030][T16602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.308920][T17039] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 310.320547][T17039] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 310.479401][T17066] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 310.531126][T17076] FAULT_INJECTION: forcing a failure. [ 310.531126][T17076] name failslab, interval 1, probability 0, space 0, times 0 [ 310.544080][T17076] CPU: 0 UID: 0 PID: 17076 Comm: syz.5.4716 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 310.556049][T17076] Tainted: [W]=WARN [ 310.559856][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 310.569995][T17076] Call Trace: [ 310.573281][T17076] [ 310.576224][T17076] dump_stack_lvl+0xf2/0x150 [ 310.580933][T17076] dump_stack+0x15/0x1a [ 310.585140][T17076] should_fail_ex+0x223/0x230 [ 310.589881][T17076] should_failslab+0x8f/0xb0 [ 310.594565][T17076] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 310.600926][T17076] ? sidtab_sid2str_get+0xb8/0x140 [ 310.606102][T17076] kmemdup_noprof+0x2a/0x60 [ 310.610714][T17076] sidtab_sid2str_get+0xb8/0x140 [ 310.615669][T17076] security_sid_to_context_core+0x1eb/0x2f0 [ 310.621655][T17076] security_sid_to_context+0x27/0x30 [ 310.627058][T17076] avc_audit_post_callback+0x9d/0x530 [ 310.632454][T17076] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 310.638704][T17076] common_lsm_audit+0x90f/0x1010 [ 310.643714][T17076] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 310.649751][T17076] ? avc_denied+0xf1/0x110 [ 310.654196][T17076] slow_avc_audit+0xf9/0x140 [ 310.658809][T17076] avc_has_perm+0x129/0x160 [ 310.663364][T17076] selinux_socket_sendmsg+0x185/0x1c0 [ 310.668771][T17076] security_socket_sendmsg+0x47/0x80 [ 310.674149][T17076] __sock_sendmsg+0x2d/0x180 [ 310.678762][T17076] ____sys_sendmsg+0x312/0x410 [ 310.683556][T17076] __sys_sendmsg+0x19d/0x230 [ 310.688251][T17076] __x64_sys_sendmsg+0x46/0x50 [ 310.693049][T17076] x64_sys_call+0x2734/0x2dc0 [ 310.697735][T17076] do_syscall_64+0xc9/0x1c0 [ 310.702298][T17076] ? clear_bhb_loop+0x55/0xb0 [ 310.707082][T17076] ? clear_bhb_loop+0x55/0xb0 [ 310.711918][T17076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.717840][T17076] RIP: 0033:0x7fa6dd3f0849 [ 310.722281][T17076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.742232][T17076] RSP: 002b:00007fa6dba67058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.750660][T17076] RAX: ffffffffffffffda RBX: 00007fa6dd5b5fa0 RCX: 00007fa6dd3f0849 [ 310.758640][T17076] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000003 [ 310.766672][T17076] RBP: 00007fa6dba670a0 R08: 0000000000000000 R09: 0000000000000000 [ 310.774651][T17076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.782632][T17076] R13: 0000000000000000 R14: 00007fa6dd5b5fa0 R15: 00007ffccd89aa78 [ 310.790619][T17076] [ 310.799087][T17076] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4716'. [ 310.841767][T17081] loop1: detected capacity change from 0 to 512 [ 310.848698][T17081] EXT4-fs: Ignoring removed orlov option [ 310.857096][T17081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.878468][T17081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 310.885513][T17081] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4718: bg 0: block 248: padding at end of block bitmap is not set [ 310.917592][T17081] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.4718: Failed to acquire dquot type 1 [ 310.948455][T17081] EXT4-fs (loop1): 1 truncate cleaned up [ 310.956146][T17081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 310.971795][T17081] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 310.991247][T17081] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 311.006127][T17081] ext4 filesystem being remounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.034438][T16088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.069882][T17097] random: crng reseeded on system resumption [ 311.133894][T17101] netlink: 'syz.5.4726': attribute type 29 has an invalid length. [ 311.148006][T17101] netlink: 'syz.5.4726': attribute type 29 has an invalid length. [ 311.168054][T17101] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4726'. [ 311.193255][T17106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4729'. [ 311.206840][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 311.218353][T17106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4729'. [ 311.236056][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4729'. [ 311.255988][T17106] netlink: 'syz.1.4729': attribute type 10 has an invalid length. [ 311.273510][T17113] loop5: detected capacity change from 0 to 512 [ 311.324608][T17113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.350529][T17113] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.364310][T17113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.389926][T17123] loop1: detected capacity change from 0 to 2048 [ 311.405390][T17113] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4730'. [ 311.432398][T17126] loop8: detected capacity change from 0 to 512 [ 311.447052][T17126] EXT4-fs (loop8): inodes count not valid: 262136 vs 32 [ 311.550625][T17139] Invalid ELF header magic: != ELF [ 311.672598][T17144] netlink: 'syz.8.4742': attribute type 10 has an invalid length. [ 312.183902][T17173] netlink: 'syz.2.4754': attribute type 10 has an invalid length. [ 312.284394][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 312.349607][T17192] loop0: detected capacity change from 0 to 512 [ 312.362446][T17192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.376153][T17192] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.387154][T17192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.764814][T17228] dvmrp0: entered allmulticast mode [ 312.783102][T17228] dvmrp0: left allmulticast mode [ 312.842642][T17230] loop8: detected capacity change from 0 to 512 [ 312.858170][T17233] loop1: detected capacity change from 0 to 512 [ 312.864832][T17233] /dev/loop1: Can't open blockdev [ 312.866185][T17230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.014076][T17244] SELinux: policydb table sizes (0,-1) do not match mine (8,7) [ 313.022426][T17244] SELinux: failed to load policy [ 313.096498][T17253] random: crng reseeded on system resumption [ 313.271652][T17263] bpf_get_probe_write_proto: 2 callbacks suppressed [ 313.271673][T17263] syz.2.4788[17263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.290108][T17263] syz.2.4788[17263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.320235][T17263] syz.2.4788[17263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.353265][T17266] loop5: detected capacity change from 0 to 128 [ 313.544934][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.591924][T17288] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 313.698243][T17298] syz.5.4802[17298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.698310][T17298] syz.5.4802[17298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.710114][T17298] syz.5.4802[17298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.740644][T17300] FAULT_INJECTION: forcing a failure. [ 313.740644][T17300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.765296][T17300] CPU: 1 UID: 0 PID: 17300 Comm: syz.8.4803 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 313.777447][T17300] Tainted: [W]=WARN [ 313.781273][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.791346][T17300] Call Trace: [ 313.794640][T17300] [ 313.797590][T17300] dump_stack_lvl+0xf2/0x150 [ 313.802391][T17300] dump_stack+0x15/0x1a [ 313.806628][T17300] should_fail_ex+0x223/0x230 [ 313.811344][T17300] should_fail+0xb/0x10 [ 313.815585][T17300] should_fail_usercopy+0x1a/0x20 [ 313.820644][T17300] _copy_from_iter+0xd5/0xd00 [ 313.825353][T17300] ? kmalloc_reserve+0x16e/0x190 [ 313.830320][T17300] ? __build_skb_around+0x196/0x1f0 [ 313.835542][T17300] ? __alloc_skb+0x21f/0x310 [ 313.840251][T17300] ? __virt_addr_valid+0x1ed/0x250 [ 313.845407][T17300] ? __check_object_size+0x364/0x520 [ 313.850727][T17300] netlink_sendmsg+0x460/0x6e0 [ 313.855510][T17300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.860825][T17300] __sock_sendmsg+0x140/0x180 [ 313.865526][T17300] ____sys_sendmsg+0x312/0x410 [ 313.870407][T17300] __sys_sendmsg+0x19d/0x230 [ 313.875060][T17300] __x64_sys_sendmsg+0x46/0x50 [ 313.879909][T17300] x64_sys_call+0x2734/0x2dc0 [ 313.884616][T17300] do_syscall_64+0xc9/0x1c0 [ 313.889176][T17300] ? clear_bhb_loop+0x55/0xb0 [ 313.894004][T17300] ? clear_bhb_loop+0x55/0xb0 [ 313.898720][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.904647][T17300] RIP: 0033:0x7f0157030849 [ 313.909139][T17300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.928779][T17300] RSP: 002b:00007f01556a7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.937319][T17300] RAX: ffffffffffffffda RBX: 00007f01571f5fa0 RCX: 00007f0157030849 [ 313.945405][T17300] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 313.953466][T17300] RBP: 00007f01556a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.961465][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.969545][T17300] R13: 0000000000000000 R14: 00007f01571f5fa0 R15: 00007ffdebcdc6a8 [ 313.977558][T17300] [ 313.994848][T17308] __nla_validate_parse: 18 callbacks suppressed [ 313.994864][T17308] netlink: 548 bytes leftover after parsing attributes in process `syz.1.4806'. [ 314.038851][T17310] loop5: detected capacity change from 0 to 512 [ 314.064632][T17310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.079153][T17310] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.094374][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 314.094401][ T29] audit: type=1400 audit(2000003031.502:27294): avc: denied { write } for pid=17309 comm="syz.5.4807" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.128997][ T29] audit: type=1400 audit(2000003031.532:27295): avc: denied { add_name } for pid=17309 comm="syz.5.4807" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.152260][ T29] audit: type=1400 audit(2000003031.532:27296): avc: denied { create } for pid=17309 comm="syz.5.4807" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.175088][ T29] audit: type=1400 audit(2000003031.532:27297): avc: denied { read append open } for pid=17309 comm="syz.5.4807" path="/177/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.201560][ T29] audit: type=1400 audit(2000003031.532:27298): avc: denied { setattr } for pid=17309 comm="syz.5.4807" path="/177/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.227064][ T29] audit: type=1400 audit(2000003031.532:27299): avc: denied { create } for pid=17318 comm="syz.1.4810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.246772][ T29] audit: type=1400 audit(2000003031.612:27300): avc: denied { write } for pid=17309 comm="syz.5.4807" path="/177/file0/bus" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.269702][ T29] audit: type=1400 audit(2000003031.612:27301): avc: denied { mounton } for pid=17309 comm="syz.5.4807" path="/177/file0/bus" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.286767][T17322] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #20: comm syz.5.4807: corrupted inode contents [ 314.292852][ T29] audit: type=1400 audit(2000003031.682:27302): avc: denied { ioctl } for pid=17309 comm="syz.5.4807" path="/177/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop5" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.357917][ T29] audit: type=1400 audit(2000003031.762:27303): avc: denied { mount } for pid=17323 comm="syz.8.4811" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 314.397212][T17326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 314.399694][T17310] loop5: detected capacity change from 512 to 0 [ 314.411294][T17322] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #20: comm syz.5.4807: mark_inode_dirty error [ 314.432775][T17322] bio_check_eod: 52 callbacks suppressed [ 314.432792][T17322] syz.5.4807: attempt to access beyond end of device [ 314.432792][T17322] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 314.451672][T17322] buffer_io_error: 12 callbacks suppressed [ 314.451696][T17322] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 314.466360][T17328] netlink: 54 bytes leftover after parsing attributes in process `syz.8.4813'. [ 314.479383][T17322] EXT4-fs (loop5): I/O error while writing superblock [ 314.487606][T17328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.498715][T17328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.515408][T17322] EXT4-fs error (device loop5): ext4_check_bdev_write_error:225: comm syz.5.4807: Error while async write back metadata [ 314.528346][T17322] syz.5.4807: attempt to access beyond end of device [ 314.528346][T17322] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 314.541592][T17322] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 314.554099][T17322] EXT4-fs (loop5): I/O error while writing superblock [ 314.560966][T17322] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #20: comm syz.5.4807: corrupted inode contents [ 314.576179][T17322] syz.5.4807: attempt to access beyond end of device [ 314.576179][T17322] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 314.589430][T17322] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 314.601137][T17322] EXT4-fs (loop5): I/O error while writing superblock [ 314.608136][T17322] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #20: comm syz.5.4807: mark_inode_dirty error [ 314.615522][T17330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4814'. [ 314.622407][T17322] syz.5.4807: attempt to access beyond end of device [ 314.622407][T17322] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 314.629183][T17330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4814'. [ 314.642296][T17322] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 314.654797][T17330] syz.2.4814[17330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.659677][T17330] syz.2.4814[17330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.671204][T17330] syz.2.4814[17330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.681612][T17322] EXT4-fs (loop5): I/O error while writing superblock [ 314.685104][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4814'. [ 314.694018][T17322] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #20: comm syz.5.4807: mark inode dirty (error -117) [ 314.724626][T17322] syz.5.4807: attempt to access beyond end of device [ 314.724626][T17322] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 314.737874][T17322] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 314.755687][T17322] EXT4-fs (loop5): I/O error while writing superblock [ 314.762559][T17322] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 314.775561][T17336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4817'. [ 314.789292][T17336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4817'. [ 314.803576][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4817'. [ 314.807708][T14786] syz-executor: attempt to access beyond end of device [ 314.807708][T14786] loop5: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 314.826526][T14786] EXT4-fs error (device loop5): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 314.839818][T14786] syz-executor: attempt to access beyond end of device [ 314.839818][T14786] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 314.853302][T14786] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 314.855097][T17336] validate_nla: 1 callbacks suppressed [ 314.855160][T17336] netlink: 'syz.0.4817': attribute type 10 has an invalid length. [ 314.861847][T14786] EXT4-fs (loop5): I/O error while writing superblock [ 314.911783][T16884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.921923][T16884] syz.5.4644: attempt to access beyond end of device [ 314.921923][T16884] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 314.935216][T16884] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 314.946101][T16884] EXT4-fs (loop5): I/O error while writing superblock [ 314.963446][T17311] kmmpd-loop5: attempt to access beyond end of device [ 314.963446][T17311] loop5: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 314.976832][T17311] Buffer I/O error on dev loop5, logical block 12, lost sync page write [ 315.069416][T17350] loop8: detected capacity change from 0 to 164 [ 315.082772][T17350] isofs_fill_super: get root inode failed [ 315.091723][T17350] infiniband sz1: set active [ 315.097113][T17350] infiniband sz1: set active [ 315.154395][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.182509][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.214174][T17364] syz.2.4827[17364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.214987][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4827'. [ 315.282142][ T2962] lo speed is unknown, defaulting to 1000 [ 315.287999][ T35] lo speed is unknown, defaulting to 1000 [ 315.293864][T17355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4827'. [ 315.310446][T17348] netlink: get zone limit has 8 unknown bytes [ 315.326858][T17365] geneve1: left promiscuous mode [ 315.374345][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.453302][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.523773][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.545912][T17366] lo speed is unknown, defaulting to 1000 [ 315.547338][T17396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.560406][T17396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.609303][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.662798][T17366] chnl_net:caif_netlink_parms(): no params data found [ 315.741310][ T50] bond0 (unregistering): Released all slaves [ 315.759593][T17366] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.766990][T17366] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.774477][T17366] bridge_slave_0: entered allmulticast mode [ 315.782357][T17366] bridge_slave_0: entered promiscuous mode [ 315.784323][T17398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.789022][ T50] tipc: Left network mode [ 315.802347][T17366] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.809539][T17366] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.819250][T17398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.827237][T17366] bridge_slave_1: entered allmulticast mode [ 315.840396][T17366] bridge_slave_1: entered promiscuous mode [ 315.859480][T17366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.871481][T17366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.881990][ T50] hsr_slave_0: left promiscuous mode [ 315.887677][ T50] hsr_slave_1: left promiscuous mode [ 315.896392][ T50] veth1_vlan: left promiscuous mode [ 315.901674][ T50] veth0_vlan: left promiscuous mode [ 315.996602][T17366] team0: Port device team_slave_0 added [ 316.005648][T17366] team0: Port device team_slave_1 added [ 316.024815][T17366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.031832][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.057845][T17366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.069381][T17366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.076363][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.102422][T17366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.157971][T17366] hsr_slave_0: entered promiscuous mode [ 316.170424][T17366] hsr_slave_1: entered promiscuous mode [ 316.441099][T17366] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 316.454106][T17366] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 316.463731][T17441] FAULT_INJECTION: forcing a failure. [ 316.463731][T17441] name failslab, interval 1, probability 0, space 0, times 0 [ 316.476496][T17441] CPU: 0 UID: 0 PID: 17441 Comm: syz.1.4852 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 316.488432][T17441] Tainted: [W]=WARN [ 316.492321][T17441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 316.502410][T17441] Call Trace: [ 316.505760][T17441] [ 316.508784][T17441] dump_stack_lvl+0xf2/0x150 [ 316.513450][T17441] dump_stack+0x15/0x1a [ 316.517627][T17441] should_fail_ex+0x223/0x230 [ 316.522312][T17441] ? audit_log_d_path+0x96/0x250 [ 316.527277][T17441] should_failslab+0x8f/0xb0 [ 316.531915][T17441] __kmalloc_cache_noprof+0x4e/0x320 [ 316.537271][T17441] audit_log_d_path+0x96/0x250 [ 316.542060][T17441] ? __rcu_read_unlock+0x4e/0x70 [ 316.547269][T17441] audit_log_d_path_exe+0x42/0x70 [ 316.552332][T17441] audit_log_task+0x192/0x1c0 [ 316.557023][T17441] audit_seccomp+0x68/0x130 [ 316.561575][T17441] __seccomp_filter+0x6fa/0x1180 [ 316.566626][T17441] ? __perf_event_task_sched_out+0x138/0x1010 [ 316.572706][T17441] ? __dequeue_entity+0x22/0x310 [ 316.577750][T17441] __secure_computing+0x9f/0x1c0 [ 316.582808][T17441] syscall_trace_enter+0xd1/0x1f0 [ 316.587853][T17441] do_syscall_64+0xaa/0x1c0 [ 316.592451][T17441] ? clear_bhb_loop+0x55/0xb0 [ 316.597247][T17441] ? clear_bhb_loop+0x55/0xb0 [ 316.601943][T17441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.607877][T17441] RIP: 0033:0x7f8990c2f25c [ 316.612362][T17441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 316.632015][T17441] RSP: 002b:00007f898f2a7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.640498][T17441] RAX: ffffffffffffffda RBX: 00007f8990df5fa0 RCX: 00007f8990c2f25c [ 316.648476][T17441] RDX: 000000000000000f RSI: 00007f898f2a70b0 RDI: 0000000000000006 [ 316.656514][T17441] RBP: 00007f898f2a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.664498][T17441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.672662][T17441] R13: 0000000000000000 R14: 00007f8990df5fa0 R15: 00007ffd0535a878 [ 316.680675][T17441] [ 316.686264][T17366] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 316.699936][T17366] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 316.717452][T17366] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.724767][T17366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.732094][T17366] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.739203][T17366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.758097][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.767850][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.796628][T17450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 316.846100][T17366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.875619][T17366] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.925862][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.933055][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.956785][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.963902][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.995539][T17462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.006033][T17462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.016012][T17462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.026639][T17462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.036508][T17462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.047042][T17462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.056930][T17462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.067475][T17462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.077702][T17462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.088377][T17462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.097000][T17470] tmpfs: Bad value for 'mpol' [ 317.098229][T17462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.098269][T17462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.129630][T17462] batadv_slave_1: entered promiscuous mode [ 317.265358][T17366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.457544][T17366] veth0_vlan: entered promiscuous mode [ 317.468634][T17366] veth1_vlan: entered promiscuous mode [ 317.488280][T17366] veth0_macvtap: entered promiscuous mode [ 317.509461][T17366] veth1_macvtap: entered promiscuous mode [ 317.523588][T17517] FAULT_INJECTION: forcing a failure. [ 317.523588][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 317.525586][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.536288][T17517] CPU: 0 UID: 0 PID: 17517 Comm: syz.1.4875 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 317.546740][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.558561][T17517] Tainted: [W]=WARN [ 317.558571][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.558587][T17517] Call Trace: [ 317.558594][T17517] [ 317.558610][T17517] dump_stack_lvl+0xf2/0x150 [ 317.568410][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.572205][T17517] dump_stack+0x15/0x1a [ 317.582329][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.585530][T17517] should_fail_ex+0x223/0x230 [ 317.585561][T17517] should_failslab+0x8f/0xb0 [ 317.588525][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.593090][T17517] kmem_cache_alloc_noprof+0x52/0x320 [ 317.603587][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.607727][T17517] ? vm_area_alloc+0xac/0x130 [ 317.617557][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.622194][T17517] vm_area_alloc+0xac/0x130 [ 317.626775][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.637162][T17517] __mmap_region+0x6b5/0x13f0 [ 317.637285][T17517] mmap_region+0x164/0x1e0 [ 317.642699][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.652501][T17517] do_mmap+0x718/0xb60 [ 317.657173][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.667567][T17517] vm_mmap_pgoff+0x133/0x290 [ 317.672180][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.682041][T17517] ksys_mmap_pgoff+0xd0/0x330 [ 317.686749][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.691163][T17517] ? fpregs_assert_state_consistent+0x83/0xa0 [ 317.701600][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.705627][T17517] x64_sys_call+0x1940/0x2dc0 [ 317.715438][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.719995][T17517] do_syscall_64+0xc9/0x1c0 [ 317.738503][T17366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.744897][T17517] ? clear_bhb_loop+0x55/0xb0 [ 317.744946][T17517] ? clear_bhb_loop+0x55/0xb0 [ 317.756411][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.761419][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.766134][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.775962][T17517] RIP: 0033:0x7f8990c30883 [ 317.775988][T17517] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 317.780536][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.780552][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.787754][T17517] RSP: 002b:00007f898f2a6d88 EFLAGS: 00000246 [ 317.792430][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.797141][T17517] ORIG_RAX: 0000000000000009 [ 317.797153][T17517] RAX: ffffffffffffffda RBX: 0000000000000591 RCX: 00007f8990c30883 [ 317.807545][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.813407][T17517] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 317.813426][T17517] RBP: 00000000200005c2 R08: 00000000ffffffff R09: 0000000000000000 [ 317.823221][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.827598][T17517] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 317.847330][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.857637][T17517] R13: 00007f898f2a6e0c R14: 00007f898f2a6e10 R15: 00007ffd0535a878 [ 317.857668][T17517] [ 317.867468][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.915561][T17519] FAULT_INJECTION: forcing a failure. [ 317.915561][T17519] name failslab, interval 1, probability 0, space 0, times 0 [ 317.922809][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.933238][T17519] CPU: 0 UID: 0 PID: 17519 Comm: syz.0.4876 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 317.941234][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.950999][T17519] Tainted: [W]=WARN [ 317.951009][T17519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.959760][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.962765][T17519] Call Trace: [ 317.962775][T17519] [ 317.973171][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.985787][T17519] dump_stack_lvl+0xf2/0x150 [ 317.995689][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.007461][T17519] dump_stack+0x15/0x1a [ 318.077763][T17519] should_fail_ex+0x223/0x230 [ 318.082505][T17519] ? alloc_pipe_info+0xb0/0x360 [ 318.087542][T17519] should_failslab+0x8f/0xb0 [ 318.092154][T17519] __kmalloc_cache_noprof+0x4e/0x320 [ 318.097486][T17519] alloc_pipe_info+0xb0/0x360 [ 318.102268][T17519] splice_direct_to_actor+0x60f/0x670 [ 318.107776][T17519] ? __pfx_direct_splice_actor+0x10/0x10 [ 318.113424][T17519] ? 0xffffffff81000000 [ 318.117630][T17519] ? selinux_file_permission+0x22a/0x360 [ 318.123300][T17519] ? __rcu_read_unlock+0x4e/0x70 [ 318.128255][T17519] ? avc_policy_seqno+0x15/0x20 [ 318.133138][T17519] ? selinux_file_permission+0x22a/0x360 [ 318.138790][T17519] do_splice_direct+0xd7/0x150 [ 318.143588][T17519] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 318.149595][T17519] do_sendfile+0x398/0x660 [ 318.154041][T17519] __x64_sys_sendfile64+0x110/0x150 [ 318.159269][T17519] x64_sys_call+0xfbd/0x2dc0 [ 318.163933][T17519] do_syscall_64+0xc9/0x1c0 [ 318.168477][T17519] ? clear_bhb_loop+0x55/0xb0 [ 318.173252][T17519] ? clear_bhb_loop+0x55/0xb0 [ 318.177951][T17519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.183876][T17519] RIP: 0033:0x7ffb02390849 [ 318.188365][T17519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.208059][T17519] RSP: 002b:00007ffb00a07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 318.216487][T17519] RAX: ffffffffffffffda RBX: 00007ffb02555fa0 RCX: 00007ffb02390849 [ 318.224470][T17519] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 318.232466][T17519] RBP: 00007ffb00a070a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.240444][T17519] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.248421][T17519] R13: 0000000000000000 R14: 00007ffb02555fa0 R15: 00007ffefedd0038 [ 318.256462][T17519] [ 318.264986][T17366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.274110][T17366] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.283041][T17366] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.291882][T17366] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.300789][T17366] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.432148][T17537] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 318.542194][T17550] loop8: detected capacity change from 0 to 512 [ 318.587181][T17552] lo speed is unknown, defaulting to 1000 [ 318.633121][T17550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.639541][T17556] loop9: detected capacity change from 0 to 1024 [ 318.648126][T17550] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.670250][T17556] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.681759][T17550] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.691078][T17556] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 318.696930][T17560] lo speed is unknown, defaulting to 1000 [ 318.699301][T17556] EXT4-fs (loop9): orphan cleanup on readonly fs [ 318.712787][T17556] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 318.726781][T17556] EXT4-fs (loop9): Remounting filesystem read-only [ 318.733633][T17556] EXT4-fs (loop9): 1 orphan inode deleted [ 318.745006][T17556] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 318.759602][T17556] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 318.773315][T17556] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.915579][T17579] loop9: detected capacity change from 0 to 512 [ 318.923544][T17579] journal_path: Lookup failure for './file2' [ 318.929631][T17579] EXT4-fs: error: could not find journal device path [ 318.943045][T17581] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 318.964291][T17579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.976865][T17579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.994280][T17584] netlink: 'syz.8.4899': attribute type 10 has an invalid length. [ 319.038114][T17586] loop8: detected capacity change from 0 to 2048 [ 319.046445][T17586] EXT4-fs: Ignoring removed oldalloc option [ 319.052457][T17586] EXT4-fs: test_dummy_encryption option not supported [ 319.067726][T17586] random: crng reseeded on system resumption [ 319.132222][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 319.132240][ T29] audit: type=1326 audit(2000003036.543:27796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.8.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0157030849 code=0x7ffc0000 [ 319.165267][ T29] audit: type=1326 audit(2000003036.543:27797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.8.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0157030849 code=0x7ffc0000 [ 319.190391][T17590] pim6reg1: entered promiscuous mode [ 319.195743][T17590] pim6reg1: entered allmulticast mode [ 319.210808][ T29] audit: type=1400 audit(2000003036.623:27798): avc: denied { create } for pid=17591 comm="syz.8.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.230751][ T29] audit: type=1400 audit(2000003036.623:27799): avc: denied { setopt } for pid=17591 comm="syz.8.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.271013][ T29] audit: type=1400 audit(2000003036.683:27800): avc: denied { getopt } for pid=17593 comm="syz.1.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.276239][T17595] loop8: detected capacity change from 0 to 1024 [ 319.301452][T17594] FAULT_INJECTION: forcing a failure. [ 319.301452][T17594] name failslab, interval 1, probability 0, space 0, times 0 [ 319.314432][T17594] CPU: 0 UID: 0 PID: 17594 Comm: syz.1.4904 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 319.326578][T17594] Tainted: [W]=WARN [ 319.330400][T17594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.340557][T17594] Call Trace: [ 319.343959][T17594] [ 319.346930][T17594] dump_stack_lvl+0xf2/0x150 [ 319.351572][T17594] dump_stack+0x15/0x1a [ 319.355880][T17594] should_fail_ex+0x223/0x230 [ 319.360602][T17594] ? __hw_addr_add_ex+0x13d/0x360 [ 319.365684][T17594] should_failslab+0x8f/0xb0 [ 319.370497][T17594] __kmalloc_cache_noprof+0x4e/0x320 [ 319.375841][T17594] __hw_addr_add_ex+0x13d/0x360 [ 319.380748][T17594] dev_addr_init+0xb2/0x120 [ 319.385390][T17594] alloc_netdev_mqs+0x1e1/0x9c0 [ 319.390346][T17594] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 319.395772][T17594] rtnl_create_link+0x233/0x680 [ 319.400682][T17594] rtnl_newlink_create+0x133/0x5c0 [ 319.405846][T17594] rtnl_newlink+0xe3a/0x1200 [ 319.410463][T17594] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 319.416029][T17594] ? kmem_cache_free+0xdc/0x2d0 [ 319.420894][T17594] ? __kfree_skb+0x102/0x150 [ 319.425540][T17594] ? packet_rcv+0xd4/0x990 [ 319.430042][T17594] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 319.435522][T17594] ? packet_rcv+0xd4/0x990 [ 319.440050][T17594] ? __rcu_read_unlock+0x4e/0x70 [ 319.445025][T17594] ? avc_has_perm_noaudit+0x1cc/0x210 [ 319.450554][T17594] ? selinux_capable+0x1f2/0x260 [ 319.455539][T17594] ? security_capable+0x81/0x90 [ 319.460418][T17594] ? ns_capable+0x7d/0xb0 [ 319.464842][T17594] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.469890][T17594] rtnetlink_rcv_msg+0x651/0x710 [ 319.474877][T17594] ? ref_tracker_free+0x3a5/0x410 [ 319.479941][T17594] ? __dev_queue_xmit+0x186/0x2090 [ 319.485132][T17594] netlink_rcv_skb+0x12c/0x230 [ 319.489954][T17594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.495495][T17594] rtnetlink_rcv+0x1c/0x30 [ 319.500077][T17594] netlink_unicast+0x599/0x670 [ 319.504867][T17594] netlink_sendmsg+0x5cc/0x6e0 [ 319.509668][T17594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.515037][T17594] __sock_sendmsg+0x140/0x180 [ 319.519819][T17594] ____sys_sendmsg+0x312/0x410 [ 319.524735][T17594] __sys_sendmsg+0x19d/0x230 [ 319.529372][T17594] __x64_sys_sendmsg+0x46/0x50 [ 319.534262][T17594] x64_sys_call+0x2734/0x2dc0 [ 319.538992][T17594] do_syscall_64+0xc9/0x1c0 [ 319.543551][T17594] ? clear_bhb_loop+0x55/0xb0 [ 319.548269][T17594] ? clear_bhb_loop+0x55/0xb0 [ 319.552968][T17594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.558953][T17594] RIP: 0033:0x7f8990c30849 [ 319.563446][T17594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.583069][T17594] RSP: 002b:00007f898f2a7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.591569][T17594] RAX: ffffffffffffffda RBX: 00007f8990df5fa0 RCX: 00007f8990c30849 [ 319.599586][T17594] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 319.607570][T17594] RBP: 00007f898f2a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 319.615637][T17594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.623624][T17594] R13: 0000000000000000 R14: 00007f8990df5fa0 R15: 00007ffd0535a878 [ 319.631691][T17594] [ 319.663568][T17595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.682775][ T29] audit: type=1400 audit(2000003037.093:27801): avc: denied { setattr } for pid=17591 comm="syz.8.4903" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.791648][ T29] audit: type=1400 audit(2000003037.193:27802): avc: denied { write } for pid=17591 comm="syz.8.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.836867][ T29] audit: type=1326 audit(2000003037.243:27803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990c30849 code=0x7ffc0000 [ 319.870419][ T29] audit: type=1326 audit(2000003037.253:27804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8990c30849 code=0x7ffc0000 [ 319.894299][ T29] audit: type=1326 audit(2000003037.253:27805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990c30849 code=0x7ffc0000 [ 319.971939][T17628] __nla_validate_parse: 9 callbacks suppressed [ 319.971960][T17628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4917'. [ 319.987981][T17628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4917'. [ 319.999706][T17628] bpf_get_probe_write_proto: 2 callbacks suppressed [ 319.999722][T17628] syz.1.4917[17628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.007294][T17628] syz.1.4917[17628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.019021][T17628] syz.1.4917[17628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.033797][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4917'. [ 320.069473][T17636] FAULT_INJECTION: forcing a failure. [ 320.069473][T17636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.082798][T17636] CPU: 1 UID: 0 PID: 17636 Comm: syz.0.4921 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 320.094749][T17636] Tainted: [W]=WARN [ 320.098641][T17636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 320.108734][T17636] Call Trace: [ 320.112040][T17636] [ 320.114990][T17636] dump_stack_lvl+0xf2/0x150 [ 320.119688][T17636] dump_stack+0x15/0x1a [ 320.124053][T17636] should_fail_ex+0x223/0x230 [ 320.128845][T17636] should_fail_alloc_page+0xfd/0x110 [ 320.134239][T17636] __alloc_pages_noprof+0x109/0x340 [ 320.139596][T17636] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 320.145005][T17636] alloc_pages_noprof+0xe1/0x100 [ 320.150053][T17636] kimage_alloc_control_pages+0x14a/0x730 [ 320.155819][T17636] alloc_pgt_page+0x17/0x50 [ 320.160416][T17636] ident_pud_init+0x14e/0x350 [ 320.165126][T17636] kernel_ident_mapping_init+0x14c/0x2c0 [ 320.170825][T17636] machine_kexec_prepare+0xe4/0x670 [ 320.176047][T17636] ? __pfx_alloc_pgt_page+0x10/0x10 [ 320.181340][T17636] do_kexec_load+0x38d/0x490 [ 320.185963][T17636] __se_sys_kexec_load+0x12b/0x160 [ 320.191161][T17636] __x64_sys_kexec_load+0x55/0x70 [ 320.196263][T17636] x64_sys_call+0x2cac/0x2dc0 [ 320.200957][T17636] do_syscall_64+0xc9/0x1c0 [ 320.205477][T17636] ? clear_bhb_loop+0x55/0xb0 [ 320.210174][T17636] ? clear_bhb_loop+0x55/0xb0 [ 320.214921][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.220831][T17636] RIP: 0033:0x7ffb02390849 [ 320.225263][T17636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.244975][T17636] RSP: 002b:00007ffb00a07058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 320.253500][T17636] RAX: ffffffffffffffda RBX: 00007ffb02555fa0 RCX: 00007ffb02390849 [ 320.261479][T17636] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 320.269478][T17636] RBP: 00007ffb00a070a0 R08: 0000000000000000 R09: 0000000000000000 [ 320.277504][T17636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.285563][T17636] R13: 0000000000000000 R14: 00007ffb02555fa0 R15: 00007ffefedd0038 [ 320.293549][T17636] [ 320.300508][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.342497][T17648] bridge0: entered allmulticast mode [ 320.351679][T17648] pim6reg: entered allmulticast mode [ 320.391340][T17656] FAULT_INJECTION: forcing a failure. [ 320.391340][T17656] name failslab, interval 1, probability 0, space 0, times 0 [ 320.404037][T17656] CPU: 1 UID: 0 PID: 17656 Comm: syz.0.4930 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 320.416168][T17656] Tainted: [W]=WARN [ 320.419993][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 320.423066][T17659] loop8: detected capacity change from 0 to 512 [ 320.430055][T17656] Call Trace: [ 320.430066][T17656] [ 320.430077][T17656] dump_stack_lvl+0xf2/0x150 [ 320.447271][T17656] dump_stack+0x15/0x1a [ 320.451544][T17656] should_fail_ex+0x223/0x230 [ 320.456274][T17656] should_failslab+0x8f/0xb0 [ 320.460940][T17656] kmem_cache_alloc_node_noprof+0x59/0x320 [ 320.466759][T17656] ? __alloc_skb+0x10b/0x310 [ 320.471381][T17656] __alloc_skb+0x10b/0x310 [ 320.475847][T17656] ? audit_log_start+0x34c/0x6b0 [ 320.480826][T17656] audit_log_start+0x368/0x6b0 [ 320.485702][T17656] ? kmem_cache_free+0xdc/0x2d0 [ 320.490569][T17656] audit_seccomp+0x4b/0x130 [ 320.495129][T17656] ? cgroup_rstat_updated+0x9f/0x570 [ 320.500443][T17656] __seccomp_filter+0x6fa/0x1180 [ 320.505570][T17656] ? __perf_event_task_sched_out+0x138/0x1010 [ 320.511726][T17656] ? __dequeue_entity+0x22/0x310 [ 320.516692][T17656] __secure_computing+0x9f/0x1c0 [ 320.521658][T17656] syscall_trace_enter+0xd1/0x1f0 [ 320.526776][T17656] do_syscall_64+0xaa/0x1c0 [ 320.531300][T17656] ? clear_bhb_loop+0x55/0xb0 [ 320.536024][T17656] ? clear_bhb_loop+0x55/0xb0 [ 320.540776][T17656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.546824][T17656] RIP: 0033:0x7ffb0238f25c [ 320.551250][T17656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 320.570923][T17656] RSP: 002b:00007ffb00a07050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.579480][T17656] RAX: ffffffffffffffda RBX: 00007ffb02555fa0 RCX: 00007ffb0238f25c [ 320.587500][T17656] RDX: 000000000000000f RSI: 00007ffb00a070b0 RDI: 0000000000000005 [ 320.595484][T17656] RBP: 00007ffb00a070a0 R08: 0000000000000000 R09: 0000000000000000 [ 320.603472][T17656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.611462][T17656] R13: 0000000000000000 R14: 00007ffb02555fa0 R15: 00007ffefedd0038 [ 320.619460][T17656] [ 320.655245][T17665] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4934'. [ 320.672483][T17665] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4934'. [ 320.683149][T17665] syz.8.4934[17665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.683251][T17665] syz.8.4934[17665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.696916][T17665] syz.8.4934[17665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.709502][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4934'. [ 320.716268][T17669] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 320.841242][T17686] FAULT_INJECTION: forcing a failure. [ 320.841242][T17686] name failslab, interval 1, probability 0, space 0, times 0 [ 320.854038][T17686] CPU: 1 UID: 0 PID: 17686 Comm: syz.0.4944 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 320.866011][T17686] Tainted: [W]=WARN [ 320.869862][T17686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 320.879953][T17686] Call Trace: [ 320.883251][T17686] [ 320.886211][T17686] dump_stack_lvl+0xf2/0x150 [ 320.890844][T17686] dump_stack+0x15/0x1a [ 320.895121][T17686] should_fail_ex+0x223/0x230 [ 320.899932][T17686] should_failslab+0x8f/0xb0 [ 320.904639][T17686] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 320.910413][T17686] ? __d_alloc+0x3d/0x340 [ 320.914772][T17686] __d_alloc+0x3d/0x340 [ 320.918745][T17695] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4948'. [ 320.918947][T17686] __d_obtain_alias+0xbb/0x5d0 [ 320.928241][T17695] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4948'. [ 320.932661][T17686] ? _raw_spin_unlock+0x26/0x50 [ 320.932719][T17686] ? unlock_new_inode+0x74/0xa0 [ 320.951444][T17686] d_obtain_alias+0x1a/0x20 [ 320.956005][T17686] kernfs_fh_to_dentry+0xec/0x110 [ 320.961114][T17686] exportfs_decode_fh_raw+0xc9/0x4d0 [ 320.966514][T17686] ? kstrtouint+0x77/0xc0 [ 320.970861][T17686] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 320.976766][T17686] do_handle_to_path+0x68/0xd0 [ 320.981557][T17686] do_handle_open+0x4b4/0x580 [ 320.986364][T17686] __x64_sys_open_by_handle_at+0x46/0x50 [ 320.992026][T17686] x64_sys_call+0x2cca/0x2dc0 [ 320.996739][T17686] do_syscall_64+0xc9/0x1c0 [ 321.001319][T17686] ? clear_bhb_loop+0x55/0xb0 [ 321.006057][T17686] ? clear_bhb_loop+0x55/0xb0 [ 321.010753][T17686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.016729][T17686] RIP: 0033:0x7ffb02390849 [ 321.021147][T17686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.040794][T17686] RSP: 002b:00007ffb00a07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 321.049218][T17686] RAX: ffffffffffffffda RBX: 00007ffb02555fa0 RCX: 00007ffb02390849 [ 321.057198][T17686] RDX: 000000000000ffa1 RSI: 00000000200005c0 RDI: 0000000000000003 [ 321.065218][T17686] RBP: 00007ffb00a070a0 R08: 0000000000000000 R09: 0000000000000000 [ 321.073195][T17686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.081226][T17686] R13: 0000000000000000 R14: 00007ffb02555fa0 R15: 00007ffefedd0038 [ 321.089211][T17686] [ 321.102428][T17695] syz.9.4948[17695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.102503][T17695] syz.9.4948[17695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.116031][T17695] syz.9.4948[17695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.128815][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4948'. [ 321.192512][T17706] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 321.462781][T17722] lo speed is unknown, defaulting to 1000 [ 322.018063][T17741] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 322.044654][T17743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4968'. [ 322.076744][T17745] devtmpfs: Unknown parameter 'mode000000p00000000' [ 322.321955][T17774] FAULT_INJECTION: forcing a failure. [ 322.321955][T17774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.335107][T17774] CPU: 0 UID: 0 PID: 17774 Comm: syz.8.4982 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 322.347050][T17774] Tainted: [W]=WARN [ 322.350858][T17774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.361009][T17774] Call Trace: [ 322.364338][T17774] [ 322.367316][T17774] dump_stack_lvl+0xf2/0x150 [ 322.371952][T17774] dump_stack+0x15/0x1a [ 322.376213][T17774] should_fail_ex+0x223/0x230 [ 322.380916][T17774] should_fail+0xb/0x10 [ 322.385151][T17774] should_fail_usercopy+0x1a/0x20 [ 322.390193][T17774] _copy_from_iter+0xd5/0xd00 [ 322.394967][T17774] ? __build_skb_around+0x196/0x1f0 [ 322.400185][T17774] ? __virt_addr_valid+0x1ed/0x250 [ 322.405322][T17774] ? __check_object_size+0x364/0x520 [ 322.410635][T17774] pppoe_sendmsg+0x29b/0x3d0 [ 322.415457][T17774] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 322.420586][T17774] __sock_sendmsg+0x140/0x180 [ 322.425301][T17774] sock_write_iter+0x15e/0x1a0 [ 322.430087][T17774] vfs_write+0x77f/0x920 [ 322.434354][T17774] ? __pfx_sock_write_iter+0x10/0x10 [ 322.439690][T17774] ksys_write+0xe8/0x1b0 [ 322.444031][T17774] __x64_sys_write+0x42/0x50 [ 322.448755][T17774] x64_sys_call+0x287e/0x2dc0 [ 322.453619][T17774] do_syscall_64+0xc9/0x1c0 [ 322.458536][T17774] ? clear_bhb_loop+0x55/0xb0 [ 322.463247][T17774] ? clear_bhb_loop+0x55/0xb0 [ 322.467959][T17774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.473976][T17774] RIP: 0033:0x7f0157030849 [ 322.478478][T17774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.498103][T17774] RSP: 002b:00007f01556a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.506585][T17774] RAX: ffffffffffffffda RBX: 00007f01571f5fa0 RCX: 00007f0157030849 [ 322.514564][T17774] RDX: 00000000000005ea RSI: 0000000020001640 RDI: 0000000000000003 [ 322.522626][T17774] RBP: 00007f01556a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 322.530725][T17774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.538704][T17774] R13: 0000000000000000 R14: 00007f01571f5fa0 R15: 00007ffdebcdc6a8 [ 322.546756][T17774] [ 322.733730][T17775] FAULT_INJECTION: forcing a failure. [ 322.733730][T17775] name failslab, interval 1, probability 0, space 0, times 0 [ 322.746512][T17775] CPU: 1 UID: 0 PID: 17775 Comm: syz.0.4984 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 322.758441][T17775] Tainted: [W]=WARN [ 322.762266][T17775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.772481][T17775] Call Trace: [ 322.775776][T17775] [ 322.778822][T17775] dump_stack_lvl+0xf2/0x150 [ 322.783477][T17775] dump_stack+0x15/0x1a [ 322.787784][T17775] should_fail_ex+0x223/0x230 [ 322.792549][T17775] should_failslab+0x8f/0xb0 [ 322.797348][T17775] kmem_cache_alloc_node_noprof+0x59/0x320 [ 322.803178][T17775] ? __alloc_skb+0x10b/0x310 [ 322.807816][T17775] __alloc_skb+0x10b/0x310 [ 322.812333][T17775] ? audit_log_start+0x34c/0x6b0 [ 322.817402][T17775] audit_log_start+0x368/0x6b0 [ 322.822187][T17775] audit_seccomp+0x4b/0x130 [ 322.826771][T17775] __seccomp_filter+0x6fa/0x1180 [ 322.831737][T17775] __secure_computing+0x9f/0x1c0 [ 322.836762][T17775] syscall_trace_enter+0xd1/0x1f0 [ 322.841850][T17775] ? fpregs_assert_state_consistent+0x83/0xa0 [ 322.848036][T17775] do_syscall_64+0xaa/0x1c0 [ 322.852556][T17775] ? clear_bhb_loop+0x55/0xb0 [ 322.857298][T17775] ? clear_bhb_loop+0x55/0xb0 [ 322.861992][T17775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.867929][T17775] RIP: 0033:0x7ffb0238f25c [ 322.872354][T17775] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 322.891979][T17775] RSP: 002b:00007ffb00a07050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.900402][T17775] RAX: ffffffffffffffda RBX: 00007ffb02555fa0 RCX: 00007ffb0238f25c [ 322.908387][T17775] RDX: 000000000000000f RSI: 00007ffb00a070b0 RDI: 0000000000000006 [ 322.916377][T17775] RBP: 00007ffb00a070a0 R08: 0000000000000000 R09: 0000000000000000 [ 322.924372][T17775] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 322.932363][T17775] R13: 0000000000000000 R14: 00007ffb02555fa0 R15: 00007ffefedd0038 [ 322.940356][T17775] [ 322.952854][T17800] FAULT_INJECTION: forcing a failure. [ 322.952854][T17800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.965974][T17800] CPU: 1 UID: 0 PID: 17800 Comm: syz.8.4993 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 322.978026][T17800] Tainted: [W]=WARN [ 322.981905][T17800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.991969][T17800] Call Trace: [ 322.995322][T17800] [ 322.998263][T17800] dump_stack_lvl+0xf2/0x150 [ 323.002884][T17800] dump_stack+0x15/0x1a [ 323.007080][T17800] should_fail_ex+0x223/0x230 [ 323.011817][T17800] should_fail+0xb/0x10 [ 323.016050][T17800] should_fail_usercopy+0x1a/0x20 [ 323.021178][T17800] _copy_to_user+0x20/0xa0 [ 323.025626][T17800] simple_read_from_buffer+0xa0/0x110 [ 323.031020][T17800] proc_fail_nth_read+0xf9/0x140 [ 323.036017][T17800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.041584][T17800] vfs_read+0x1a2/0x700 [ 323.045757][T17800] ? __rcu_read_unlock+0x4e/0x70 [ 323.050713][T17800] ? __fget_files+0x17c/0x1c0 [ 323.055452][T17800] ksys_read+0xe8/0x1b0 [ 323.059642][T17800] __x64_sys_read+0x42/0x50 [ 323.064173][T17800] x64_sys_call+0x2874/0x2dc0 [ 323.068862][T17800] do_syscall_64+0xc9/0x1c0 [ 323.073480][T17800] ? clear_bhb_loop+0x55/0xb0 [ 323.078319][T17800] ? clear_bhb_loop+0x55/0xb0 [ 323.083105][T17800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.089038][T17800] RIP: 0033:0x7f015702f25c [ 323.093470][T17800] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 323.113236][T17800] RSP: 002b:00007f0155686050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.121666][T17800] RAX: ffffffffffffffda RBX: 00007f01571f6080 RCX: 00007f015702f25c [ 323.129730][T17800] RDX: 000000000000000f RSI: 00007f01556860b0 RDI: 0000000000000004 [ 323.137710][T17800] RBP: 00007f01556860a0 R08: 0000000000000000 R09: 0000000000000000 [ 323.145745][T17800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.153722][T17800] R13: 0000000000000001 R14: 00007f01571f6080 R15: 00007ffdebcdc6a8 [ 323.161781][T17800] [ 323.175370][T17802] loop1: detected capacity change from 0 to 512 [ 323.203926][T17802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.227769][T17802] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.244696][T17799] caif0: entered allmulticast mode [ 323.340514][T17825] FAULT_INJECTION: forcing a failure. [ 323.340514][T17825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.353716][T17825] CPU: 1 UID: 0 PID: 17825 Comm: syz.8.5002 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 323.365752][T17825] Tainted: [W]=WARN [ 323.369563][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 323.379631][T17825] Call Trace: [ 323.382933][T17825] [ 323.385942][T17825] dump_stack_lvl+0xf2/0x150 [ 323.390637][T17825] dump_stack+0x15/0x1a [ 323.394914][T17825] should_fail_ex+0x223/0x230 [ 323.399695][T17825] should_fail+0xb/0x10 [ 323.403918][T17825] should_fail_usercopy+0x1a/0x20 [ 323.409015][T17825] _copy_to_user+0x20/0xa0 [ 323.413473][T17825] simple_read_from_buffer+0xa0/0x110 [ 323.418951][T17825] proc_fail_nth_read+0xf9/0x140 [ 323.423990][T17825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.429636][T17825] vfs_read+0x1a2/0x700 [ 323.433811][T17825] ? __rcu_read_unlock+0x4e/0x70 [ 323.438835][T17825] ? __fget_files+0x17c/0x1c0 [ 323.443621][T17825] ksys_read+0xe8/0x1b0 [ 323.447877][T17825] __x64_sys_read+0x42/0x50 [ 323.452419][T17825] x64_sys_call+0x2874/0x2dc0 [ 323.457133][T17825] do_syscall_64+0xc9/0x1c0 [ 323.461663][T17825] ? clear_bhb_loop+0x55/0xb0 [ 323.466434][T17825] ? clear_bhb_loop+0x55/0xb0 [ 323.471209][T17825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.477126][T17825] RIP: 0033:0x7f015702f25c [ 323.481552][T17825] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 323.501263][T17825] RSP: 002b:00007f01556a7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.509861][T17825] RAX: ffffffffffffffda RBX: 00007f01571f5fa0 RCX: 00007f015702f25c [ 323.517847][T17825] RDX: 000000000000000f RSI: 00007f01556a70b0 RDI: 0000000000000005 [ 323.525899][T17825] RBP: 00007f01556a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 323.533882][T17825] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 323.541951][T17825] R13: 0000000000000000 R14: 00007f01571f5fa0 R15: 00007ffdebcdc6a8 [ 323.550006][T17825] [ 323.576392][T16088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.632161][T17834] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 323.850432][T17841] dvmrp0: entered allmulticast mode [ 323.859868][T17841] dvmrp0: left allmulticast mode [ 323.892811][T17842] dvmrp0: entered allmulticast mode [ 323.912853][T17855] loop1: detected capacity change from 0 to 512 [ 323.921939][T17842] loop8: detected capacity change from 0 to 512 [ 323.935324][T17855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.952473][T17842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.229737][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 324.229752][ T29] audit: type=1400 audit(2000003041.644:28157): avc: denied { getopt } for pid=17868 comm="syz.2.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.288719][ T29] audit: type=1400 audit(2000003041.704:28158): avc: denied { shutdown } for pid=17868 comm="syz.2.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 324.340004][ T29] audit: type=1326 audit(2000003041.704:28159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.9.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15e830849 code=0x7ffc0000 [ 324.363680][ T29] audit: type=1326 audit(2000003041.704:28160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.9.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15e830849 code=0x7ffc0000 [ 324.387473][ T29] audit: type=1326 audit(2000003041.704:28161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.9.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb15e830849 code=0x7ffc0000 [ 324.411102][ T29] audit: type=1326 audit(2000003041.704:28162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.9.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15e830849 code=0x7ffc0000 [ 324.434842][ T29] audit: type=1326 audit(2000003041.704:28163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.9.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15e830849 code=0x7ffc0000 [ 324.459053][ T29] audit: type=1326 audit(2000003041.704:28164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.9.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb15e830849 code=0x7ffc0000 [ 324.482767][ T29] audit: type=1326 audit(2000003041.704:28165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.9.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15e830849 code=0x7ffc0000 [ 324.506402][ T29] audit: type=1326 audit(2000003041.704:28166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.9.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15e830849 code=0x7ffc0000 [ 324.562696][T17882] FAULT_INJECTION: forcing a failure. [ 324.562696][T17882] name failslab, interval 1, probability 0, space 0, times 0 [ 324.575413][T17882] CPU: 1 UID: 0 PID: 17882 Comm: syz.0.5023 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 324.587521][T17882] Tainted: [W]=WARN [ 324.591349][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.601558][T17882] Call Trace: [ 324.604855][T17882] [ 324.607849][T17882] dump_stack_lvl+0xf2/0x150 [ 324.612560][T17882] dump_stack+0x15/0x1a [ 324.616793][T17882] should_fail_ex+0x223/0x230 [ 324.621500][T17882] ? audit_log_d_path+0x96/0x250 [ 324.626569][T17882] should_failslab+0x8f/0xb0 [ 324.631262][T17882] __kmalloc_cache_noprof+0x4e/0x320 [ 324.636571][T17882] audit_log_d_path+0x96/0x250 [ 324.641406][T17882] ? __rcu_read_unlock+0x4e/0x70 [ 324.646381][T17882] audit_log_d_path_exe+0x42/0x70 [ 324.651491][T17882] audit_log_task+0x192/0x1c0 [ 324.656196][T17882] audit_seccomp+0x68/0x130 [ 324.660768][T17882] __seccomp_filter+0x6fa/0x1180 [ 324.665732][T17882] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 324.671510][T17882] ? vfs_write+0x596/0x920 [ 324.675955][T17882] __secure_computing+0x9f/0x1c0 [ 324.680966][T17882] syscall_trace_enter+0xd1/0x1f0 [ 324.686064][T17882] ? fpregs_assert_state_consistent+0x83/0xa0 [ 324.692188][T17882] do_syscall_64+0xaa/0x1c0 [ 324.696721][T17882] ? clear_bhb_loop+0x55/0xb0 [ 324.701453][T17882] ? clear_bhb_loop+0x55/0xb0 [ 324.706150][T17882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.712058][T17882] RIP: 0033:0x7ffb02390849 [ 324.716506][T17882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.736471][T17882] RSP: 002b:00007ffb00a07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.744906][T17882] RAX: ffffffffffffffda RBX: 00007ffb02555fa0 RCX: 00007ffb02390849 [ 324.753031][T17882] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000009 [ 324.761078][T17882] RBP: 00007ffb00a070a0 R08: 0000000000000000 R09: 0000000000000000 [ 324.769136][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.777129][T17882] R13: 0000000000000000 R14: 00007ffb02555fa0 R15: 00007ffefedd0038 [ 324.785116][T17882] [ 324.826298][T16088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.837301][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.880759][T17892] syz.1.5029[17892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.900132][ T2962] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 324.919359][ T2962] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 324.948145][ T2962] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 324.967071][ T2962] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 325.042137][T17910] __nla_validate_parse: 3 callbacks suppressed [ 325.042167][T17910] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5035'. [ 325.079069][T17916] loop1: detected capacity change from 0 to 512 [ 325.087876][T17910] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5035'. [ 325.106805][T17910] bpf_get_probe_write_proto: 2 callbacks suppressed [ 325.106825][T17910] syz.2.5035[17910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.114080][T17910] syz.2.5035[17910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.126159][T17910] syz.2.5035[17910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.141943][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5035'. [ 325.143319][T17916] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 325.182052][T17910] netlink: 'syz.2.5035': attribute type 10 has an invalid length. [ 325.196350][T17919] dvmrp0: entered allmulticast mode [ 325.213129][T17919] loop9: detected capacity change from 0 to 512 [ 325.227549][T17919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.248364][T17916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.296345][T17929] FAULT_INJECTION: forcing a failure. [ 325.296345][T17929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.309646][T17929] CPU: 1 UID: 0 PID: 17929 Comm: syz.2.5041 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 325.321662][T17929] Tainted: [W]=WARN [ 325.325492][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.335740][T17929] Call Trace: [ 325.339061][T17929] [ 325.342050][T17929] dump_stack_lvl+0xf2/0x150 [ 325.346657][T17929] dump_stack+0x15/0x1a [ 325.350917][T17929] should_fail_ex+0x223/0x230 [ 325.355686][T17929] should_fail+0xb/0x10 [ 325.359909][T17929] should_fail_usercopy+0x1a/0x20 [ 325.364979][T17929] _copy_to_user+0x20/0xa0 [ 325.369414][T17929] simple_read_from_buffer+0xa0/0x110 [ 325.374862][T17929] proc_fail_nth_read+0xf9/0x140 [ 325.379810][T17929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.385371][T17929] vfs_read+0x1a2/0x700 [ 325.389584][T17929] ? __se_sys_statx+0x1f1/0x270 [ 325.394525][T17929] ? __rcu_read_unlock+0x4e/0x70 [ 325.399483][T17929] ? __fget_files+0x17c/0x1c0 [ 325.404240][T17929] ksys_read+0xe8/0x1b0 [ 325.408486][T17929] __x64_sys_read+0x42/0x50 [ 325.413569][T17929] x64_sys_call+0x2874/0x2dc0 [ 325.418344][T17929] do_syscall_64+0xc9/0x1c0 [ 325.422871][T17929] ? clear_bhb_loop+0x55/0xb0 [ 325.427595][T17929] ? clear_bhb_loop+0x55/0xb0 [ 325.432289][T17929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.438200][T17929] RIP: 0033:0x7fc8e07df25c [ 325.442697][T17929] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 325.462374][T17929] RSP: 002b:00007fc8dee57050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.470802][T17929] RAX: ffffffffffffffda RBX: 00007fc8e09a5fa0 RCX: 00007fc8e07df25c [ 325.478938][T17929] RDX: 000000000000000f RSI: 00007fc8dee570b0 RDI: 0000000000000005 [ 325.486963][T17929] RBP: 00007fc8dee570a0 R08: 0000000000000000 R09: 0000000000000000 [ 325.495071][T17929] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 325.503122][T17929] R13: 0000000000000000 R14: 00007fc8e09a5fa0 R15: 00007ffd00bf8bb8 [ 325.511103][T17929] [ 325.515969][T16088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.559922][T17936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5042'. [ 325.569662][T17936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5042'. [ 325.580099][T17936] syz.1.5042[17936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.580396][T17936] syz.1.5042[17936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.592183][T17936] syz.1.5042[17936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.606463][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5042'. [ 325.704432][T17945] xt_bpf: check failed: parse error [ 325.739516][T17951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5051'. [ 325.750304][T17951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5051'. [ 325.763690][T17951] syz.1.5051[17951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.763788][T17951] syz.1.5051[17951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.766718][T17954] netlink: 54 bytes leftover after parsing attributes in process `syz.8.5053'. [ 325.776938][T17951] syz.1.5051[17951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.801541][T17954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.820044][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5051'. [ 325.834508][T17951] netlink: 'syz.1.5051': attribute type 10 has an invalid length. [ 325.841035][T17954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.843336][T17951] geneve1: entered promiscuous mode [ 325.905751][T17366] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.928295][T17966] FAULT_INJECTION: forcing a failure. [ 325.928295][T17966] name failslab, interval 1, probability 0, space 0, times 0 [ 325.941142][T17966] CPU: 0 UID: 0 PID: 17966 Comm: syz.1.5059 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 325.953065][T17966] Tainted: [W]=WARN [ 325.956911][T17966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.967013][T17966] Call Trace: [ 325.970367][T17966] [ 325.973353][T17966] dump_stack_lvl+0xf2/0x150 [ 325.978054][T17966] dump_stack+0x15/0x1a [ 325.982302][T17966] should_fail_ex+0x223/0x230 [ 325.987028][T17966] ? register_netdevice+0x1fa/0xe30 [ 325.992401][T17966] should_failslab+0x8f/0xb0 [ 325.997167][T17966] __kmalloc_cache_noprof+0x4e/0x320 [ 326.002516][T17966] register_netdevice+0x1fa/0xe30 [ 326.007618][T17966] ? slhc_init+0x366/0x380 [ 326.012154][T17966] slip_open+0x85c/0x920 [ 326.016457][T17966] ? up_write+0x30/0xf0 [ 326.020660][T17966] tty_ldisc_open+0x65/0xb0 [ 326.025211][T17966] tty_set_ldisc+0x205/0x3b0 [ 326.029984][T17966] tiocsetd+0x52/0x60 [ 326.034064][T17966] tty_ioctl+0xa94/0xbe0 [ 326.038336][T17966] ? __pfx_tty_ioctl+0x10/0x10 [ 326.043231][T17966] __se_sys_ioctl+0xc9/0x140 [ 326.047954][T17966] __x64_sys_ioctl+0x43/0x50 [ 326.052657][T17966] x64_sys_call+0x1690/0x2dc0 [ 326.057368][T17966] do_syscall_64+0xc9/0x1c0 [ 326.061978][T17966] ? clear_bhb_loop+0x55/0xb0 [ 326.066736][T17966] ? clear_bhb_loop+0x55/0xb0 [ 326.071488][T17966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.077460][T17966] RIP: 0033:0x7f8990c30849 [ 326.081893][T17966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.102041][T17966] RSP: 002b:00007f898f2a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.110478][T17966] RAX: ffffffffffffffda RBX: 00007f8990df5fa0 RCX: 00007f8990c30849 [ 326.118601][T17966] RDX: 00000000200002c0 RSI: 0000000000005423 RDI: 0000000000000005 [ 326.126661][T17966] RBP: 00007f898f2a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 326.134690][T17966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.142680][T17966] R13: 0000000000000000 R14: 00007f8990df5fa0 R15: 00007ffd0535a878 [ 326.150668][T17966] [ 326.159576][T17970] syz.9.5058[17970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.288737][T17978] netlink: 'syz.9.5062': attribute type 29 has an invalid length. [ 326.310960][T17978] netlink: 'syz.9.5062': attribute type 29 has an invalid length. [ 326.350696][T17985] loop1: detected capacity change from 0 to 512 [ 326.386265][T17985] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.410444][T17985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.412385][T17990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.435344][T17990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.476865][T16088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.556343][T17995] loop8: detected capacity change from 0 to 512 [ 326.585274][T17995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.737512][ C1] ================================================================== [ 326.745646][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 326.752918][ C1] [ 326.755247][ C1] read-write to 0xffff88810006ceb8 of 8 bytes by interrupt on cpu 0: [ 326.763331][ C1] wq_worker_tick+0x63/0x240 [ 326.768006][ C1] sched_tick+0xd7/0x140 [ 326.772272][ C1] update_process_times+0x161/0x190 [ 326.777582][ C1] tick_nohz_handler+0x250/0x2d0 [ 326.782552][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 326.787784][ C1] hrtimer_interrupt+0x235/0x4a0 [ 326.792744][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 326.798667][ C1] sysvec_apic_timer_interrupt+0x6e/0x80 [ 326.804319][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 326.810325][ C1] flush_to_ldisc+0x201/0x410 [ 326.815062][ C1] process_scheduled_works+0x483/0x9a0 [ 326.820554][ C1] worker_thread+0x51d/0x6f0 [ 326.825168][ C1] kthread+0x1d1/0x210 [ 326.829263][ C1] ret_from_fork+0x4b/0x60 [ 326.833689][ C1] ret_from_fork_asm+0x1a/0x30 [ 326.838476][ C1] [ 326.840809][ C1] read-write to 0xffff88810006ceb8 of 8 bytes by interrupt on cpu 1: [ 326.848902][ C1] wq_worker_tick+0x63/0x240 [ 326.853527][ C1] sched_tick+0xd7/0x140 [ 326.857774][ C1] update_process_times+0x161/0x190 [ 326.862985][ C1] tick_nohz_handler+0x250/0x2d0 [ 326.867941][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 326.873158][ C1] hrtimer_interrupt+0x235/0x4a0 [ 326.878113][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 326.884018][ C1] sysvec_apic_timer_interrupt+0x6e/0x80 [ 326.889660][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 326.895742][ C1] __tsan_read8+0x31/0x180 [ 326.900170][ C1] n_tty_receive_buf_common+0x862/0xbe0 [ 326.905901][ C1] n_tty_receive_buf2+0x33/0x40 [ 326.910776][ C1] tty_ldisc_receive_buf+0x63/0x100 [ 326.916167][ C1] tty_port_default_receive_buf+0x59/0x90 [ 326.921906][ C1] flush_to_ldisc+0x1ce/0x410 [ 326.926601][ C1] process_scheduled_works+0x483/0x9a0 [ 326.932073][ C1] worker_thread+0x51d/0x6f0 [ 326.936677][ C1] kthread+0x1d1/0x210 [ 326.940749][ C1] ret_from_fork+0x4b/0x60 [ 326.945168][ C1] ret_from_fork_asm+0x1a/0x30 [ 326.949937][ C1] [ 326.952282][ C1] value changed: 0x00000000007b4a80 -> 0x00000000007b7190 [ 326.959562][ C1] [ 326.961885][ C1] Reported by Kernel Concurrency Sanitizer on: [ 326.968033][ C1] CPU: 1 UID: 0 PID: 6546 Comm: kworker/u8:8 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 326.980025][ C1] Tainted: [W]=WARN [ 326.983858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 326.993918][ C1] Workqueue: events_unbound flush_to_ldisc [ 326.999746][ C1] ================================================================== [ 327.290505][T13689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.