last executing test programs: 2m12.431765196s ago: executing program 2 (id=1124): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2m12.337986627s ago: executing program 2 (id=1129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 2m12.288712018s ago: executing program 2 (id=1134): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 2m12.249166179s ago: executing program 2 (id=1136): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x404, &(0x7f0000000840)={[{@init_itable_val}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@nolazytime}, {@errors_remount}, {@quota}]}, 0x3, 0x43f, &(0x7f0000001c40)="$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") r2 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setreuid(0x0, r6) fchmod(r2, 0xc5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.042954721s ago: executing program 2 (id=1139): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x2}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea20000850000000e00000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '%', 0x3a, '[:', 0x3a, './file0'}, 0x2a) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) pipe2$9p(&(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x192}, 0x18) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) ioperm(0x1, 0x9, 0xfffffffffffffff8) socket$tipc(0x1e, 0x5, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 2m11.40461921s ago: executing program 2 (id=1152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000003b66170f04089338605dba1571cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x9) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 2m11.351513661s ago: executing program 32 (id=1152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000003b66170f04089338605dba1571cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x9) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1m26.966817105s ago: executing program 0 (id=2063): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xb, &(0x7f00000018c0)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001480)='kfree\x00', r0}, 0x1a) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000440)='./cgroup/../file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000001200)='wchan\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0xfffffffc, 0x5) lseek(r2, 0x2000, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000840)=""/231) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001340)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRESHEX, @ANYRES8=r2, @ANYRES32, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000002820000004000000807ea5bec1738ef53b7c78883fba6ca6035d7d3b3b", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001600)=ANY=[@ANYRES32=r2, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000059000000950000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0xdfb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61155000000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x408, 0x3001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0xef, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0xafd}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x1, 0xa0}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x9, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xc, 0x1, 0x1, 0x8, 0x2}, 0x199, &(0x7f0000000680)={0x5, 0xf, 0x199, 0x3, [@generic={0xdd, 0x10, 0x1, "9e95624a9b2b585b7612dc7395e1cbfd66873fcca690f35e62275d60471f90c092b170de54116183150aad1098cf8f8c890631576d4bd263f55aef2f35cef4827d0faa8e8bc7325d1fe7a10d7ffe3630791741d035768140c0f67b0290e181d4d3bddc3a8411d5bb1106cce1aa138194fb21f311bdbb05738d68b7c94db043b88f9ae71c45c9fbfdcb7b47f3802d3b21ab47932f43a395d89ff36a36e5a840952b9c7bc6ba18bbf15a021b7b87c21f5d9b75b6f8a90b29f176d8c2fcb5fb3e65afce581d0b3ef7a2f0c6d7c5f5b454d311619e2ddd8c23b82bef"}, @generic={0xb4, 0x10, 0xb, "d725fa9f807459d62bf4a8e40e4da0e4d36a1f0ca65383454aedb82acd0a826d8835c2d6a883cc0c26ef8e0610ee0e44eec874907c5a47b39ffe44b48dfb6e440ff1388bdc3bcfe67f5eed52c6015fce29dd3e4a6a8b4bea1e0cadb1aff900a04fb11a9fa8e78e828a1e899885bcc3e40115b9ccfc7db05ddb882f4b3c1360ad1e82f7e2472952222928f20c16add97d1b4168b989487a2138d6008abb8be9af8152054636e871f5aa13bc24d16cd55815"}, @ptm_cap={0x3}]}, 0x4, [{0xe8, &(0x7f0000000180)=@string={0xe8, 0x3, "6b557eb011ec3ecfbbc0cbefad752307db6f66138c06475b57a1086b9e886517f5fed004225f2968c420f34278f28d84387aa29f6d9a4d9551a20de827f47cf0ce87f2d0efe04c24a4cb85aeb0e03bb83e56996fc10ca412e7191b508eae7059e59ddc07306d8b45bf5be57b622c0733fe84038fc3644cab2c5fb28cb620c308a83ada3f33bf14205b798f5bd63eb5836136e284c582de7da8bd3714752bd38715d59484db667422d4ef513235c2db165956e9496f1f144c4c8276da0d65a00af84aade01b2451262f9d401228738f8dd17169fa48a39ba079c512ea40a950b082714883cda8"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}]}) write$binfmt_register(r3, &(0x7f0000001900)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xc5e2, 0x3a, 'vlan0\x00', 0x3a, 's\xc6\xe4;\x9e\x99yzka\xb8[_\x1f\'\x80\xe6J\xcf\"\x8b\x98E\xf3\xa4\xfb;$\xc6D\x1f\x84\xca\xba\xd9\x03\xfad\x1b\xc2\xf7\x90]\xdc\xfb\x01\"U\xd8\xe2\xaa\xd1\x8a\x92b\xf1f\xe7|T\xc0\xce_\\\xf2\xa0A\xe3>xD\xb9\xf1\xf6\x88\xac\xf1\xca\x04J+\xe9\x06\x91\x911I\xf9\xc2\xfbR\x90\v<\x037G\x1e\xeb\xe23\x84\x96&\xdc\xe7sf\x1e\x01:\x83\xe8\xa4SMI\xa4\xee\xa8\x14\xb6pr\x1b\xc35\\G\xeb\x9a\'|\xda\xa3\x8d\\\xbb\xe77\xcfr\x82\xc3Gl-\x06\xa4?\bX\x91\xb4\xaa\xa6Q\xd2I\xea\x8f&\x998\xcd\xe3*(|\xa0M\xbb\xd3\"\xa6\xa7IN8u\xdd\xce\x16x\x83D\xc1\xb0b\xf2', 0x3a, './cgroup/../file0'}, 0xf5) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000001780)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRES8, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b39bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c4a195fde3ad346e26ee5ed6926cea1ffe0a1bc5a81cd3f9e03818f0704b3d062824900"/233], 0x1, 0x1fa, &(0x7f0000000500)="$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") getgroups(0x4, &(0x7f0000001240)=[0xffffffffffffffff, 0x0, 0x0, 0xee01]) r7 = getegid() lstat(&(0x7f0000001280)='./cgroup/../file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000014c0)='./cgroup/../file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000400)='./cgroup/../file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000001400)={{}, {0x1, 0x4}, [{0x2, 0x3}, {0x2, 0x4}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0x6}, [{0x8, 0xfe3c87e4a62ac267}, {0x8, 0x2}, {0x8, 0x2, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x2, r9}], {0x10, 0x1}, {0x20, 0x6}}, 0x7c, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1m25.677967002s ago: executing program 0 (id=2076): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 1m25.519365805s ago: executing program 0 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 1m25.362180377s ago: executing program 0 (id=2081): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d850000000700000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") (fail_nth: 6) 1m23.67121388s ago: executing program 0 (id=2089): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000500)='+\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x90a\xac', 0x0) ioctl$FICLONE(r1, 0x40049409, r1) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 1m22.147182881s ago: executing program 0 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 1m22.146815731s ago: executing program 33 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 32.165583291s ago: executing program 4 (id=2545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) 32.145614772s ago: executing program 4 (id=2546): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0xed348f71d881f7db, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000000000000a78300000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c7ff00000000ddfe000000001a000000000200000000000000000000a5d0b82fadee540e625b1793a7174c4f4c2a2db8225ec58ea0c09b2eb13b597979d383ce0c88358a38fb977c7eccf6e28a9db4b8b77e7a514144718c5c23e48865b76d79b8c933c6905670a9da99ea3bdcf6a863591a993953f0ec4cf72e642d2000ea8988e838a27de99e6086ae8655b400b1cab36047a2aaf43f70ff80052ee4d5d8db27cd13132c98706fa2b9ce684d55ab15dc5046ae3c346b8bb3b537dd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0xfffffdfd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcffff0501000000140000000c0006000100000001000000080001"], 0x28}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) 31.306101113s ago: executing program 4 (id=2551): socket(0x2, 0x5, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4000800) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000840)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}], [{@hash}, {@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fsmagic}, {@fowner_gt={'fowner>', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x4da, &(0x7f0000001180)="$eJzs3MFvFNUfAPDvbHdpgR+/X3+IKIhSQGNjYgsFhYMXTEw8aGLEgxybthJkAUN7EEKkJAbPJN6NR+NNE696NHrxD8CDBxNDQgyJATytmd2Zdrs7u+3S0lL380mmfW/mzbz3ZubNvJ23swH0rZH0TxLxn4i4FRH/a0SXJhhp/Lt/9+rUg7tXp2K+Vjv1Z1JPdy+NZ/L1tmeR0VJE6dOkZYMNs5evnJusVmcuZfHxufMfjc9evvLy2fOTZ2bOzFyYOHHi2NEjx1+deKX3ShXkl9br3t5PLu7b8+bpm29PlfP5Q9n/5np0VO6tGCNdlr3Q26Yeezuawkn7frq2roVhxYay07qStv+r1YOnN7pAwLqp1Wq1wc6L52utrrfNATatJDa6BMDGyG/06efffFqnrsdj4c7JxgegtN73s6mxpBylLE2l5fPtWhqJiPfn//4inaLbc4jfHlEBAIC+88PJvCfY2v8rxe6mdP/NxlCGI+L/EbEzIp6IiF0R8WREPe1TEfF0awZJRK1L/rta4ov5f5uNIpRur7qSXaT9v9eysa2l/b+89xfDA1lsR0TeYZ45nO2T0agMfnC2OnOkw/a3LJN/c/8vndL8875gVo7b5ZYHdNOTc5MPV9t2d65H7C231j8ppwcuH8ZJImJPROztYbvDTeGzL321byFSaR9eXFL/n/8q2lytYEiv5/G4wg1/GfFi4/jPx5Ljv5hj0n18cnwoqjOHx9Oz4HBhHj/9cuOdTvkve/y/+711lTeOf39qtdVekB7/bU3nf+Tjt4v1H04ikoXx2tmI2kBvedz49bP6dkcOtS972PN/S/JePZy3r48n5+YuHYnYkrzVPn9icd08nqdP6z96qLj978zWSffEMxGRnsTPRsRzEbE/K/uBiDgYEQVVW/Dj689/2GnZ8vV/tNL6Txde/5Yc/8Xx+hUG8pXTOQPnDtx60OHisbLjf6weGs3mFF//kiWXiJWWdHV7DwAAADaHUtS/+18aWwiXSmNjjWdAu2JbqXpxdm5/RFyYbrwjMByVUv6kq/E8uJLkzz+Hm+ITLfGj2XPjzwe21uNjUxer0xtdeehz2+ttPmlr/6k/enzOC2xCazCOBmxSy7X/3TfXqSDAunP/h/7V1P7nOySZ900Z+Hdy/4f+VdT+r8XXXd9dcM2Aza/WQ1sufAkH2NTcy6F/lePdhXD9tWc3eugb7v/Ql3p9r7+3QG2weNFQFPxiwNCjKcbWgrw2JJD2rNZwg5WIWFnirQ+TRd4F7JAmWXHueWAw2hcNRLe1ko6/45D2UIvXSvfKsuU5s3vNT/78N1HW+rT5ZrGdVnrc4asMbMjlCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM39EwAA//9VO9FH") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r6, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r5, 0x7) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) dup(r0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='ext4_alloc_da_blocks\x00', r8}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 30.80095923s ago: executing program 4 (id=2558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4) (fail_nth: 5) 30.263121597s ago: executing program 4 (id=2561): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0xed348f71d881f7db, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000000000000a78300000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c7ff00000000ddfe000000001a000000000200000000000000000000a5d0b82fadee540e625b1793a7174c4f4c2a2db8225ec58ea0c09b2eb13b597979d383ce0c88358a38fb977c7eccf6e28a9db4b8b77e7a514144718c5c23e48865b76d79b8c933c6905670a9da99ea3bdcf6a863591a993953f0ec4cf72e642d2000ea8988e838a27de99e6086ae8655b400b1cab36047a2aaf43f70ff80052ee4d5d8db27cd13132c98706fa2b9ce684d55ab15dc5046ae3c346b8bb3b537dd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0xfffffdfd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcffff0501000000140000000c0006000100000001000000080001"], 0x28}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) 29.492697547s ago: executing program 4 (id=2571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nomblk_io_submit}]}, 0x3, 0x4d5, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045", @ANYRES16=r3, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 15.423245119s ago: executing program 34 (id=2571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nomblk_io_submit}]}, 0x3, 0x4d5, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045", @ANYRES16=r3, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 7.823732362s ago: executing program 3 (id=2731): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x1d}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0xfffffe00, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=f']) 7.758998803s ago: executing program 3 (id=2732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) r5 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) close(r5) ptrace$peekuser(0x3, 0x0, 0xa7a) r7 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x89d94000, 0x7, 0x16a9}, 0x10) write$selinux_access(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 4.297966241s ago: executing program 7 (id=2773): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)) fadvise64(r2, 0x1, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r4, r5+10000000}}, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r6, 0x4, 0x4, 0x30, 0x4, 0x21, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, 0x1, 0x7818, 0x6, 0x5}}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000040), 0x10) sendmsg$netlink(r9, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001f40)={0x218, 0x11, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="96d5ca4ec94685d95d02fccda06116c423d3b58b840614f40d8101799566ba8464c489e4a3dbc83f68f0b28329cbf13d4c93f169197e12a996a5c644121dfa7dd2805cc13b4ad5b84c9cdf07f9d0effd1372e12940", @generic="e77bef1fd3d83bd72f4247750a75beafd891e81ac47308521fb3fef4a6cc58d644aa093743e2f5042e64ec55ba1eb4cf23319d4cd440746e61d6bf8ad177358bbf0e29026fb7c78db08b8f4d1a592db0f9abc1daada3221ac7375e24f4e29d06b6714f2cbb4d139291f558e8c19a7f082361c5a42eb8b2cf30cefaac2da61e3a35751ca34eedad720c99b5ef07ae56ba5a3d8ee9c9e727b96339c74a692e8fdab3166eb092d63730a88feed54720808e440f233f4a3641b647b3c514a7000182235473bf39b3b4d8", @nested={0xe5, 0x125, 0x0, 0x1, [@generic="875b5b7bbbac75018120d98241b28822f70a4dc56f2880f60f58193e3dee0259883547a2b12d558c57731bae34b81cc58bce9865cb0ea90a0ea8fe941c7ed56911e969963804af86a49f74e7671bb3c3817fddc01149d23f2838d846d8985136cf81d5289176b68b489ef7ea73c492deedfcfd6353c17a5b423a01f1f9f9cf3d26b95dac2b71140a93493d97c8323cdf5ee61f7a04ba568518c7e32373c4af02f373b3bf5cfde40157e547c470c4956124dd43e70534cbf752c2c6573eb7b7832da544e7fc64a32672", @typed={0xa, 0xbe, 0x0, 0x0, @str='/,W\\%\x00'}, @nested={0x4, 0xf0}, @nested={0x4, 0x46}, @nested={0x4, 0x130}]}]}, 0x218}, {&(0x7f0000004540)={0x1cc, 0x37, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="fbb58747a83c3f4f21536bc0082d6e2653d94aae67c9c176725914eecb2d0ffe519dc120aacb94665f574baf67d8e55c94e48e231285ba4dcff618558f4c328d3052bc3a426bf9f2583a791c10aa9164f16189d647e2694e87acb8c62b4973a7831c9f545047748c5852baa5e0ef820a8e7caec980a2c822d114217bacc75a485d9ba8ebc0a0b9fe9e0a1720e00d85fd304011ccd8", @generic="8503c3cf35c1b9da5aac537fbed816bcad3846b3e9f21dba6890e49f13bcee327b706250ffdaab07aa5101b35c67ea18201453f835d9011133720f6235bcb3b65fcc61b32ab24c00936b89c7f78915debc371432d5c4228c36915fb5aec7cbef3ebfc41df75890eda2bd51c2a79acaa6e9a518f07b94b7c2d8194caa2619f3ecd0d319d3b1306a84b0ebbae2abec4d16b24fcb93f1e1cedbd6dcb31777a7b83df23b2217ecd7095689d45c4e64827c526f6a3ba0b81a516bb3b0ef690b9eb27f72d7ed0b8c", @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x24}]}, @typed={0x8, 0xf6, 0x0, 0x0, @uid}, @generic="fd57eaabc453f25452ef57006cc8e52741e52fde82a193", @nested={0x35, 0x33, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0xeb}, @generic="67ff172d2e5e6d8970e6658c503f8085b8e9b43039e9ec980e722e1b3ff6835146e08e1ef917a1b662"]}]}, 0x1cc}, {&(0x7f0000000780)={0xd4, 0x42, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="0fe9dd82312b0b0bbe4f1082758180bac7", @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @generic="c0a846330416858d7c62415ba676a363047facd88c2f5b5c5ebcec2a763789db9e19f0e268c2ae4238c12f5f673c902dfc4fc2f42cd2e1c21a3170db6fa9e3c7dc3bf5e620b010996a671cbb166415e7183e398fbaf922fe6ca75821cce0ef4182d466769877845bdb78b6857f682bf42f4c969bb2ec967c8270d1c50e16a7cde6722b9a4d5563c913af7e754f1c9e8dc97cf72430ad30bdc74e02edb187fb20df63d2f17e001dce"]}, 0xd4}], 0x3, 0x0, 0x0, 0x44011}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@getqdisc={0x58, 0x26, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0x4}, {0x3, 0x4}, {0xd, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x0) 3.951054466s ago: executing program 6 (id=2776): creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) (fail_nth: 9) 3.907850436s ago: executing program 1 (id=2777): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x182000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="84000000230001002bbd7000ffdbdf250000000008000b00010000000c000f00030000000000000008001e00ffffffff540003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000f7c3a0c8db77782e77f54b9a506084b1969340e4d59cd12da3474511b74df3d92ba3e328add1a"], 0x84}, 0x1, 0x0, 0x0, 0x8880}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000002780)='./file1\x00', 0x4c, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000002880)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100070000000000040002000045f47e815b4beb6327000000100007000000"], 0x24, 0x1) unlink(&(0x7f0000000100)='./file1\x00') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd0e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0xfffffffffffffc17, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25df9bfb, {0x0, 0x0, 0x0, r11, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0xfffffffffffffeac}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe3, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="f6a6b04ae410ff936e3afcf6d7c9dae8b5a70bd4f0d9c726c2375258aad6516653df4c525504cb97537b00b19f7161a9", 0x30}, {&(0x7f00000003c0)="fdab9e27a1acd5199c0025d2a9aec7c383d3dcf6b7f168b37b429707a749683b11a0686bbc925fbeb9cccae296533d9e2be259695d9f60cb8883ac68bca80e0fadfd27bee852b44e044a9af60ee86b4f7729e5e9abcedf18308794dcd9d94e5faf7363e68cb8499087be6f3040c38c89ee3fc68186dc2fd27df0b515fe6f9c9d0fd47d7b0bf3d85b1382087f75bb76fd376364a0c77cbc237bb9bb87c70e2d5762c41ccbbe37606b3be33084bcf9c865095e3cb5617252b625ceb201cd760d4aa951ed494f3dd18111e628380b3c12dba933f0", 0xd3}, {&(0x7f0000000080)="f00adb5883ca4c030a48309ff67f9c1f8bee68aa18930c02d331aa522e7ce2e99b7faa", 0x23}, {&(0x7f0000000580)="7653f61dfc768628f9deb09abbf49a3a9247930336c18828ea1e900fcb9a9b2c0e9e211382a91a71d8d2e66160a3c2bdc6bd69b96144294abe85c523a89953d6527afec6a19955005a464432a669568760854380fb92424f6df45c4b18c956eaefcffd83e50350642bef6fc967c3a0af880d92bc0328db6ba447e14a57e7b362483f1f7ec0902a10e9f9ddf0fc4fbf6432c992e2cf8f831915c9d635ce", 0x9d}, {&(0x7f0000000240)="0fdebd2f0306b7f946289b83290fb1bfbcce661c7523bad48728bcecd807ee", 0x1f}], 0x5) syz_io_uring_setup(0x713b, &(0x7f0000000800)={0x0, 0xdb17, 0x200, 0x8003, 0x13}, &(0x7f0000000880), &(0x7f0000000340)) syz_io_uring_setup(0x10f, &(0x7f0000000740)={0x0, 0x5903, 0x2, 0x4, 0x2ef, 0x0, r0}, 0x0, 0x0) 3.58717736s ago: executing program 6 (id=2778): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x3665, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0xfd2c) socket$netlink(0x10, 0x3, 0x14) lsm_set_self_attr(0x69, &(0x7f00000000c0)=ANY=[@ANYBLOB="650000000000000006000000000000002400000000000000040000000000000021b2d4bcbe7d02f5e9754101182a1b4e33b33abff7b03745d880e02da266f83a7e44491a5ce0bc3b40aa5762726a67652ce2ded57f53af5b19e0d85b2ab1e0699a9413ff2f1ce8c86f7f5c33aaf9f93d633bebbb461f194b7bc7271ec486e4843a82678280e3788a820d362230d9d651d5817eec2c0fc6c5"], 0x24, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x0) 3.58673204s ago: executing program 6 (id=2779): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) unshare(0x62040200) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) pipe(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.546133461s ago: executing program 5 (id=2780): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 3.545758311s ago: executing program 5 (id=2781): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1695458af2ac700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu&\t\t') 3.379112653s ago: executing program 5 (id=2782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)="7f08478a199225c5960eaf32556431638c0d9fc9aa2167d179b0ba4495ce9a6b3f145cee08655358ac38a39f0d6793c1d5049bd03f42698dff040076bf34d15092d1aea63631664d05d9e7da3c59d96e8aa6cc88695d62a58f5d1d1646b5bb7cdc47a0beb91634346a4eb98c9a1a23d0151101bd113dc3058272bbb57afcef151e3c93ae0f9bd68d61a975bb8a32eecf18133c0c7f6cc8e8ce69134ccafad5ac0cb9ad2aa221466dd1d37d780476301048403861738e109f7e89c1f1e5107ea76f9cc5d2a09f51048ed22b9db163d68100422a16bdd041a44bbd2163d416c80f74adcb421284321ddd96fc3d0a8ac660c772a1", 0xf3}, {&(0x7f0000000980)="ec00a492b0609e313744ded3181db9e2b6aa0e2761ccc287af012e2f11bed109ddab06980ed22e814983630a3aaa30694c5e27b72b3937d96f865b83587db16751ed9e8a47dce0501193579f3d251226a539a8926a96ae5e5441b7dd87b9e7ac31b64a841a4d59670590a4236460b54b7babb3593c644ff960a429", 0x7b}], 0x2}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1800c03, &(0x7f0000000780)={[], [{@uid_lt}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x20}}, {@obj_user={'obj_user', 0x3d, 'root'}}]}, 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000094128100000000000000f8ff7f000017000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="b3bbd2ad799d19a48ba25b9ac6cd", 0x0, 0x4ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.313293234s ago: executing program 7 (id=2783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x8000000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="440100001000130400000000f9dbdf25fe80000000000000000000000000000000000000000000000000ffffe000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000000000009f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000002abd7000000000000200020062000000000000004c0012"], 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r13, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) getuid() 2.400648086s ago: executing program 5 (id=2784): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 2.235097019s ago: executing program 5 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x2010, 0xffffffffffffffff, 0x8000000) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000000680)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0x1, 0x4, 0xc42f, 0x5, 0x10, 0x0, {0x3, r11}}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0xd6c799064f2bdba8, 0x0, r3, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r11}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.085278261s ago: executing program 7 (id=2786): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 2.070764331s ago: executing program 5 (id=2787): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.863615434s ago: executing program 1 (id=2788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1003}, 0x18) r2 = fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1.795238985s ago: executing program 7 (id=2789): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x3665, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0xfd2c) socket$netlink(0x10, 0x3, 0x14) lsm_set_self_attr(0x69, &(0x7f00000000c0)=ANY=[@ANYBLOB="650000000000000006000000000000002400000000000000040000000000000021b2d4bcbe7d02f5e9754101182a1b4e33b33abff7b03745d880e02da266f83a7e44491a5ce0bc3b40aa5762726a67652ce2ded57f53af5b19e0d85b2ab1e0699a9413ff2f1ce8c86f7f5c33aaf9f93d633bebbb461f194b7bc7271ec486e4843a82678280e3788a820d362230d9d651d5817eec2c0fc6c5"], 0x24, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x0) 1.794815595s ago: executing program 1 (id=2790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2050, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 1.39936268s ago: executing program 6 (id=2791): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x20040040}, 0x0) 1.315593641s ago: executing program 6 (id=2792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) capset(0x0, 0x0) syz_io_uring_setup(0x3665, 0x0, 0x0, 0x0) syz_clone(0x45128480, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_secret(0x80000) 1.310791601s ago: executing program 7 (id=2793): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) (fail_nth: 4) 727.255869ms ago: executing program 1 (id=2794): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 711.1455ms ago: executing program 1 (id=2795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a00000003000000ee779975b18574642e9f862d00000b010000"], &(0x7f0000000340)=""/210, 0x2e, 0xd2, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) sched_setscheduler(r4, 0x5, &(0x7f00000001c0)=0xdc96) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000012c0)=ANY=[@ANYBLOB="28002b85", @ANYRES16=r8, @ANYBLOB="8b3320000002fbdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fcffffff32000000"], 0x28}}, 0x10) r9 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r9, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r11, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000003c0), 0xff, 0x52e, &(0x7f0000000f00)="$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") 638.636641ms ago: executing program 1 (id=2796): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000003bc0)={0x0, 0x3938700}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0xed348f71d881f7db, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000000000000a78300000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c7ff00000000ddfe000000001a000000000200000000000000000000a5d0b82fadee540e625b1793a7174c4f4c2a2db8225ec58ea0c09b2eb13b597979d383ce0c88358a38fb977c7eccf6e28a9db4b8b77e7a514144718c5c23e48865b76d79b8c933c6905670a9da99ea3bdcf6a863591a993953f0ec4cf72e642d2000ea8988e838a27de99e6086ae8655b400b1cab36047a2aaf43f70ff80052ee4d5d8db27cd13132c98706fa2b9ce684d55ab15dc5046ae3c346b8bb3b537dd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0xfffffdfd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcffff0501000000140000000c0006000100000001000000080001"], 0x28}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) 511.083532ms ago: executing program 7 (id=2797): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000003bc0)={0x0, 0x3938700}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0xed348f71d881f7db, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000000000000a78300000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c7ff00000000ddfe000000001a000000000200000000000000000000a5d0b82fadee540e625b1793a7174c4f4c2a2db8225ec58ea0c09b2eb13b597979d383ce0c88358a38fb977c7eccf6e28a9db4b8b77e7a514144718c5c23e48865b76d79b8c933c6905670a9da99ea3bdcf6a863591a993953f0ec4cf72e642d2000ea8988e838a27de99e6086ae8655b400b1cab36047a2aaf43f70ff80052ee4d5d8db27cd13132c98706fa2b9ce684d55ab15dc5046ae3c346b8bb3b537dd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0xfffffdfd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcffff0501000000140000000c0006000100000001000000080001"], 0x28}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) 394.351444ms ago: executing program 3 (id=2735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) 353.227594ms ago: executing program 3 (id=2798): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b90402aede0074651060f903f4db38f5d5330300e8fe55a11800000000000e12090021000000000000", 0x37}], 0x1}, 0x2404c004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000ffff0000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000add6b808bfbaadeb00000000"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x4, 0x8, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00', @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fallocate(0xffffffffffffffff, 0x1, 0xfff, 0x5) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x401c0c0}, 0x40040) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='6']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 289.084046ms ago: executing program 6 (id=2799): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') write$UHID_CREATE2(r3, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x5, 0xfffffffe, 0x0, 0x5, 0x8}}, 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r8, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r7}, 0x10) syz_usbip_server_init(0x3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 135.128307ms ago: executing program 3 (id=2800): execve(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) preadv2(r0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/79, 0x4f}], 0x1, 0x1, 0x11e, 0x8) r1 = mq_open(&(0x7f0000000080)='{\x00', 0x2, 0x20, &(0x7f00000000c0)={0x3, 0x800, 0xb, 0x5}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="2d0b46b855b30b04cb26294fb556f7afce3aff4b6fd6104736e5de89c3f0c4ee012d9784b84c11387b5d5a932d00e4b79fed4811819e7aab272c52f0353937be04efe4f7ac4e114c34dab4570f7d7681b2be79213b888340b9608ea28b9d15a7c38872", @ANYRESHEX=r1], 0xff, 0x1c8, &(0x7f0000000200)="$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") lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000002d000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r7, 0x8004b708, 0x0) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'W$}\x84%)%\\'}}, {@cache_readahead}, {@debug={'debug', 0x3d, 0xcf}}, {@cache_readahead}, {@version_u}, {@cachetag={'cachetag', 0x3d, '-}^!,@'}}, {@cachetag={'cachetag', 0x3d, 'A\xf6\xa6\fU\xad\xa8)Sp\x00^\xd3\xd2\x06\xbc\xc8U\x99\x9c\x16H\xd6\x9e\xb6\xf6\x00\'\xe0Q\xf3\xa9\x8e\xbe\xd9\x19-\x8a\t\x85@\xe7\x05+\xe5\xc30\xee\xdf\xab\x89\xbd\xea2\x97\x01\x13\xbfO\x1b\x88\xc3\xae\xdd\xb5p\x9c\x95\x9av\x99L\xa8\x8c!3\xa2\x0e\x00\xda\xcc\x9bn\xcd\xf7\x10\\[H>a\x8e\xc2b\xd7\xef/\"f\xe5\xe2\x06\x00\x06\xa4Sr\xf4{7,rSI\x01\xf7\xc4i\xbc\xe30x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000280)={0x0, 0x0, 0xe8, 0x0, 0x63}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x2054, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2024, 0x2, [@TCA_BASIC_EMATCHES={0x28c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x0, 0x1}, {0x5, 0x6, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x220, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa, 0x8, 0xffc0}, {0x2, 0x5, 0x1}}}, @TCF_EM_CONTAINER={0x5c, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x6}, "1cbffb6286db31b1505e132a3b67a7d00bf5f34712a9ef2f5e5003f67de2d49af2b13cf4050acd18e2c733c6d7daf55c7f75c5d9c19606acf1e58e25e40d98f529579259623d5777aa27b09534"}}, @TCF_EM_CONTAINER={0x68, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x9}, "5f2cab9174ea146fc004c781926845f1444feb55dfaf01a01f106c7b19762bdb180f5aed76e6f052d2dfd5607577d309d2019a1cb39c9548057db16487603fc4fbef21f04343931750ec5cbc088cac011efe1c1ddfc37c531156"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0xff7f}, {0x4, 0x751, 0x6, 0x1}}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x7f}, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='!', @TCF_META_TYPE_VAR="6486b453", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="0d32f3cfd7", @TCF_META_TYPE_VAR="de98c97657f3", @TCF_META_TYPE_VAR="206b1a66"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff, 0x8, 0x1}, {0x1, 0x1c, 0x2}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="c73ef53e8bc56a3a0a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9, 0x3}, {0x0, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x27, 0x5, "b30ea9ca70da59fa23a6120ca21117e2c9d9920640c8236518e3881813da9ac2fc92b0"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_VAR="67a274b3cbea32", @TCF_META_TYPE_VAR="954abb2858bfc0ef", @TCF_META_TYPE_VAR="d98944cbfca6b976", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="2417bf377d", @TCF_META_TYPE_VAR="5e162a", @TCF_META_TYPE_VAR="d5491038"]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR='{P', @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7f, 0x1}, {0x5, 0x5}}}]}}, @TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x68}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7f, 0x7, 0xf800}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x4}, {0x0, 0x6, 0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}, @TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x638, 0x5, 0xac, 0x1, 0xd56, 0x3, 0x1, 0x34, 0xff, 0x8, 0x4, 0x10, 0x113, 0x5, 0x0, 0x2, 0x2, 0x0, 0x6, 0x4, 0x4, 0x1, 0x3, 0x6, 0x0, 0x585b4726, 0xc3d, 0x2, 0x3, 0xe, 0xa1, 0x8, 0x2c, 0x3, 0xde0, 0x0, 0xb, 0x3, 0x8, 0x18, 0x100, 0x100, 0x4, 0x9, 0x32f, 0xff, 0xfffffa65, 0x6, 0x2, 0x6, 0x3, 0xfffffffc, 0x7, 0x10000, 0x200, 0x7fff, 0x2d, 0x81, 0x8a70, 0x0, 0xff, 0x7, 0xd7c, 0x3, 0xffffffff, 0x80ae, 0x5, 0x5, 0x8, 0x8, 0x7, 0xd, 0x3ff, 0x0, 0x4, 0x2, 0x1, 0x2, 0xfff, 0x7, 0x2, 0x9, 0x75bf, 0x8, 0x4, 0x6, 0x1ff, 0x0, 0x6, 0x14a, 0x6, 0x8, 0x0, 0x2, 0x7fffffff, 0x3, 0x4, 0x80, 0x7, 0x401, 0xf000000, 0x78f62317, 0x1, 0x0, 0x1, 0xb00, 0x1ff, 0x7fff, 0x0, 0x4, 0xffffffff, 0x6, 0x9, 0x8, 0x1, 0xe, 0x7, 0x1, 0xffffffff, 0x8001, 0xe, 0xfff, 0xc2a1, 0xfffff6db, 0xfffffff8, 0xc29, 0x20, 0xfffffffe, 0x800, 0x6, 0x3, 0xb8, 0x4f, 0x1000, 0x5e2, 0x6, 0x80, 0x5, 0x0, 0x6, 0x7, 0x0, 0x3, 0x1, 0x0, 0x10001, 0x9, 0x81, 0xf, 0xbea1, 0xfffffffc, 0x6, 0x4, 0xfffffffa, 0x7, 0x7fffffff, 0x5, 0x61, 0x0, 0x9, 0x684, 0x7, 0x7, 0x4, 0x4, 0x6, 0x4, 0x670, 0x7, 0x101, 0x2, 0x1, 0xff, 0x8622, 0x7, 0x6, 0x5, 0x3, 0x6, 0x584f, 0xeed, 0x7ff, 0x7, 0x6, 0x4, 0x3, 0xc, 0x3ff, 0x10, 0x5, 0x1, 0x782, 0xa, 0x1, 0x8, 0x8, 0x4, 0x6f87, 0x7, 0x1, 0x1, 0xfffffcd1, 0x1, 0x2, 0x937, 0xb91, 0xf, 0x7, 0x0, 0x100, 0x4, 0xc, 0x20b, 0x9b6, 0x8, 0x8001, 0x9, 0x3, 0x9, 0x3, 0x78, 0x2, 0x7, 0xfff, 0x0, 0x8000, 0x4, 0x5, 0x5, 0x100, 0x5744be61, 0xffff490f, 0x68, 0x0, 0x9, 0x10, 0xf, 0x2f, 0xfffffff8, 0x0, 0xffffff29, 0xfffffff8, 0xb, 0x0, 0x2, 0x4, 0x9, 0x1, 0x0, 0x8, 0x4, 0x1b9, 0x1000, 0x808e, 0x5, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x5f1, 0xfffffffd, 0x769, 0x9, 0x7, 0x8, 0x3ff, 0x3, 0x0, 0x81, 0x28e, 0x4, 0x40, 0x6, 0xdc2, 0x1ff, 0x8, 0x1, 0x9b48, 0x8, 0x80000001, 0x0, 0x9, 0x0, 0x2, 0x7, 0x8000, 0x4, 0x2, 0x401, 0x0, 0xfffff4af, 0x8, 0x4, 0x86a, 0x46fe, 0x1, 0x7fff, 0x9, 0x5, 0x5, 0x707e, 0x800, 0x6, 0x1bc24994, 0x8, 0x8, 0x2db, 0x3, 0x6, 0x1, 0x2, 0x6, 0x5, 0x4, 0x8, 0x2e5, 0x5, 0xfffffff3, 0x4, 0xc, 0x8, 0xf, 0x7, 0x5, 0x920c, 0x6c1, 0x2, 0x2, 0x81, 0xffffffff, 0x800, 0x101, 0x7fffffff, 0x0, 0x40, 0xa, 0x6, 0x2, 0x9, 0x5, 0x8, 0xe3b, 0xa, 0x0, 0x3e16, 0x9, 0x8, 0xfffffffd, 0x7, 0x9, 0x1, 0x8, 0x1a0d10c3, 0xf37f, 0x9, 0x1, 0x5, 0x3, 0x5, 0x48, 0x1, 0x0, 0x6, 0x2, 0x6, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x2, 0x6, 0x8, 0x75, 0x7, 0x2, 0x3, 0x7, 0x7, 0x9, 0xb79, 0x100, 0x400, 0x40, 0x6, 0x1, 0x8, 0x6, 0x80000001, 0x80000001, 0xb, 0x0, 0x88f, 0x9, 0x5, 0x2, 0x0, 0xe0000000, 0xb, 0x0, 0x82, 0xfff, 0x40000, 0x1, 0xf, 0x7f, 0x3, 0x10001, 0x7fff, 0x5, 0x200, 0x1000, 0x2, 0xb2a4, 0x3fb2, 0x7, 0x1, 0x1, 0x0, 0x6, 0x7, 0x2, 0x0, 0x4, 0x0, 0x9, 0x0, 0x6, 0x4, 0x15f6859a, 0x2, 0xb7d, 0x3, 0x5, 0x7ff, 0xa0, 0x2, 0xf8, 0x4, 0x9, 0x6, 0x1, 0xcb60, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x1, 0x2, 0x5, 0x4, 0x3, 0x80, 0x9, 0x1, 0x7, 0x1, 0xa, 0x8, 0xae9, 0x6, 0x9fc, 0xfffffff7, 0x2, 0xc, 0x4, 0xc000000, 0x200, 0x9, 0x2, 0x7fffffff, 0x8, 0x7, 0xc1, 0x9, 0x9b6, 0x7a24, 0x1, 0x800, 0x2, 0x7, 0x0, 0x10001, 0xffff7fff, 0x3, 0x6, 0x8, 0xe, 0x4, 0x6, 0x7, 0x8000, 0xfff, 0x843, 0xfffffffe, 0x0, 0x9, 0x2c, 0x200, 0x3ff, 0xffffff01, 0x100000, 0x3, 0x5, 0xbc87, 0x10, 0x9, 0x6, 0x8001, 0x4, 0xffffffff, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfc}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x1}}, @TCA_BASIC_ACT={0x1574, 0x3, [@m_nat={0x116c, 0xe, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x800, 0x20000000, 0x2a, 0x6}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0x10000000, 0x0, 0x4000}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3757, 0x9, 0x10000000, 0x0, 0x6}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x2, 0x3, 0x5, 0x2}, @local, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc1, 0xffffff81, 0x10000000, 0x7, 0xfff}, @rand_addr=0x64010100, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0xd, 0x10000000, 0xffffffff, 0x2}, @remote, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x4, 0x2, 0xf5, 0x400}, @multicast1, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x20000000, 0x6, 0x8}, @remote, @broadcast, 0xff000000, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x110, 0x8, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x5, 0x4, 0x80, 0x80000001}, {0x2, 0x10, 0x0, 0xe2fb}, {0x3ff, 0x91, 0x57, 0xe957}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0xa2, 0x6, "e686f82ca1b84601657ba34dc6f5fc7f2199bd50a0ad050cce971914438db8af06f88211ea97c667aca9a928484c1f9c85a3d9a65b56cdec4e052eaa4564785a1ac600acacbfee74845796eb009d415dc91264ef08d01a6a6cf15294515d3ac102751fb7ed1e6a10564a42ec3b162d9e5d61c613818c4a4c0f68515e9e60bf934e5928f8c4f0847c47df946bdcf098116c172550b1d6776778768ae8ef11"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x78, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x44, 0x6, "4bbd43ca054b0cea58adfa5b4c3526c7cb851b6bc8f0e1fb3d83b1f6dfd9935609d6b8cb053e3e1329a76d55a0bac94bb6ae6d845cb585d17e29cc37faa5138f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x128, 0x6, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xf5, 0x6, "e5ea0e3980b47b5cbbdd3a60234324ea22e337dd7b4b05ce18ee27aec181d688ae1461a257a72fb2988b1dae010094fbe6634572ec1ed7f4379d01fee9f785f3bef567e86cf890202188b3545de83c07d2acbec028fc473c58c047f694d23b446e0c3d0eea4f26c0168722ef51ff1ff9e717a172bdcb307ad9c9393186b985b7b25c207f1a290602b4659a146d6971d3e4378d79ce45dbc8723c6f3ea4518c0ddda4eda75bfff65f305372a4347f288b3a2cee3c111ca44ea50a7003904f2c0dfd46e8cc245a522a72b83a963e33f8371044c321ae7d82d6fae4ec20a799030ef5ac7807cb406fdce2f149c3c37034ea1d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x154, 0x11, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400000, 0x5, 0x1, 0x1, 0x4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xfffffffe, 0x6, 0x6b, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x3, 0x5, 0x9, 0x4}, 0x400}}]}, {0xd0, 0x6, "38679af11a07dedfab2110049670e59720418aad7ed589f935e863f036be51535b2c8122fdb6c488cb1f4dbcdacc4a49e11a20087e6ff7951b0bba2a0dafbb2e95ecc419feb46087a5556e97da7ab70ed54c2234b0c1b0a042840fdef148882107cf44cda1f450441c74448de7ac38ccc3ec8646756714c3b121a439c00197f5115382d1ae0be819e04faaefc9d0eef95d2091224eb37b13fda14b6b57313060c652c77e471b1ffa505021f8ec66c03548eaf8579fcff901e307d05db8b8b23096b86ae90da9f48eedd01436"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2054}}, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000006740)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") (async) utimes(&(0x7f0000000740)='./file0\x00', 0x0) (async, rerun: 64) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) (rerun: 64) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) close_range(r1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18329726fff72a305b0000000000050018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 120][ T9883] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 156.615162][ T9883] ? mutex_lock+0xd/0x30 [ 156.615194][ T9883] do_writev+0xe7/0x210 [ 156.615229][ T9883] __x64_sys_writev+0x45/0x50 [ 156.615266][ T9883] x64_sys_call+0x2006/0x2fb0 [ 156.615331][ T9883] do_syscall_64+0xd0/0x1a0 [ 156.615358][ T9883] ? clear_bhb_loop+0x25/0x80 [ 156.615380][ T9883] ? clear_bhb_loop+0x25/0x80 [ 156.615405][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.615425][ T9883] RIP: 0033:0x7f562bebe969 [ 156.615450][ T9883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.615472][ T9883] RSP: 002b:00007f562a527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 156.615495][ T9883] RAX: ffffffffffffffda RBX: 00007f562c0e5fa0 RCX: 00007f562bebe969 [ 156.615508][ T9883] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 156.615519][ T9883] RBP: 00007f562a527090 R08: 0000000000000000 R09: 0000000000000000 [ 156.615568][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.615582][ T9883] R13: 0000000000000000 R14: 00007f562c0e5fa0 R15: 00007ffe2b3b8a28 [ 156.615634][ T9883] [ 157.100281][ T29] audit: type=1400 audit(1748017028.276:8880): avc: denied { create } for pid=9892 comm="syz.3.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.141429][ T9929] hub 2-0:1.0: USB hub found [ 158.148309][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2232'. [ 158.178047][ T9929] hub 2-0:1.0: 8 ports detected [ 158.202480][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 158.219069][ T9931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.248768][ T9938] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.2234'. [ 158.273230][ T9936] bond1 (unregistering): Released all slaves [ 158.279825][ T9938] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.2234'. [ 158.305820][ T9942] hub 9-0:1.0: USB hub found [ 158.318507][ T9942] hub 9-0:1.0: 8 ports detected [ 158.350503][ T9944] IPv6: sit1: Disabled Multicast RS [ 158.364256][ T9944] sit1: entered allmulticast mode [ 158.376319][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'. [ 158.424711][ T9949] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 158.507023][ T9957] SELinux: syz.3.2242 (9957) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 158.602022][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.615780][ T9969] lo speed is unknown, defaulting to 1000 [ 158.616865][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.621615][ T9969] lo speed is unknown, defaulting to 1000 [ 158.629355][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 158.629371][ T29] audit: type=1400 audit(1748017110.782:8933): avc: denied { write } for pid=9968 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 158.635406][ T9969] lo speed is unknown, defaulting to 1000 [ 158.643635][ T29] audit: type=1326 audit(1748017110.812:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.663002][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 158.670948][ T29] audit: type=1326 audit(1748017110.842:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.693492][ T9969] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 158.698976][ T29] audit: type=1326 audit(1748017110.842:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.732895][ T9969] lo speed is unknown, defaulting to 1000 [ 158.753371][ T29] audit: type=1326 audit(1748017110.842:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.753408][ T29] audit: type=1326 audit(1748017110.842:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.769510][ T9969] lo speed is unknown, defaulting to 1000 [ 158.837581][ T9981] program syz.1.2247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.871300][ T9981] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 158.883335][ T29] audit: type=1326 audit(1748017110.962:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.903687][ T9969] lo speed is unknown, defaulting to 1000 [ 158.906887][ T29] audit: type=1326 audit(1748017110.962:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.912954][ T9969] lo speed is unknown, defaulting to 1000 [ 158.935956][ T29] audit: type=1326 audit(1748017110.962:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.936061][ T29] audit: type=1326 audit(1748017110.962:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.6.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c631e969 code=0x7ffc0000 [ 158.942116][ T9969] lo speed is unknown, defaulting to 1000 [ 158.993638][ T9985] FAULT_INJECTION: forcing a failure. [ 158.993638][ T9985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.008101][ T9985] CPU: 0 UID: 0 PID: 9985 Comm: syz.5.2253 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 159.008160][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 159.008292][ T9985] Call Trace: [ 159.008299][ T9985] [ 159.008307][ T9985] __dump_stack+0x1d/0x30 [ 159.008329][ T9985] dump_stack_lvl+0xe8/0x140 [ 159.008348][ T9985] dump_stack+0x15/0x1b [ 159.008388][ T9985] should_fail_ex+0x265/0x280 [ 159.008421][ T9985] should_fail_alloc_page+0xf2/0x100 [ 159.008491][ T9985] __alloc_frozen_pages_noprof+0xff/0x360 [ 159.008588][ T9985] alloc_pages_mpol+0xb3/0x250 [ 159.008611][ T9985] alloc_pages_noprof+0x90/0x130 [ 159.008633][ T9985] pte_alloc_one+0x2a/0x110 [ 159.008651][ T9985] __pte_alloc+0x32/0x290 [ 159.008673][ T9985] handle_mm_fault+0x1d74/0x2ae0 [ 159.008737][ T9985] ? __rcu_read_unlock+0x4f/0x70 [ 159.008799][ T9985] do_user_addr_fault+0x3fe/0x1090 [ 159.008861][ T9985] ? __rcu_read_unlock+0x4f/0x70 [ 159.008883][ T9985] exc_page_fault+0x54/0xc0 [ 159.008917][ T9985] asm_exc_page_fault+0x26/0x30 [ 159.008965][ T9985] RIP: 0010:__put_user_4+0xd/0x20 [ 159.008988][ T9985] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 159.009006][ T9985] RSP: 0018:ffffc90011053e88 EFLAGS: 00050206 [ 159.009079][ T9985] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000400 [ 159.009091][ T9985] RDX: ffff8881379da100 RSI: 0000000000000005 RDI: 0000000000000000 [ 159.009128][ T9985] RBP: 0000000000000004 R08: 0001ffff86846b2f R09: 0000000000000000 [ 159.009178][ T9985] R10: 000188812736fbc0 R11: 000188812736fbc7 R12: 0000200000000400 [ 159.009190][ T9985] R13: 0000000000080803 R14: 0000000000000022 R15: 0000000000080800 [ 159.009211][ T9985] __sys_socketpair+0xa6/0x430 [ 159.009240][ T9985] ? ksys_write+0x16e/0x1a0 [ 159.009318][ T9985] __x64_sys_socketpair+0x52/0x60 [ 159.009353][ T9985] x64_sys_call+0x23f2/0x2fb0 [ 159.009374][ T9985] do_syscall_64+0xd0/0x1a0 [ 159.009413][ T9985] ? clear_bhb_loop+0x25/0x80 [ 159.009434][ T9985] ? clear_bhb_loop+0x25/0x80 [ 159.009455][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.009476][ T9985] RIP: 0033:0x7f562bebe969 [ 159.009490][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.009508][ T9985] RSP: 002b:00007f562a527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 159.009589][ T9985] RAX: ffffffffffffffda RBX: 00007f562c0e5fa0 RCX: 00007f562bebe969 [ 159.009601][ T9985] RDX: 0000000000000000 RSI: 0000000000080803 RDI: 0000000000000022 [ 159.009613][ T9985] RBP: 00007f562a527090 R08: 0000000000000000 R09: 0000000000000000 [ 159.009625][ T9985] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 159.009636][ T9985] R13: 0000000000000001 R14: 00007f562c0e5fa0 R15: 00007ffe2b3b8a28 [ 159.009655][ T9985] [ 159.339053][ T9991] Invalid ELF header magic: != ELF [ 159.424106][ T9997] lo speed is unknown, defaulting to 1000 [ 159.494553][ T9997] lo speed is unknown, defaulting to 1000 [ 159.579047][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'. [ 159.803852][T10013] Invalid ELF header magic: != ELF [ 159.865370][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2265'. [ 159.915307][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.930249][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.942883][T10023] loop5: detected capacity change from 0 to 256 [ 159.949601][T10023] msdos: Bad value for 'gid' [ 159.954241][T10023] msdos: Bad value for 'gid' [ 160.030422][T10029] netlink: 'syz.6.2269': attribute type 10 has an invalid length. [ 160.038418][T10029] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2269'. [ 160.071677][T10029] team0: Port device geneve1 added [ 160.816932][T10036] lo speed is unknown, defaulting to 1000 [ 160.957074][T10036] lo speed is unknown, defaulting to 1000 [ 161.275597][T10041] syz.4.2273(10041): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 162.083125][T10048] lo speed is unknown, defaulting to 1000 [ 162.334196][T10055] FAULT_INJECTION: forcing a failure. [ 162.334196][T10055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.347426][T10055] CPU: 1 UID: 0 PID: 10055 Comm: syz.4.2277 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 162.347458][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 162.347474][T10055] Call Trace: [ 162.347482][T10055] [ 162.347492][T10055] __dump_stack+0x1d/0x30 [ 162.347642][T10055] dump_stack_lvl+0xe8/0x140 [ 162.347665][T10055] dump_stack+0x15/0x1b [ 162.347681][T10055] should_fail_ex+0x265/0x280 [ 162.347741][T10055] should_fail+0xb/0x20 [ 162.347829][T10055] should_fail_usercopy+0x1a/0x20 [ 162.347908][T10055] _copy_from_iter+0xcf/0xdd0 [ 162.347981][T10055] ? __build_skb_around+0x1a0/0x200 [ 162.348013][T10055] ? __build_skb+0x59/0x70 [ 162.348046][T10055] netlink_sendmsg+0x471/0x6b0 [ 162.348086][T10055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.348124][T10055] __sock_sendmsg+0x142/0x180 [ 162.348213][T10055] sock_write_iter+0x165/0x1b0 [ 162.348239][T10055] ? __pfx_sock_write_iter+0x10/0x10 [ 162.348263][T10055] vfs_write+0x49d/0x8d0 [ 162.348324][T10055] ksys_write+0xda/0x1a0 [ 162.348348][T10055] __x64_sys_write+0x40/0x50 [ 162.348375][T10055] x64_sys_call+0x2cdd/0x2fb0 [ 162.348401][T10055] do_syscall_64+0xd0/0x1a0 [ 162.348439][T10055] ? clear_bhb_loop+0x25/0x80 [ 162.348462][T10055] ? clear_bhb_loop+0x25/0x80 [ 162.348481][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.348561][T10055] RIP: 0033:0x7fa5ea82e969 [ 162.348576][T10055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.348617][T10055] RSP: 002b:00007fa5e8e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.348640][T10055] RAX: ffffffffffffffda RBX: 00007fa5eaa55fa0 RCX: 00007fa5ea82e969 [ 162.348675][T10055] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000008 [ 162.348691][T10055] RBP: 00007fa5e8e97090 R08: 0000000000000000 R09: 0000000000000000 [ 162.348754][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.348766][T10055] R13: 0000000000000000 R14: 00007fa5eaa55fa0 R15: 00007fffe8db1798 [ 162.348784][T10055] [ 162.796907][T10048] lo speed is unknown, defaulting to 1000 [ 162.911170][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.292512][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.332097][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2279'. [ 163.341059][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2279'. [ 163.428226][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.453058][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2284'. [ 163.472418][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.566099][T10082] hub 2-0:1.0: USB hub found [ 163.580647][T10082] hub 2-0:1.0: 8 ports detected [ 164.151331][T10091] netlink: 'syz.3.2291': attribute type 10 has an invalid length. [ 164.155861][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 164.155881][ T29] audit: type=1400 audit(1748017116.322:9090): avc: denied { write } for pid=10089 comm="syz.3.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.159205][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2291'. [ 164.272342][T10100] lo speed is unknown, defaulting to 1000 [ 164.345300][T10100] lo speed is unknown, defaulting to 1000 [ 164.387434][T10102] program syz.6.2290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.396946][T10102] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 164.406231][ T29] audit: type=1400 audit(1748017116.552:9091): avc: denied { ioctl } for pid=10090 comm="syz.6.2290" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.626983][ T29] audit: type=1400 audit(1748017116.792:9092): avc: denied { create } for pid=10103 comm="syz.3.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.694977][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 164.776922][T10110] hub 2-0:1.0: USB hub found [ 164.801798][T10110] hub 2-0:1.0: 8 ports detected [ 164.959778][ T29] audit: type=1400 audit(1748017117.132:9093): avc: denied { ioctl } for pid=10117 comm="syz.5.2301" path="socket:[29109]" dev="sockfs" ino=29109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.028411][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.047145][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.060116][ T29] audit: type=1400 audit(1748017117.172:9094): avc: denied { create } for pid=10117 comm="syz.5.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.079809][ T29] audit: type=1400 audit(1748017117.182:9095): avc: denied { accept } for pid=10117 comm="syz.5.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.129157][T10126] netlink: 'syz.4.2304': attribute type 10 has an invalid length. [ 165.137069][T10126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2304'. [ 165.320749][ T29] audit: type=1326 audit(1748017117.492:9096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ea82e969 code=0x7ffc0000 [ 165.349076][ T29] audit: type=1326 audit(1748017117.512:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5ea82e969 code=0x7ffc0000 [ 165.372699][ T29] audit: type=1326 audit(1748017117.512:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ea82e969 code=0x7ffc0000 [ 165.396235][ T29] audit: type=1326 audit(1748017117.512:9099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5ea82e969 code=0x7ffc0000 [ 165.837498][T10136] lo speed is unknown, defaulting to 1000 [ 165.979701][T10136] program syz.5.2307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.989413][T10136] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 167.054460][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.207392][T10143] lo speed is unknown, defaulting to 1000 [ 167.364605][T10143] lo speed is unknown, defaulting to 1000 [ 167.709411][T10155] lo speed is unknown, defaulting to 1000 [ 167.748342][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.784379][T10157] loop5: detected capacity change from 0 to 512 [ 168.188064][T10157] SELinux: security_context_str_to_sid (unconfined_u,errors=continue) failed with errno=-22 [ 168.639777][T10155] lo speed is unknown, defaulting to 1000 [ 168.750651][T10162] FAULT_INJECTION: forcing a failure. [ 168.750651][T10162] name failslab, interval 1, probability 0, space 0, times 0 [ 168.763371][T10162] CPU: 0 UID: 0 PID: 10162 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 168.763405][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 168.763420][T10162] Call Trace: [ 168.763469][T10162] [ 168.763525][T10162] __dump_stack+0x1d/0x30 [ 168.763548][T10162] dump_stack_lvl+0xe8/0x140 [ 168.763568][T10162] dump_stack+0x15/0x1b [ 168.763588][T10162] should_fail_ex+0x265/0x280 [ 168.763624][T10162] should_failslab+0x8c/0xb0 [ 168.763783][T10162] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 168.763810][T10162] ? sidtab_sid2str_get+0xa0/0x130 [ 168.763848][T10162] kmemdup_noprof+0x2b/0x70 [ 168.763870][T10162] sidtab_sid2str_get+0xa0/0x130 [ 168.763898][T10162] security_sid_to_context_core+0x1eb/0x2e0 [ 168.763966][T10162] security_sid_to_context+0x27/0x40 [ 168.763999][T10162] selinux_lsmprop_to_secctx+0x67/0xf0 [ 168.764071][T10162] security_lsmprop_to_secctx+0x43/0x80 [ 168.764096][T10162] audit_log_task_context+0x77/0x190 [ 168.764182][T10162] audit_log_task+0xf4/0x250 [ 168.764217][T10162] audit_seccomp+0x61/0x100 [ 168.764242][T10162] ? __seccomp_filter+0x68c/0x10d0 [ 168.764262][T10162] __seccomp_filter+0x69d/0x10d0 [ 168.764303][T10162] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.764351][T10162] ? vfs_write+0x75e/0x8d0 [ 168.764380][T10162] ? __rcu_read_unlock+0x4f/0x70 [ 168.764400][T10162] ? __fget_files+0x184/0x1c0 [ 168.764514][T10162] __secure_computing+0x82/0x150 [ 168.764537][T10162] syscall_trace_enter+0xcf/0x1e0 [ 168.764564][T10162] do_syscall_64+0xaa/0x1a0 [ 168.764592][T10162] ? clear_bhb_loop+0x25/0x80 [ 168.764619][T10162] ? clear_bhb_loop+0x25/0x80 [ 168.764662][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.764682][T10162] RIP: 0033:0x7fa5ea82e969 [ 168.764696][T10162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.764713][T10162] RSP: 002b:00007fa5e8e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 168.764736][T10162] RAX: ffffffffffffffda RBX: 00007fa5eaa55fa0 RCX: 00007fa5ea82e969 [ 168.764762][T10162] RDX: 0000000003000000 RSI: 0000000000000400 RDI: 0000000000000006 [ 168.764777][T10162] RBP: 00007fa5e8e97090 R08: 0000000000000000 R09: 0000000000000000 [ 168.764791][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.764805][T10162] R13: 0000000000000000 R14: 00007fa5eaa55fa0 R15: 00007fffe8db1798 [ 168.764824][T10162] [ 169.257665][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 169.257765][ T29] audit: type=1326 audit(1748017120.922:9164): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa5ea82e969 code=0x7ffc0000 [ 169.284430][ T29] audit: type=1326 audit(1748017121.402:9165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5ea82d37c code=0x7ffc0000 [ 169.307243][ T29] audit: type=1326 audit(1748017121.402:9166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5ea82d41f code=0x7ffc0000 [ 169.330128][ T29] audit: type=1326 audit(1748017121.402:9167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa5ea82d5ca code=0x7ffc0000 [ 169.353036][ T29] audit: type=1326 audit(1748017121.402:9168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ea82e969 code=0x7ffc0000 [ 169.376033][ T29] audit: type=1326 audit(1748017121.402:9169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ea82e969 code=0x7ffc0000 [ 169.724569][T10165] netlink: 'syz.3.2317': attribute type 10 has an invalid length. [ 169.732499][T10165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2317'. [ 169.768856][T10169] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2319'. [ 169.778000][T10169] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2319'. [ 169.815949][ T29] audit: type=1326 audit(1748017121.932:9170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bebe969 code=0x7ffc0000 [ 169.839696][ T29] audit: type=1326 audit(1748017121.932:9171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bebe969 code=0x7ffc0000 [ 169.863543][ T29] audit: type=1326 audit(1748017121.932:9172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bebe969 code=0x7ffc0000 [ 169.887138][ T29] audit: type=1326 audit(1748017121.932:9173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f562bebe969 code=0x7ffc0000 [ 169.912790][T10169] batadv_slave_0: entered promiscuous mode [ 169.913215][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2322'. [ 169.934820][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2319'. [ 169.937927][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2319'. [ 169.953607][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.972218][T10179] batadv_slave_0 (unregistering): left promiscuous mode [ 170.013625][T10179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.052869][T10188] hub 2-0:1.0: USB hub found [ 170.054762][T10191] xt_hashlimit: max too large, truncated to 1048576 [ 170.057574][T10188] hub 2-0:1.0: 8 ports detected [ 170.066019][T10191] Cannot find add_set index 0 as target [ 170.127365][T10195] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 170.222258][T10206] netlink: 'syz.6.2335': attribute type 10 has an invalid length. [ 170.230191][T10206] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2335'. [ 170.232290][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'. [ 170.271892][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.280470][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.290377][T10211] loop5: detected capacity change from 0 to 256 [ 170.296996][T10211] msdos: Bad value for 'gid' [ 170.301727][T10211] msdos: Bad value for 'gid' [ 170.370418][T10220] lo speed is unknown, defaulting to 1000 [ 170.437279][T10220] lo speed is unknown, defaulting to 1000 [ 171.076457][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2348'. [ 171.112093][T10238] netlink: 'syz.5.2347': attribute type 21 has an invalid length. [ 171.240759][T10245] loop6: detected capacity change from 0 to 512 [ 171.296048][T10245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.424806][T10245] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.956408][T10256] lo speed is unknown, defaulting to 1000 [ 172.148577][T10256] lo speed is unknown, defaulting to 1000 [ 172.192779][T10261] program syz.4.2352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.202480][T10261] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 172.270852][ T9531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.383539][T10265] 9pnet_fd: Insufficient options for proto=fd [ 172.404370][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.423270][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.731545][T10286] loop5: detected capacity change from 0 to 1024 [ 172.784836][T10286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.881417][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.894973][T10293] hub 2-0:1.0: USB hub found [ 172.899860][T10293] hub 2-0:1.0: 8 ports detected [ 173.015758][T10303] syzkaller0: entered promiscuous mode [ 173.021526][T10303] syzkaller0: entered allmulticast mode [ 173.148754][T10308] loop5: detected capacity change from 0 to 512 [ 173.615199][T10319] lo speed is unknown, defaulting to 1000 [ 173.678363][T10323] FAULT_INJECTION: forcing a failure. [ 173.678363][T10323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.691627][T10323] CPU: 0 UID: 0 PID: 10323 Comm: syz.6.2380 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 173.691676][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 173.691693][T10323] Call Trace: [ 173.691701][T10323] [ 173.691711][T10323] __dump_stack+0x1d/0x30 [ 173.691735][T10323] dump_stack_lvl+0xe8/0x140 [ 173.691752][T10323] dump_stack+0x15/0x1b [ 173.691796][T10323] should_fail_ex+0x265/0x280 [ 173.691837][T10323] should_fail+0xb/0x20 [ 173.691873][T10323] should_fail_usercopy+0x1a/0x20 [ 173.691937][T10323] strncpy_from_user+0x25/0x230 [ 173.692023][T10323] getname_flags+0xae/0x3b0 [ 173.692067][T10323] do_sys_openat2+0x60/0x110 [ 173.692104][T10323] __x64_sys_openat+0xf2/0x120 [ 173.692180][T10323] x64_sys_call+0x1af/0x2fb0 [ 173.692284][T10323] do_syscall_64+0xd0/0x1a0 [ 173.692312][T10323] ? clear_bhb_loop+0x25/0x80 [ 173.692340][T10323] ? clear_bhb_loop+0x25/0x80 [ 173.692443][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.692470][T10323] RIP: 0033:0x7f15c631d2d0 [ 173.692498][T10323] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 173.692515][T10323] RSP: 002b:00007f15c4986f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 173.692532][T10323] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f15c631d2d0 [ 173.692573][T10323] RDX: 0000000000000002 RSI: 00007f15c4986fa0 RDI: 00000000ffffff9c [ 173.692589][T10323] RBP: 00007f15c4986fa0 R08: 0000000000000000 R09: 0000000000000000 [ 173.692603][T10323] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 173.692618][T10323] R13: 0000000000000000 R14: 00007f15c6545fa0 R15: 00007ffdcf72c9d8 [ 173.692642][T10323] [ 173.899137][T10319] lo speed is unknown, defaulting to 1000 [ 174.415691][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.425117][T10333] netlink: 'syz.6.2384': attribute type 10 has an invalid length. [ 174.443798][T10327] hub 2-0:1.0: USB hub found [ 174.455211][T10327] hub 2-0:1.0: 8 ports detected [ 174.465488][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.741887][T10343] lo speed is unknown, defaulting to 1000 [ 175.705113][T10351] lo speed is unknown, defaulting to 1000 [ 175.712448][T10353] lo speed is unknown, defaulting to 1000 [ 175.813905][T10351] program syz.4.2390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.825341][T10351] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 176.192443][T10369] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 176.200365][T10369] __nla_validate_parse: 6 callbacks suppressed [ 176.200466][T10369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2397'. [ 176.277541][T10373] netlink: 5144 bytes leftover after parsing attributes in process `syz.6.2398'. [ 176.278571][T10371] lo speed is unknown, defaulting to 1000 [ 176.368074][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 176.368094][ T29] audit: type=1400 audit(1748017128.532:9372): avc: denied { sys_module } for pid=10361 comm="" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 176.450929][T10380] hub 2-0:1.0: USB hub found [ 176.455797][T10380] hub 2-0:1.0: 8 ports detected [ 176.500360][T10384] netlink: 'gtp': attribute type 27 has an invalid length. [ 176.627227][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2403'. [ 176.647459][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.680755][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.698386][ T29] audit: type=1400 audit(1748017128.862:9373): avc: denied { append } for pid=10392 comm="syz.6.2405" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.721807][ T29] audit: type=1400 audit(1748017128.862:9374): avc: denied { open } for pid=10392 comm="syz.6.2405" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.746145][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2403'. [ 176.768500][T10390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.822630][T10395] bond1 (unregistering): Released all slaves [ 176.892140][T10403] lo speed is unknown, defaulting to 1000 [ 176.958869][T10408] netlink: 'syz.5.2410': attribute type 10 has an invalid length. [ 176.966835][T10408] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2410'. [ 177.092379][T10417] hub 2-0:1.0: USB hub found [ 177.097237][T10417] hub 2-0:1.0: 8 ports detected [ 177.283588][ T29] audit: type=1400 audit(1748017129.452:9375): avc: denied { ioctl } for pid=10475 comm="syz.6.2417" path="socket:[31151]" dev="sockfs" ino=31151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.393406][T10486] lo speed is unknown, defaulting to 1000 [ 177.452998][ T29] audit: type=1400 audit(1748017129.622:9376): avc: denied { module_load } for pid=10492 comm="syz.6.2425" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 177.477030][T10493] Invalid ELF header magic: != ELF [ 177.485604][T10494] netlink: 'syz.1.2424': attribute type 10 has an invalid length. [ 177.493556][T10494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2424'. [ 177.503926][ T29] audit: type=1400 audit(1748017129.672:9377): avc: denied { create } for pid=10492 comm="syz.6.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.534020][ T29] audit: type=1400 audit(1748017129.672:9378): avc: denied { bind } for pid=10492 comm="syz.6.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.553478][ T29] audit: type=1400 audit(1748017129.672:9379): avc: denied { write } for pid=10492 comm="syz.6.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.573293][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2425'. [ 177.634211][T10500] lo speed is unknown, defaulting to 1000 [ 177.691034][T10500] program syz.3.2421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.700546][T10500] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 177.720376][T10499] hub 2-0:1.0: USB hub found [ 177.725219][T10499] hub 2-0:1.0: 8 ports detected [ 178.316596][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.326191][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.296943][T10519] lo speed is unknown, defaulting to 1000 [ 179.476483][T10519] lo speed is unknown, defaulting to 1000 [ 179.519311][T10523] program syz.1.2432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.529106][T10523] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 179.745820][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2436'. [ 179.790599][T10533] hub 2-0:1.0: USB hub found [ 179.806867][T10526] lo speed is unknown, defaulting to 1000 [ 179.816501][T10533] hub 2-0:1.0: 8 ports detected [ 179.905844][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'. [ 179.924890][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2442'. [ 180.222137][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.238217][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.747124][T10565] lo speed is unknown, defaulting to 1000 [ 181.042175][T10565] program syz.4.2448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.051844][T10565] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 181.218093][T10571] __nla_validate_parse: 1 callbacks suppressed [ 181.218110][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2452'. [ 181.250747][T10573] hub 2-0:1.0: USB hub found [ 181.255568][T10573] hub 2-0:1.0: 8 ports detected [ 181.262285][T10571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.287132][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2452'. [ 181.335485][T10576] lo speed is unknown, defaulting to 1000 [ 181.352273][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 181.363712][T10571] bond1 (unregistering): Released all slaves [ 181.422754][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2456'. [ 181.545368][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2458'. [ 181.682253][ T29] audit: type=1400 audit(1748017133.852:9380): avc: denied { watch watch_reads } for pid=10598 comm="syz.3.2472" path="/523" dev="tmpfs" ino=2761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.709453][T10599] Cannot find set identified by id 0 to match [ 181.716182][T10601] hub 2-0:1.0: USB hub found [ 181.721888][T10601] hub 2-0:1.0: 8 ports detected [ 181.750448][ T29] audit: type=1400 audit(1748017133.872:9381): avc: denied { execute_no_trans } for pid=10598 comm="syz.3.2472" path="/523/file1" dev="tmpfs" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.774203][ T29] audit: type=1326 audit(1748017133.882:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57af4be969 code=0x7ffc0000 [ 181.797713][ T29] audit: type=1326 audit(1748017133.882:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57af4be969 code=0x7ffc0000 [ 181.821265][ T29] audit: type=1326 audit(1748017133.882:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57af4be969 code=0x7ffc0000 [ 181.844891][ T29] audit: type=1326 audit(1748017133.882:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57af4be969 code=0x7ffc0000 [ 181.868317][ T29] audit: type=1326 audit(1748017133.882:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57af4be969 code=0x7ffc0000 [ 181.891873][ T29] audit: type=1326 audit(1748017133.882:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f57af4be969 code=0x7ffc0000 [ 181.915381][ T29] audit: type=1326 audit(1748017133.892:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57af4be969 code=0x7ffc0000 [ 181.939006][ T29] audit: type=1326 audit(1748017133.902:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57af4be969 code=0x7ffc0000 [ 182.072480][T10608] hub 2-0:1.0: USB hub found [ 182.085046][T10608] hub 2-0:1.0: 8 ports detected [ 182.095492][T10610] netlink: 'syz.3.2466': attribute type 2 has an invalid length. [ 182.125176][T10610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2466'. [ 182.207353][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2467'. [ 182.295528][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.308965][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.336911][T10620] loop6: detected capacity change from 0 to 256 [ 182.345319][T10620] msdos: Bad value for 'gid' [ 182.350112][T10620] msdos: Bad value for 'gid' [ 182.382700][T10626] netlink: 'syz.3.2474': attribute type 10 has an invalid length. [ 182.390655][T10626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2474'. [ 182.437326][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2475'. [ 182.471573][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2476'. [ 182.498842][T10628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.518571][T10636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27920 sclass=netlink_route_socket pid=10636 comm=syz.1.2478 [ 182.534359][T10630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.545675][T10634] bond2 (unregistering): Released all slaves [ 182.546117][T10636] Cannot find add_set index 0 as target [ 182.560852][T10638] bond1 (unregistering): Released all slaves [ 182.726127][T10644] Invalid ELF header magic: != ELF [ 182.748962][T10646] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 182.875864][T10659] netlink: 'syz.3.2486': attribute type 10 has an invalid length. [ 182.950581][T10650] loop5: detected capacity change from 0 to 8192 [ 182.963560][T10650] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 182.971484][T10650] FAT-fs (loop5): Filesystem has been set read-only [ 182.984334][T10650] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 183.297726][T10673] lo speed is unknown, defaulting to 1000 [ 183.908725][T10676] lo speed is unknown, defaulting to 1000 [ 184.260854][T10674] lo speed is unknown, defaulting to 1000 [ 184.956506][T10686] Invalid ELF header magic: != ELF [ 185.435675][T10694] program syz.1.2492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.445257][T10694] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.987232][T10698] netlink: 'syz.4.2498': attribute type 10 has an invalid length. [ 186.079971][T10689] lo speed is unknown, defaulting to 1000 [ 186.224591][T10676] lo speed is unknown, defaulting to 1000 [ 187.007083][T10708] __nla_validate_parse: 8 callbacks suppressed [ 187.007152][T10708] netlink: 28 bytes leftover after parsing attributes in process `gtp'. [ 187.263064][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.286225][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.696094][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2505'. [ 187.711131][T10716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.725214][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'. [ 187.765909][T10716] bond0 (unregistering): Released all slaves [ 187.849232][T10721] lo speed is unknown, defaulting to 1000 [ 187.990068][T10721] lo speed is unknown, defaulting to 1000 [ 188.323618][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2509'. [ 188.336924][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.376979][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.656848][T10734] netlink: 'syz.6.2512': attribute type 10 has an invalid length. [ 188.664783][T10734] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2512'. [ 188.811004][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 188.811021][ T29] audit: type=1400 audit(1748017140.982:9441): avc: denied { getopt } for pid=10741 comm="syz.6.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.972389][ T29] audit: type=1400 audit(1748017141.142:9442): avc: denied { setopt } for pid=10747 comm="syz.1.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.017529][ T29] audit: type=1400 audit(1748017141.162:9443): avc: denied { bind } for pid=10747 comm="syz.1.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.037174][ T29] audit: type=1400 audit(1748017141.162:9444): avc: denied { listen } for pid=10747 comm="syz.1.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.056929][ T29] audit: type=1400 audit(1748017141.162:9445): avc: denied { write } for pid=10747 comm="syz.1.2517" path="socket:[31800]" dev="sockfs" ino=31800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.482925][T10764] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2523'. [ 189.715799][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2523'. [ 189.802003][T10766] lo speed is unknown, defaulting to 1000 [ 189.843141][T10766] lo speed is unknown, defaulting to 1000 [ 189.868038][ T29] audit: type=1400 audit(1748017141.272:9446): avc: denied { read } for pid=10747 comm="syz.1.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.976110][T10769] netlink: 'syz.5.2524': attribute type 10 has an invalid length. [ 189.984151][T10769] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2524'. [ 190.266717][ T29] audit: type=1400 audit(1748017142.402:9447): avc: denied { bind } for pid=10774 comm="syz.5.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.286569][ T29] audit: type=1400 audit(1748017142.402:9448): avc: denied { write } for pid=10774 comm="syz.5.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.336483][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2529'. [ 190.345531][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2529'. [ 190.433947][ T29] audit: type=1400 audit(1748017142.592:9449): avc: denied { getopt } for pid=10781 comm="syz.4.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 191.487454][T10795] lo speed is unknown, defaulting to 1000 [ 191.671384][T10795] lo speed is unknown, defaulting to 1000 [ 192.293174][ T29] audit: type=1400 audit(1748017144.462:9450): avc: denied { create } for pid=10801 comm="syz.3.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 192.827609][ C0] Adjusting tsc more than 11% (8579267 vs 8464875) [ 193.057068][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.079600][T10811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.122167][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.139846][T10811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.172164][T10811] loop5: detected capacity change from 0 to 256 [ 193.203138][T10811] msdos: Bad value for 'gid' [ 193.207801][T10811] msdos: Bad value for 'gid' [ 193.408150][T10820] FAULT_INJECTION: forcing a failure. [ 193.408150][T10820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.421620][T10820] CPU: 1 UID: 0 PID: 10820 Comm: syz.4.2544 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 193.421772][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.421784][T10820] Call Trace: [ 193.421839][T10820] [ 193.421847][T10820] __dump_stack+0x1d/0x30 [ 193.421873][T10820] dump_stack_lvl+0xe8/0x140 [ 193.421897][T10820] dump_stack+0x15/0x1b [ 193.421917][T10820] should_fail_ex+0x265/0x280 [ 193.421958][T10820] should_fail_alloc_page+0xf2/0x100 [ 193.422075][T10820] __alloc_frozen_pages_noprof+0xff/0x360 [ 193.422107][T10820] alloc_pages_mpol+0xb3/0x250 [ 193.422190][T10820] vma_alloc_folio_noprof+0x1aa/0x300 [ 193.422227][T10820] do_wp_page+0x673/0x23e0 [ 193.422255][T10820] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 193.422295][T10820] ? __rcu_read_lock+0x37/0x50 [ 193.422347][T10820] handle_mm_fault+0x6dc/0x2ae0 [ 193.422384][T10820] ? mas_walk+0xf2/0x120 [ 193.422416][T10820] do_user_addr_fault+0x636/0x1090 [ 193.422455][T10820] ? fpregs_assert_state_consistent+0x84/0xa0 [ 193.422514][T10820] exc_page_fault+0x54/0xc0 [ 193.422616][T10820] asm_exc_page_fault+0x26/0x30 [ 193.422635][T10820] RIP: 0033:0x7fa5ea6f0cc3 [ 193.422689][T10820] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 193.422711][T10820] RSP: 002b:00007fa5e8e964a0 EFLAGS: 00010202 [ 193.422734][T10820] RAX: 0000000000000400 RBX: 00007fa5e8e96540 RCX: 00007fa5e0a77000 [ 193.422749][T10820] RDX: 00007fa5e8e966e0 RSI: 0000000000000000 RDI: 00007fa5e8e965e0 [ 193.422892][T10820] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a4 [ 193.422907][T10820] R10: 00000000000000be R11: 00007fa5e8e96540 R12: 0000000000000001 [ 193.422922][T10820] R13: 00007fa5ea8cbfc0 R14: 0000000000000020 R15: 00007fa5e8e965e0 [ 193.422946][T10820] [ 193.422957][T10820] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 193.726187][T10833] __nla_validate_parse: 2 callbacks suppressed [ 193.726227][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2549'. [ 193.749603][T10833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.759357][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2549'. [ 193.770465][T10833] bond1 (unregistering): Released all slaves [ 194.031450][T10841] lo speed is unknown, defaulting to 1000 [ 194.081035][T10841] program syz.5.2550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.090509][T10841] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 194.942287][T10859] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2557'. [ 195.006641][T10862] FAULT_INJECTION: forcing a failure. [ 195.006641][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 195.019426][T10862] CPU: 1 UID: 0 PID: 10862 Comm: syz.4.2558 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 195.019484][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 195.019500][T10862] Call Trace: [ 195.019506][T10862] [ 195.019513][T10862] __dump_stack+0x1d/0x30 [ 195.019553][T10862] dump_stack_lvl+0xe8/0x140 [ 195.019572][T10862] dump_stack+0x15/0x1b [ 195.019600][T10862] should_fail_ex+0x265/0x280 [ 195.019635][T10862] should_failslab+0x8c/0xb0 [ 195.019670][T10862] kmem_cache_alloc_noprof+0x50/0x310 [ 195.019742][T10862] ? skb_clone+0x151/0x1f0 [ 195.019769][T10862] skb_clone+0x151/0x1f0 [ 195.019838][T10862] __netlink_deliver_tap+0x2c9/0x500 [ 195.020018][T10862] netlink_unicast+0x64c/0x670 [ 195.020058][T10862] netlink_sendmsg+0x58b/0x6b0 [ 195.020102][T10862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.020167][T10862] __sock_sendmsg+0x142/0x180 [ 195.020193][T10862] ____sys_sendmsg+0x31e/0x4e0 [ 195.020216][T10862] ___sys_sendmsg+0x17b/0x1d0 [ 195.020252][T10862] __x64_sys_sendmsg+0xd4/0x160 [ 195.020318][T10862] x64_sys_call+0x2999/0x2fb0 [ 195.020345][T10862] do_syscall_64+0xd0/0x1a0 [ 195.020373][T10862] ? clear_bhb_loop+0x25/0x80 [ 195.020437][T10862] ? clear_bhb_loop+0x25/0x80 [ 195.020464][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.020493][T10862] RIP: 0033:0x7fa5ea82e969 [ 195.020510][T10862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.020531][T10862] RSP: 002b:00007fa5e8e97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.020679][T10862] RAX: ffffffffffffffda RBX: 00007fa5eaa55fa0 RCX: 00007fa5ea82e969 [ 195.020695][T10862] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000005 [ 195.020710][T10862] RBP: 00007fa5e8e97090 R08: 0000000000000000 R09: 0000000000000000 [ 195.020725][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.020737][T10862] R13: 0000000000000000 R14: 00007fa5eaa55fa0 R15: 00007fffe8db1798 [ 195.020756][T10862] [ 195.253037][T10862] macvlan1: entered promiscuous mode [ 195.267453][T10862] ipvlan0: entered promiscuous mode [ 195.285735][T10862] ipvlan0: left promiscuous mode [ 195.369427][T10862] macvlan1: left promiscuous mode [ 195.390708][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.408901][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.521765][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2560'. [ 195.559666][T10868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.570796][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 195.583181][T10868] bond1 (unregistering): Released all slaves [ 195.694881][T10877] hub 2-0:1.0: USB hub found [ 195.701466][T10877] hub 2-0:1.0: 8 ports detected [ 195.913270][T10882] netlink: 'syz.3.2565': attribute type 10 has an invalid length. [ 195.921200][T10882] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2565'. [ 195.993546][T10884] x_tables: duplicate underflow at hook 3 [ 196.011301][T10888] Invalid ELF header magic: != ELF [ 196.014407][T10884] lo speed is unknown, defaulting to 1000 [ 196.038784][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2568'. [ 196.139399][ T29] audit: type=1400 audit(1748017148.646:9451): avc: denied { create } for pid=10893 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.159318][ T29] audit: type=1400 audit(1748017148.646:9452): avc: denied { bind } for pid=10893 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.179042][ T29] audit: type=1400 audit(1748017148.646:9453): avc: denied { name_bind } for pid=10893 comm="syz.3.2570" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 196.200133][ T29] audit: type=1400 audit(1748017148.646:9454): avc: denied { node_bind } for pid=10893 comm="syz.3.2570" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 196.221192][ T29] audit: type=1400 audit(1748017148.646:9455): avc: denied { listen } for pid=10893 comm="syz.3.2570" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.241935][ T29] audit: type=1400 audit(1748017148.646:9456): avc: denied { connect } for pid=10893 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.261643][ T29] audit: type=1400 audit(1748017148.646:9457): avc: denied { name_connect } for pid=10893 comm="syz.3.2570" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 196.282955][ T29] audit: type=1400 audit(1748017148.646:9458): avc: denied { accept } for pid=10893 comm="syz.3.2570" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.342952][ T29] audit: type=1400 audit(1748017148.837:9459): avc: denied { write } for pid=10899 comm="syz.4.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.364969][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2573'. [ 196.379388][T10905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.447360][T10908] lo speed is unknown, defaulting to 1000 [ 196.564725][T10908] lo speed is unknown, defaulting to 1000 [ 196.682059][T10911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.712300][T10911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.372658][T10916] netlink: 'syz.3.2576': attribute type 10 has an invalid length. [ 197.380664][T10916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2576'. [ 197.479069][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2577'. [ 197.622852][T10923] Invalid ELF header magic: != ELF [ 197.670323][ T29] audit: type=1400 audit(1748017150.339:9460): avc: denied { create } for pid=10926 comm="syz.3.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.751971][T10934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.819849][T10944] binfmt_misc: register: failed to install interpreter file ./file2 [ 198.455339][T10951] loop5: detected capacity change from 0 to 512 [ 198.466796][T10951] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 198.506877][T10955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.515491][T10955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.560579][T10960] Invalid ELF header magic: != ELF [ 198.582661][T10960] __nla_validate_parse: 3 callbacks suppressed [ 198.582675][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2593'. [ 198.615340][T10966] netlink: 'syz.3.2594': attribute type 10 has an invalid length. [ 198.624674][T10966] batman_adv: batadv0: Adding interface: team0 [ 198.630864][T10966] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.656110][T10966] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 198.669563][T10969] macvlan1: entered promiscuous mode [ 198.675539][T10969] ipvlan0: entered promiscuous mode [ 198.681246][T10969] ipvlan0: left promiscuous mode [ 198.690121][T10969] macvlan1: left promiscuous mode [ 198.718181][T10975] loop6: detected capacity change from 0 to 512 [ 198.996089][T10991] lo speed is unknown, defaulting to 1000 [ 199.124095][T10991] lo speed is unknown, defaulting to 1000 [ 199.817965][T11001] Invalid ELF header magic: != ELF [ 199.874122][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2606'. [ 200.044492][T11009] loop5: detected capacity change from 0 to 512 [ 200.064414][T11009] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 200.086110][T11020] loop6: detected capacity change from 0 to 512 [ 200.116564][T11020] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 200.140131][T11020] EXT4-fs (loop6): 1 truncate cleaned up [ 200.148887][T11020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.175971][ T9531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.374292][T11038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.384810][T11038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.837966][T11042] Invalid ELF header magic: != ELF [ 200.861667][T11046] FAULT_INJECTION: forcing a failure. [ 200.861667][T11046] name failslab, interval 1, probability 0, space 0, times 0 [ 200.864642][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 200.874500][T11046] CPU: 1 UID: 0 PID: 11046 Comm: syz.5.2621 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 200.874535][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 200.874547][T11046] Call Trace: [ 200.874553][T11046] [ 200.874560][T11046] __dump_stack+0x1d/0x30 [ 200.874615][T11046] dump_stack_lvl+0xe8/0x140 [ 200.874642][T11046] dump_stack+0x15/0x1b [ 200.874665][T11046] should_fail_ex+0x265/0x280 [ 200.874708][T11046] should_failslab+0x8c/0xb0 [ 200.874810][T11046] kmem_cache_alloc_noprof+0x50/0x310 [ 200.874932][T11046] ? skb_clone+0x151/0x1f0 [ 200.874960][T11046] skb_clone+0x151/0x1f0 [ 200.875062][T11046] __netlink_deliver_tap+0x2c9/0x500 [ 200.875112][T11046] netlink_unicast+0x64c/0x670 [ 200.875162][T11046] netlink_sendmsg+0x58b/0x6b0 [ 200.875207][T11046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.875276][T11046] __sock_sendmsg+0x142/0x180 [ 200.875309][T11046] ____sys_sendmsg+0x31e/0x4e0 [ 200.875338][T11046] ___sys_sendmsg+0x17b/0x1d0 [ 200.875388][T11046] __x64_sys_sendmsg+0xd4/0x160 [ 200.875419][T11046] x64_sys_call+0x2999/0x2fb0 [ 200.875446][T11046] do_syscall_64+0xd0/0x1a0 [ 200.875476][T11046] ? clear_bhb_loop+0x25/0x80 [ 200.875573][T11046] ? clear_bhb_loop+0x25/0x80 [ 200.875650][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.875677][T11046] RIP: 0033:0x7f562bebe969 [ 200.875696][T11046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.875719][T11046] RSP: 002b:00007f562a527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.875744][T11046] RAX: ffffffffffffffda RBX: 00007f562c0e5fa0 RCX: 00007f562bebe969 [ 200.875760][T11046] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 200.875790][T11046] RBP: 00007f562a527090 R08: 0000000000000000 R09: 0000000000000000 [ 200.875805][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.875833][T11046] R13: 0000000000000000 R14: 00007f562c0e5fa0 R15: 00007ffe2b3b8a28 [ 200.875858][T11046] [ 201.110352][T11054] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 201.162649][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 201.162668][ T29] audit: type=1400 audit(1748017154.180:9463): avc: denied { ioctl } for pid=11053 comm="syz.3.2625" path="socket:[32802]" dev="sockfs" ino=32802 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.224858][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 201.255028][T11061] loop5: detected capacity change from 0 to 512 [ 201.270978][T11061] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 201.305010][T11066] lo speed is unknown, defaulting to 1000 [ 201.353374][T11066] program syz.6.2624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.362801][T11066] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 201.944654][T11085] Invalid ELF header magic: != ELF [ 202.241792][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 202.406627][T11089] lo speed is unknown, defaulting to 1000 [ 203.121316][T11089] lo speed is unknown, defaulting to 1000 [ 203.165243][T11095] program syz.5.2635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.174995][T11095] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 203.212332][ T29] audit: type=1400 audit(1748017156.490:9464): avc: denied { name_bind } for pid=11093 comm="syz.1.2638" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 203.234267][ T29] audit: type=1400 audit(1748017156.490:9465): avc: denied { node_bind } for pid=11093 comm="syz.1.2638" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 203.261424][T11101] FAULT_INJECTION: forcing a failure. [ 203.261424][T11101] name fail_futex, interval 1, probability 0, space 0, times 1 [ 203.274273][T11101] CPU: 1 UID: 0 PID: 11101 Comm: syz.6.2639 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 203.274311][T11101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.274325][T11101] Call Trace: [ 203.274331][T11101] [ 203.274339][T11101] __dump_stack+0x1d/0x30 [ 203.274377][T11101] dump_stack_lvl+0xe8/0x140 [ 203.274446][T11101] dump_stack+0x15/0x1b [ 203.274462][T11101] should_fail_ex+0x265/0x280 [ 203.274542][T11101] should_fail+0xb/0x20 [ 203.274620][T11101] should_fail_futex+0x49/0x50 [ 203.274646][T11101] futex_lock_pi_atomic+0xf5/0x9e0 [ 203.274678][T11101] futex_requeue+0x64e/0xe90 [ 203.274809][T11101] do_futex+0x2ec/0x380 [ 203.274839][T11101] __se_sys_futex+0x2ed/0x360 [ 203.274868][T11101] ? trace_reschedule_exit+0xd/0xc0 [ 203.274911][T11101] __x64_sys_futex+0x78/0x90 [ 203.274994][T11101] x64_sys_call+0x1331/0x2fb0 [ 203.275096][T11101] do_syscall_64+0xd0/0x1a0 [ 203.275182][T11101] ? clear_bhb_loop+0x25/0x80 [ 203.275283][T11101] ? clear_bhb_loop+0x25/0x80 [ 203.275304][T11101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.275399][T11101] RIP: 0033:0x7f15c631e969 [ 203.275421][T11101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.275444][T11101] RSP: 002b:00007f15c4966038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.275466][T11101] RAX: ffffffffffffffda RBX: 00007f15c6546080 RCX: 00007f15c631e969 [ 203.275482][T11101] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 203.275494][T11101] RBP: 00007f15c4966090 R08: 0000200000048000 R09: 0000000000000000 [ 203.275553][T11101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.275565][T11101] R13: 0000000000000001 R14: 00007f15c6546080 R15: 00007ffdcf72c9d8 [ 203.275584][T11101] [ 204.038247][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2641'. [ 204.109196][T11112] FAULT_INJECTION: forcing a failure. [ 204.109196][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 204.121900][T11112] CPU: 1 UID: 0 PID: 11112 Comm: syz.6.2643 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 204.121993][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 204.122009][T11112] Call Trace: [ 204.122017][T11112] [ 204.122025][T11112] __dump_stack+0x1d/0x30 [ 204.122045][T11112] dump_stack_lvl+0xe8/0x140 [ 204.122064][T11112] dump_stack+0x15/0x1b [ 204.122084][T11112] should_fail_ex+0x265/0x280 [ 204.122116][T11112] should_failslab+0x8c/0xb0 [ 204.122144][T11112] kmem_cache_alloc_noprof+0x50/0x310 [ 204.122180][T11112] ? security_file_alloc+0x32/0x100 [ 204.122282][T11112] security_file_alloc+0x32/0x100 [ 204.122385][T11112] init_file+0x5c/0x1d0 [ 204.122422][T11112] alloc_empty_file+0x8b/0x200 [ 204.122459][T11112] path_openat+0x68/0x2170 [ 204.122553][T11112] ? path_openat+0x1bf8/0x2170 [ 204.122652][T11112] ? _parse_integer_limit+0x170/0x190 [ 204.122688][T11112] ? _parse_integer+0x27/0x40 [ 204.122717][T11112] ? kstrtoull+0x111/0x140 [ 204.122823][T11112] do_filp_open+0x109/0x230 [ 204.122854][T11112] do_sys_openat2+0xa6/0x110 [ 204.122878][T11112] __se_sys_openat2+0x194/0x1f0 [ 204.122906][T11112] __x64_sys_openat2+0x55/0x70 [ 204.122965][T11112] x64_sys_call+0x21e0/0x2fb0 [ 204.122985][T11112] do_syscall_64+0xd0/0x1a0 [ 204.123010][T11112] ? clear_bhb_loop+0x25/0x80 [ 204.123035][T11112] ? clear_bhb_loop+0x25/0x80 [ 204.123055][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.123149][T11112] RIP: 0033:0x7f15c631e969 [ 204.123171][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.123193][T11112] RSP: 002b:00007f15c4987038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 204.123214][T11112] RAX: ffffffffffffffda RBX: 00007f15c6545fa0 RCX: 00007f15c631e969 [ 204.123229][T11112] RDX: 0000200000000240 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 204.123245][T11112] RBP: 00007f15c4987090 R08: 0000000000000000 R09: 0000000000000000 [ 204.123258][T11112] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 204.123339][T11112] R13: 0000000000000000 R14: 00007f15c6545fa0 R15: 00007ffdcf72c9d8 [ 204.123434][T11112] [ 204.385281][T11109] lo speed is unknown, defaulting to 1000 [ 204.562200][T11125] netlink: 'syz.6.2649': attribute type 2 has an invalid length. [ 204.737901][T11130] loop6: detected capacity change from 0 to 512 [ 204.748909][T11132] Invalid ELF header magic: != ELF [ 204.767609][T11130] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 204.795354][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2652'. [ 204.824379][ T29] audit: type=1400 audit(1748017158.191:9466): avc: denied { write } for pid=11135 comm="syz.5.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.869637][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2655'. [ 204.901412][T11148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.911249][T11148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.912998][T11147] lo speed is unknown, defaulting to 1000 [ 204.921876][T11148] loop5: detected capacity change from 0 to 256 [ 204.931933][T11148] msdos: Bad value for 'gid' [ 204.936679][T11148] msdos: Bad value for 'gid' [ 205.003780][T11159] netlink: 40 bytes leftover after parsing attributes in process `+s“¹:Õ™$0Ž‘ý«&'. [ 205.101032][ T29] audit: type=1400 audit(1748017158.419:9467): avc: denied { create } for pid=11160 comm="syz.6.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.391251][ T29] audit: type=1400 audit(1748017158.783:9468): avc: denied { remount } for pid=11171 comm="syz.3.2665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 205.391616][T11172] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11172 comm=syz.3.2665 [ 205.438469][ T29] audit: type=1400 audit(1748017158.835:9469): avc: denied { block_suspend } for pid=11169 comm="syz.1.2664" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.476570][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 205.500298][T11177] lo speed is unknown, defaulting to 1000 [ 205.624711][T11177] lo speed is unknown, defaulting to 1000 [ 205.669251][T11178] program syz.6.2663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.678637][T11178] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 205.713469][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2665'. [ 205.754134][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 205.947751][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2668'. [ 206.022684][T11190] lo speed is unknown, defaulting to 1000 [ 206.345504][T11196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11196 comm=syz.3.2671 [ 207.450255][T11208] lo speed is unknown, defaulting to 1000 [ 207.485851][T11209] lo speed is unknown, defaulting to 1000 [ 207.518097][T11209] program syz.5.2675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.533339][T11209] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 207.543046][T11208] program syz.3.2673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.646284][T11208] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 208.452959][T11211] Invalid ELF header magic: != ELF [ 208.477382][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'. [ 209.606272][T11229] lo speed is unknown, defaulting to 1000 [ 209.626710][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 209.834026][T11237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11237 comm=syz.1.2684 [ 209.969155][T11246] loop5: detected capacity change from 0 to 512 [ 209.984633][T11246] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.001053][T11246] EXT4-fs (loop5): 1 truncate cleaned up [ 210.016958][T11246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.033887][ T29] audit: type=1400 audit(1748017163.516:9470): avc: denied { rename } for pid=11245 comm="syz.5.2688" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.071333][T11246] EXT4-fs error (device loop5): __ext4_iget:5025: inode #12: block 2: comm syz.5.2688: invalid block [ 210.097287][T11246] EXT4-fs (loop5): Remounting filesystem read-only [ 210.107756][ T29] audit: type=1400 audit(1748017163.556:9471): avc: denied { unlink } for pid=11245 comm="syz.5.2688" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.130265][ T29] audit: type=1400 audit(1748017163.556:9472): avc: denied { read } for pid=11245 comm="syz.5.2688" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.143542][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2688'. [ 210.153696][ T29] audit: type=1400 audit(1748017163.556:9473): avc: denied { open } for pid=11245 comm="syz.5.2688" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.162561][T11246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.162599][T11246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.186307][ T29] audit: type=1400 audit(1748017163.556:9474): avc: denied { ioctl } for pid=11245 comm="syz.5.2688" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.226278][ T29] audit: type=1400 audit(1748017163.597:9475): avc: denied { append } for pid=11251 comm="syz.6.2690" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.261396][T11254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2691'. [ 210.265180][ T29] audit: type=1400 audit(1748017163.617:9476): avc: denied { read write } for pid=11245 comm="syz.5.2688" name="file1" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.293399][ T29] audit: type=1400 audit(1748017163.617:9477): avc: denied { open } for pid=11245 comm="syz.5.2688" path="/309/control/file1" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.312432][T11257] SELinux: syz.3.2691 (11257) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 210.447359][ T29] audit: type=1400 audit(1748017163.930:9478): avc: denied { mounton } for pid=11264 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 210.543431][T11270] lo speed is unknown, defaulting to 1000 [ 210.617048][T11270] lo speed is unknown, defaulting to 1000 [ 210.662908][T11272] program syz.6.2692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.672396][T11272] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 210.704855][T11268] lo speed is unknown, defaulting to 1000 [ 210.938486][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.223354][T11264] lo speed is unknown, defaulting to 1000 [ 211.243719][T11285] FAULT_INJECTION: forcing a failure. [ 211.243719][T11285] name failslab, interval 1, probability 0, space 0, times 0 [ 211.256576][T11285] CPU: 1 UID: 0 PID: 11285 Comm: syz.3.2700 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 211.256620][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 211.256636][T11285] Call Trace: [ 211.256643][T11285] [ 211.256652][T11285] __dump_stack+0x1d/0x30 [ 211.256678][T11285] dump_stack_lvl+0xe8/0x140 [ 211.256729][T11285] dump_stack+0x15/0x1b [ 211.256745][T11285] should_fail_ex+0x265/0x280 [ 211.256783][T11285] should_failslab+0x8c/0xb0 [ 211.256856][T11285] kmem_cache_alloc_node_noprof+0x57/0x320 [ 211.256894][T11285] ? __alloc_skb+0x101/0x320 [ 211.256924][T11285] __alloc_skb+0x101/0x320 [ 211.257004][T11285] alloc_uevent_skb+0x5c/0x120 [ 211.257042][T11285] kobject_uevent_net_broadcast+0xfb/0x410 [ 211.257102][T11285] kobject_uevent_env+0x43d/0x570 [ 211.257182][T11285] kobject_uevent+0x1d/0x30 [ 211.257303][T11285] __kobject_del+0x88/0x190 [ 211.257331][T11285] kobject_put+0x127/0x190 [ 211.257357][T11285] net_rx_queue_update_kobjects+0x477/0x520 [ 211.257472][T11285] netdev_unregister_kobject+0xbf/0x270 [ 211.257500][T11285] unregister_netdevice_many_notify+0x129a/0x16a0 [ 211.257624][T11285] ? ip6_tnl_locate+0x420/0x4a0 [ 211.257657][T11285] unregister_netdevice_queue+0x1f5/0x220 [ 211.257703][T11285] ip6_tnl_siocdevprivate+0x2e0/0x920 [ 211.257835][T11285] dev_ifsioc+0x8f5/0xaa0 [ 211.257931][T11285] dev_ioctl+0x78d/0x960 [ 211.257956][T11285] sock_ioctl+0x593/0x610 [ 211.257986][T11285] ? __pfx_sock_ioctl+0x10/0x10 [ 211.258080][T11285] __se_sys_ioctl+0xcb/0x140 [ 211.258108][T11285] __x64_sys_ioctl+0x43/0x50 [ 211.258133][T11285] x64_sys_call+0x19a8/0x2fb0 [ 211.258223][T11285] do_syscall_64+0xd0/0x1a0 [ 211.258244][T11285] ? clear_bhb_loop+0x25/0x80 [ 211.258333][T11285] ? clear_bhb_loop+0x25/0x80 [ 211.258360][T11285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.258442][T11285] RIP: 0033:0x7f57af4be969 [ 211.258456][T11285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.258475][T11285] RSP: 002b:00007f57adb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.258499][T11285] RAX: ffffffffffffffda RBX: 00007f57af6e5fa0 RCX: 00007f57af4be969 [ 211.258515][T11285] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 211.258531][T11285] RBP: 00007f57adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 211.258589][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.258604][T11285] R13: 0000000000000000 R14: 00007f57af6e5fa0 R15: 00007ffdb632b918 [ 211.258628][T11285] [ 211.689097][T11264] chnl_net:caif_netlink_parms(): no params data found [ 212.519472][T11294] FAULT_INJECTION: forcing a failure. [ 212.519472][T11294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.532641][T11294] CPU: 0 UID: 0 PID: 11294 Comm: syz.5.2698 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 212.532668][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.532680][T11294] Call Trace: [ 212.532687][T11294] [ 212.532734][T11294] __dump_stack+0x1d/0x30 [ 212.532757][T11294] dump_stack_lvl+0xe8/0x140 [ 212.532778][T11294] dump_stack+0x15/0x1b [ 212.532793][T11294] should_fail_ex+0x265/0x280 [ 212.532848][T11294] should_fail+0xb/0x20 [ 212.532878][T11294] should_fail_usercopy+0x1a/0x20 [ 212.532902][T11294] _copy_to_user+0x20/0xa0 [ 212.532930][T11294] simple_read_from_buffer+0xb5/0x130 [ 212.532964][T11294] proc_fail_nth_read+0x100/0x140 [ 212.532998][T11294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.533026][T11294] vfs_read+0x19d/0x6f0 [ 212.533054][T11294] ? __rcu_read_unlock+0x4f/0x70 [ 212.533159][T11294] ? __fget_files+0x184/0x1c0 [ 212.533197][T11294] ksys_read+0xda/0x1a0 [ 212.533224][T11294] __x64_sys_read+0x40/0x50 [ 212.533253][T11294] x64_sys_call+0x2d77/0x2fb0 [ 212.533305][T11294] do_syscall_64+0xd0/0x1a0 [ 212.533332][T11294] ? clear_bhb_loop+0x25/0x80 [ 212.533384][T11294] ? clear_bhb_loop+0x25/0x80 [ 212.533412][T11294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.533509][T11294] RIP: 0033:0x7f562bebd37c [ 212.533526][T11294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.533617][T11294] RSP: 002b:00007f562a527030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.533640][T11294] RAX: ffffffffffffffda RBX: 00007f562c0e5fa0 RCX: 00007f562bebd37c [ 212.533656][T11294] RDX: 000000000000000f RSI: 00007f562a5270a0 RDI: 0000000000000005 [ 212.533671][T11294] RBP: 00007f562a527090 R08: 0000000000000000 R09: 0000000000000000 [ 212.533686][T11294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.533701][T11294] R13: 0000000000000000 R14: 00007f562c0e5fa0 R15: 00007ffe2b3b8a28 [ 212.533724][T11294] [ 212.847741][T11292] program syz.1.2701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.857179][T11292] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 212.893059][T11299] sd 0:0:1:0: device reset [ 212.897707][ T29] audit: type=1400 audit(1748017166.394:9479): avc: denied { create } for pid=11298 comm="syz.3.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.028736][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2703'. [ 213.045490][T11300] loop6: detected capacity change from 0 to 2048 [ 213.056623][T11300] EXT4-fs: Ignoring removed oldalloc option [ 213.092234][T11305] Invalid ELF header magic: != ELF [ 213.098646][T11300] EXT4-fs (loop6): failed to initialize system zone (-117) [ 213.115639][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'. [ 213.124635][T11264] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.131798][T11264] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.143043][T11300] EXT4-fs (loop6): mount failed [ 213.161549][T11264] bridge_slave_0: entered allmulticast mode [ 213.187254][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2705'. [ 213.198034][T11264] bridge_slave_0: entered promiscuous mode [ 213.215259][T11264] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.222412][T11264] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.242701][T11264] bridge_slave_1: entered allmulticast mode [ 213.258392][T11264] bridge_slave_1: entered promiscuous mode [ 213.310094][T11264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.322988][T11311] FAULT_INJECTION: forcing a failure. [ 213.322988][T11311] name failslab, interval 1, probability 0, space 0, times 0 [ 213.335750][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.5.2706 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 213.335786][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.335798][T11311] Call Trace: [ 213.335805][T11311] [ 213.335813][T11311] __dump_stack+0x1d/0x30 [ 213.335835][T11311] dump_stack_lvl+0xe8/0x140 [ 213.335897][T11311] dump_stack+0x15/0x1b [ 213.335971][T11311] should_fail_ex+0x265/0x280 [ 213.336012][T11311] should_failslab+0x8c/0xb0 [ 213.336041][T11311] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 213.336146][T11311] ? security_context_to_sid_core+0x69/0x3b0 [ 213.336245][T11311] kmemdup_nul+0x36/0xc0 [ 213.336263][T11311] security_context_to_sid_core+0x69/0x3b0 [ 213.336377][T11311] security_context_str_to_sid+0x33/0x40 [ 213.336434][T11311] sel_write_access+0x198/0x2b0 [ 213.336454][T11311] selinux_transaction_write+0xc3/0x110 [ 213.336493][T11311] ? __pfx_selinux_transaction_write+0x10/0x10 [ 213.336537][T11311] vfs_write+0x266/0x8d0 [ 213.336602][T11311] ? __rcu_read_unlock+0x4f/0x70 [ 213.336622][T11311] ? __fget_files+0x184/0x1c0 [ 213.336659][T11311] ksys_write+0xda/0x1a0 [ 213.336685][T11311] __x64_sys_write+0x40/0x50 [ 213.336731][T11311] x64_sys_call+0x2cdd/0x2fb0 [ 213.336756][T11311] do_syscall_64+0xd0/0x1a0 [ 213.336829][T11311] ? clear_bhb_loop+0x25/0x80 [ 213.336856][T11311] ? clear_bhb_loop+0x25/0x80 [ 213.336884][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.336912][T11311] RIP: 0033:0x7f562bebe969 [ 213.336927][T11311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.336945][T11311] RSP: 002b:00007f562a527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.336963][T11311] RAX: ffffffffffffffda RBX: 00007f562c0e5fa0 RCX: 00007f562bebe969 [ 213.336975][T11311] RDX: 0000000000000041 RSI: 0000200000000740 RDI: 0000000000000006 [ 213.336990][T11311] RBP: 00007f562a527090 R08: 0000000000000000 R09: 0000000000000000 [ 213.337036][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.337051][T11311] R13: 0000000000000000 R14: 00007f562c0e5fa0 R15: 00007ffe2b3b8a28 [ 213.337159][T11311] [ 213.566795][T11264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.624797][T11264] team0: Port device team_slave_0 added [ 213.631679][T11264] team0: Port device team_slave_1 added [ 213.655530][T11264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.662561][T11264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.688568][T11264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.795692][T11264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.802736][T11264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.828749][T11264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.891996][T11318] lo speed is unknown, defaulting to 1000 [ 213.939876][T11264] hsr_slave_0: entered promiscuous mode [ 213.948327][T11264] hsr_slave_1: entered promiscuous mode [ 213.959579][T11264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.976512][T11264] Cannot create hsr debugfs directory [ 214.182391][T11264] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 214.214303][T11264] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 214.233271][T11264] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 214.252292][T11264] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 214.330509][T11264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.387779][T11264] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.416702][T10426] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.423884][T10426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.458806][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.466132][T10426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.515798][T11330] loop5: detected capacity change from 0 to 512 [ 214.522585][T11330] journal_path: Non-blockdev passed as './bus' [ 214.528848][T11330] EXT4-fs: error: could not find journal device path [ 214.691681][T11336] lo speed is unknown, defaulting to 1000 [ 214.768538][T11336] lo speed is unknown, defaulting to 1000 [ 214.815564][T11338] program syz.1.2712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.824969][T11338] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.046116][T11343] FAULT_INJECTION: forcing a failure. [ 215.046116][T11343] name failslab, interval 1, probability 0, space 0, times 0 [ 215.058901][T11343] CPU: 1 UID: 0 PID: 11343 Comm: syz.6.2716 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 215.058955][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 215.058977][T11343] Call Trace: [ 215.058985][T11343] [ 215.058995][T11343] __dump_stack+0x1d/0x30 [ 215.059022][T11343] dump_stack_lvl+0xe8/0x140 [ 215.059113][T11343] dump_stack+0x15/0x1b [ 215.059134][T11343] should_fail_ex+0x265/0x280 [ 215.059178][T11343] should_failslab+0x8c/0xb0 [ 215.059215][T11343] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 215.059237][T11343] ? cond_bools_copy+0x30/0x80 [ 215.059340][T11343] ? __pfx_cond_bools_destroy+0x10/0x10 [ 215.059365][T11343] kmemdup_noprof+0x2b/0x70 [ 215.059385][T11343] ? __pfx_cond_bools_destroy+0x10/0x10 [ 215.059403][T11343] cond_bools_copy+0x30/0x80 [ 215.059421][T11343] ? __pfx_cond_bools_destroy+0x10/0x10 [ 215.059454][T11343] hashtab_duplicate+0x11b/0x360 [ 215.059600][T11343] ? __pfx_cond_bools_copy+0x10/0x10 [ 215.059622][T11343] cond_policydb_dup+0xd2/0x4e0 [ 215.059660][T11343] security_set_bools+0xa0/0x340 [ 215.059704][T11343] sel_commit_bools_write+0x1ea/0x270 [ 215.059770][T11343] vfs_writev+0x3eb/0x870 [ 215.059809][T11343] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 215.059841][T11343] ? mutex_lock+0xd/0x30 [ 215.059875][T11343] do_writev+0xe7/0x210 [ 215.059920][T11343] __x64_sys_writev+0x45/0x50 [ 215.059953][T11343] x64_sys_call+0x2006/0x2fb0 [ 215.059979][T11343] do_syscall_64+0xd0/0x1a0 [ 215.060072][T11343] ? clear_bhb_loop+0x25/0x80 [ 215.060099][T11343] ? clear_bhb_loop+0x25/0x80 [ 215.060185][T11343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.060212][T11343] RIP: 0033:0x7f15c631e969 [ 215.060230][T11343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.060298][T11343] RSP: 002b:00007f15c4987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 215.060347][T11343] RAX: ffffffffffffffda RBX: 00007f15c6545fa0 RCX: 00007f15c631e969 [ 215.060363][T11343] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 215.060378][T11343] RBP: 00007f15c4987090 R08: 0000000000000000 R09: 0000000000000000 [ 215.060392][T11343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.060407][T11343] R13: 0000000000000000 R14: 00007f15c6545fa0 R15: 00007ffdcf72c9d8 [ 215.060432][T11343] [ 215.356685][T11344] loop5: detected capacity change from 0 to 512 [ 215.446577][T11344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.599268][T11344] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2717: invalid block [ 215.611744][T11344] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2717: invalid indirect mapped block 4294967295 (level 1) [ 215.627546][T11344] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2717: invalid indirect mapped block 4294967295 (level 1) [ 215.642387][T11344] EXT4-fs (loop5): 2 truncates cleaned up [ 215.649262][T11344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.767013][T11344] FAULT_INJECTION: forcing a failure. [ 215.767013][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.780152][T11344] CPU: 1 UID: 0 PID: 11344 Comm: syz.5.2717 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 215.780187][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 215.780201][T11344] Call Trace: [ 215.780219][T11344] [ 215.780227][T11344] __dump_stack+0x1d/0x30 [ 215.780247][T11344] dump_stack_lvl+0xe8/0x140 [ 215.780266][T11344] dump_stack+0x15/0x1b [ 215.780287][T11344] should_fail_ex+0x265/0x280 [ 215.780388][T11344] should_fail+0xb/0x20 [ 215.780417][T11344] should_fail_usercopy+0x1a/0x20 [ 215.780437][T11344] _copy_from_iter+0xcf/0xdd0 [ 215.780456][T11344] ? _copy_from_iter+0x16d/0xdd0 [ 215.780550][T11344] copy_page_from_iter+0x15a/0x290 [ 215.780574][T11344] skb_copy_datagram_from_iter+0x232/0x490 [ 215.780609][T11344] tun_get_user+0x10b6/0x24d0 [ 215.780742][T11344] ? ref_tracker_alloc+0x1f2/0x2f0 [ 215.780777][T11344] ? avc_policy_seqno+0x15/0x30 [ 215.780893][T11344] tun_chr_write_iter+0x15e/0x210 [ 215.780918][T11344] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 215.780987][T11344] vfs_write+0x49d/0x8d0 [ 215.781021][T11344] ksys_write+0xda/0x1a0 [ 215.781045][T11344] __x64_sys_write+0x40/0x50 [ 215.781071][T11344] x64_sys_call+0x2cdd/0x2fb0 [ 215.781098][T11344] do_syscall_64+0xd0/0x1a0 [ 215.781161][T11344] ? clear_bhb_loop+0x25/0x80 [ 215.781188][T11344] ? clear_bhb_loop+0x25/0x80 [ 215.781216][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.781243][T11344] RIP: 0033:0x7f562bebe969 [ 215.781289][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.781313][T11344] RSP: 002b:00007f562a527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.781336][T11344] RAX: ffffffffffffffda RBX: 00007f562c0e5fa0 RCX: 00007f562bebe969 [ 215.781352][T11344] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000007 [ 215.781365][T11344] RBP: 00007f562a527090 R08: 0000000000000000 R09: 0000000000000000 [ 215.781379][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.781412][T11344] R13: 0000000000000000 R14: 00007f562c0e5fa0 R15: 00007ffe2b3b8a28 [ 215.781437][T11344] [ 216.146744][T11351] lo speed is unknown, defaulting to 1000 [ 216.198412][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 216.198429][ T29] audit: type=1400 audit(1748017169.673:9482): avc: denied { write } for pid=11348 comm="syz.6.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.294452][ T29] audit: type=1400 audit(1748017169.803:9483): avc: denied { setopt } for pid=11348 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.331862][ T6922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.489202][T11264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.834212][T11377] program syz.5.2720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.843750][T11377] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 216.989035][T11264] veth0_vlan: entered promiscuous mode [ 217.012489][T11264] veth1_vlan: entered promiscuous mode [ 217.085197][T11264] veth0_macvtap: entered promiscuous mode [ 217.115726][T11264] veth1_macvtap: entered promiscuous mode [ 217.162822][T11264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.173524][T11264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.232407][T11264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.261942][T11381] hub 2-0:1.0: USB hub found [ 217.271189][T11381] hub 2-0:1.0: 8 ports detected [ 217.344645][T11264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.355199][T11264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.491226][T11264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.521673][T11264] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.530545][T11264] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.539414][T11264] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.548192][T11264] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.578637][T11390] FAULT_INJECTION: forcing a failure. [ 217.578637][T11390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.591962][T11390] CPU: 1 UID: 0 PID: 11390 Comm: syz.3.2727 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 217.592031][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.592045][T11390] Call Trace: [ 217.592052][T11390] [ 217.592060][T11390] __dump_stack+0x1d/0x30 [ 217.592161][T11390] dump_stack_lvl+0xe8/0x140 [ 217.592186][T11390] dump_stack+0x15/0x1b [ 217.592285][T11390] should_fail_ex+0x265/0x280 [ 217.592347][T11390] should_fail+0xb/0x20 [ 217.592380][T11390] should_fail_usercopy+0x1a/0x20 [ 217.592403][T11390] strncpy_from_user+0x25/0x230 [ 217.592439][T11390] strncpy_from_bpfptr+0x43/0x50 [ 217.592537][T11390] bpf_prog_load+0x884/0x1070 [ 217.592578][T11390] ? security_bpf+0x2b/0x90 [ 217.592666][T11390] __sys_bpf+0x51d/0x790 [ 217.592761][T11390] __x64_sys_bpf+0x41/0x50 [ 217.592793][T11390] x64_sys_call+0x2478/0x2fb0 [ 217.592839][T11390] do_syscall_64+0xd0/0x1a0 [ 217.592861][T11390] ? clear_bhb_loop+0x25/0x80 [ 217.592901][T11390] ? clear_bhb_loop+0x25/0x80 [ 217.592921][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.592944][T11390] RIP: 0033:0x7f57af4be969 [ 217.592962][T11390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.592982][T11390] RSP: 002b:00007f57adb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.593084][T11390] RAX: ffffffffffffffda RBX: 00007f57af6e5fa0 RCX: 00007f57af4be969 [ 217.593098][T11390] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 217.593190][T11390] RBP: 00007f57adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 217.593202][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.593217][T11390] R13: 0000000000000000 R14: 00007f57af6e5fa0 R15: 00007ffdb632b918 [ 217.593240][T11390] [ 217.826099][ T29] audit: type=1400 audit(1748017171.345:9484): avc: denied { mounton } for pid=11264 comm="syz-executor" path="/root/syzkaller.ItqxcK/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 217.858993][ T29] audit: type=1400 audit(1748017171.375:9485): avc: denied { mount } for pid=11264 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 217.881309][ T29] audit: type=1400 audit(1748017171.375:9486): avc: denied { mount } for pid=11264 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 217.905943][ T29] audit: type=1400 audit(1748017171.375:9487): avc: denied { mounton } for pid=11264 comm="syz-executor" path="/root/syzkaller.ItqxcK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 217.932887][ T29] audit: type=1400 audit(1748017171.375:9488): avc: denied { mounton } for pid=11264 comm="syz-executor" path="/root/syzkaller.ItqxcK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 218.008667][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.029301][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.054417][T11398] loop6: detected capacity change from 0 to 256 [ 218.064914][T11398] msdos: Bad value for 'gid' [ 218.069537][T11398] msdos: Bad value for 'gid' [ 218.080719][ T29] audit: type=1400 audit(1748017171.485:9489): avc: denied { mounton } for pid=11264 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 218.103841][ T29] audit: type=1400 audit(1748017171.485:9490): avc: denied { mount } for pid=11264 comm="syz-executor" name="/" dev="gadgetfs" ino=3455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 218.178340][T11406] hub 2-0:1.0: USB hub found [ 218.183258][T11406] hub 2-0:1.0: 8 ports detected [ 218.302475][T11413] loop7: detected capacity change from 0 to 1024 [ 218.359618][T11413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.393010][T11413] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2738: bg 0: block 88: padding at end of block bitmap is not set [ 218.414504][ T29] audit: type=1400 audit(1748017171.906:9491): avc: denied { link } for pid=11412 comm="syz.7.2738" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 218.516727][T11416] lo speed is unknown, defaulting to 1000 [ 218.536033][T11264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.599285][ T52] bridge_slave_1: left allmulticast mode [ 218.605143][ T52] bridge_slave_1: left promiscuous mode [ 218.610781][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.628045][T11432] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2741'. [ 218.640120][ T52] bridge_slave_0: left allmulticast mode [ 218.645899][ T52] bridge_slave_0: left promiscuous mode [ 218.651720][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.727564][ T52] team0: Port device geneve1 removed [ 218.772406][T11439] loop5: detected capacity change from 0 to 512 [ 218.781531][T11439] journal_path: Non-blockdev passed as './bus' [ 218.787827][T11439] EXT4-fs: error: could not find journal device path [ 218.800324][T11440] loop6: detected capacity change from 0 to 1024 [ 218.807861][T11441] FAULT_INJECTION: forcing a failure. [ 218.807861][T11441] name failslab, interval 1, probability 0, space 0, times 0 [ 218.809962][T11440] EXT4-fs: inline encryption not supported [ 218.820618][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.7.2740 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 218.820652][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 218.820669][T11441] Call Trace: [ 218.820678][T11441] [ 218.820689][T11441] __dump_stack+0x1d/0x30 [ 218.820718][T11441] dump_stack_lvl+0xe8/0x140 [ 218.820745][T11441] dump_stack+0x15/0x1b [ 218.820828][T11441] should_fail_ex+0x265/0x280 [ 218.820871][T11441] should_failslab+0x8c/0xb0 [ 218.820909][T11441] kmem_cache_alloc_noprof+0x50/0x310 [ 218.820952][T11441] ? security_file_alloc+0x32/0x100 [ 218.821023][T11441] security_file_alloc+0x32/0x100 [ 218.821066][T11441] init_file+0x5c/0x1d0 [ 218.821108][T11441] alloc_empty_file+0x8b/0x200 [ 218.821150][T11441] alloc_file_pseudo+0xc6/0x160 [ 218.821244][T11441] __shmem_file_setup+0x1b9/0x1f0 [ 218.821278][T11441] shmem_file_setup+0x3b/0x50 [ 218.821315][T11441] __se_sys_memfd_create+0x2c3/0x590 [ 218.821348][T11441] __x64_sys_memfd_create+0x31/0x40 [ 218.821379][T11441] x64_sys_call+0x122f/0x2fb0 [ 218.821483][T11441] do_syscall_64+0xd0/0x1a0 [ 218.821516][T11441] ? clear_bhb_loop+0x25/0x80 [ 218.821543][T11441] ? clear_bhb_loop+0x25/0x80 [ 218.821572][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.821650][T11441] RIP: 0033:0x7febb683e969 [ 218.821670][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.821694][T11441] RSP: 002b:00007febb4ea6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 218.821718][T11441] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007febb683e969 [ 218.821735][T11441] RDX: 00007febb4ea6ef0 RSI: 0000000000000000 RDI: 00007febb68c1444 [ 218.821815][T11441] RBP: 0000200000000f00 R08: 00007febb4ea6bb7 R09: 00007febb4ea6e40 [ 218.821832][T11441] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 218.821848][T11441] R13: 00007febb4ea6ef0 R14: 00007febb4ea6eb0 R15: 00002000000003c0 [ 218.821874][T11441] [ 218.888751][T11439] loop5: detected capacity change from 0 to 128 [ 218.894319][T11440] EXT4-fs: Ignoring removed bh option [ 219.047549][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.057422][T11440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.072067][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.086926][T11440] FAULT_INJECTION: forcing a failure. [ 219.086926][T11440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.100230][T11440] CPU: 0 UID: 0 PID: 11440 Comm: syz.6.2743 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 219.100264][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 219.100281][T11440] Call Trace: [ 219.100290][T11440] [ 219.100300][T11440] __dump_stack+0x1d/0x30 [ 219.100376][T11440] dump_stack_lvl+0xe8/0x140 [ 219.100395][T11440] dump_stack+0x15/0x1b [ 219.100411][T11440] should_fail_ex+0x265/0x280 [ 219.100448][T11440] should_fail+0xb/0x20 [ 219.100500][T11440] should_fail_usercopy+0x1a/0x20 [ 219.100523][T11440] _copy_to_user+0x20/0xa0 [ 219.100550][T11440] simple_read_from_buffer+0xb5/0x130 [ 219.100578][T11440] proc_fail_nth_read+0x100/0x140 [ 219.100688][T11440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.100713][T11440] vfs_read+0x19d/0x6f0 [ 219.100741][T11440] ? kfree+0xd8/0x310 [ 219.100834][T11440] ? __rcu_read_unlock+0x4f/0x70 [ 219.100856][T11440] ? __fget_files+0x184/0x1c0 [ 219.100951][T11440] ksys_read+0xda/0x1a0 [ 219.100983][T11440] __x64_sys_read+0x40/0x50 [ 219.101014][T11440] x64_sys_call+0x2d77/0x2fb0 [ 219.101063][T11440] do_syscall_64+0xd0/0x1a0 [ 219.101160][T11440] ? clear_bhb_loop+0x25/0x80 [ 219.101189][T11440] ? clear_bhb_loop+0x25/0x80 [ 219.101217][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.101243][T11440] RIP: 0033:0x7f15c631d37c [ 219.101343][T11440] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 219.101365][T11440] RSP: 002b:00007f15c4987030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.101401][T11440] RAX: ffffffffffffffda RBX: 00007f15c6545fa0 RCX: 00007f15c631d37c [ 219.101493][T11440] RDX: 000000000000000f RSI: 00007f15c49870a0 RDI: 0000000000000006 [ 219.101508][T11440] RBP: 00007f15c4987090 R08: 0000000000000000 R09: 0000000000000000 [ 219.101522][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.101537][T11440] R13: 0000000000000000 R14: 00007f15c6545fa0 R15: 00007ffdcf72c9d8 [ 219.101561][T11440] [ 219.102721][ T52] bond0 (unregistering): Released all slaves [ 219.125517][T11459] loop7: detected capacity change from 0 to 512 [ 219.134236][ T52] bond1 (unregistering): Released all slaves [ 219.154878][T11459] EXT4-fs (loop7): orphan cleanup on readonly fs [ 219.331762][T11459] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #13: comm syz.7.2749: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0) [ 219.350530][ T9531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.351145][T11459] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2749: couldn't read orphan inode 13 (err -117) [ 219.372913][T11459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.401673][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.410258][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.420174][T11264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.425781][T11464] loop6: detected capacity change from 0 to 256 [ 219.436164][T11464] msdos: Bad value for 'gid' [ 219.440814][T11464] msdos: Bad value for 'gid' [ 219.453359][T11416] chnl_net:caif_netlink_parms(): no params data found [ 219.476157][ T52] hsr_slave_0: left promiscuous mode [ 219.481893][ T52] hsr_slave_1: left promiscuous mode [ 219.487585][ T52] batman_adv: batadv0: Removing interface: team0 [ 219.495896][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.506068][ T52] pim6reg (unregistering): left allmulticast mode [ 219.514025][T11467] loop7: detected capacity change from 0 to 512 [ 219.523378][T11467] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 219.563903][ T52] team0 (unregistering): Port device team_slave_1 removed [ 219.573068][ T52] team0 (unregistering): Port device team_slave_0 removed [ 219.634564][T11416] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.641668][T11416] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.649158][T11416] bridge_slave_0: entered allmulticast mode [ 219.656377][T11416] bridge_slave_0: entered promiscuous mode [ 219.663224][T11416] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.670406][T11416] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.677615][T11416] bridge_slave_1: entered allmulticast mode [ 219.684100][T11416] bridge_slave_1: entered promiscuous mode [ 219.710382][T11416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.722642][T11416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.755707][T11416] team0: Port device team_slave_0 added [ 219.762728][T11416] team0: Port device team_slave_1 added [ 219.780321][T11482] loop5: detected capacity change from 0 to 512 [ 219.810235][T11482] journal_path: Non-blockdev passed as './bus' [ 219.816590][T11482] EXT4-fs: error: could not find journal device path [ 219.836623][T11482] loop5: detected capacity change from 0 to 128 [ 219.844709][T11416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.851698][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.877708][T11416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.896424][T11491] loop7: detected capacity change from 0 to 128 [ 219.936591][T11416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.943656][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.969664][T11416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.983558][T11492] program syz.1.2753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.993094][T11492] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 220.117275][T11482] FAULT_INJECTION: forcing a failure. [ 220.117275][T11482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.130486][T11482] CPU: 1 UID: 0 PID: 11482 Comm: syz.5.2754 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 220.130525][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 220.130541][T11482] Call Trace: [ 220.130549][T11482] [ 220.130560][T11482] __dump_stack+0x1d/0x30 [ 220.130584][T11482] dump_stack_lvl+0xe8/0x140 [ 220.130634][T11482] dump_stack+0x15/0x1b [ 220.130730][T11482] should_fail_ex+0x265/0x280 [ 220.130761][T11482] should_fail+0xb/0x20 [ 220.130788][T11482] should_fail_usercopy+0x1a/0x20 [ 220.130810][T11482] _copy_from_user+0x1c/0xb0 [ 220.130859][T11482] kstrtouint_from_user+0x69/0xf0 [ 220.130901][T11482] ? avc_policy_seqno+0x15/0x30 [ 220.130951][T11482] proc_fail_nth_write+0x50/0x160 [ 220.131056][T11482] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 220.131083][T11482] vfs_write+0x266/0x8d0 [ 220.131108][T11482] ? __cond_resched+0x4e/0x90 [ 220.131193][T11482] ksys_write+0xda/0x1a0 [ 220.131275][T11482] __x64_sys_write+0x40/0x50 [ 220.131307][T11482] x64_sys_call+0x2cdd/0x2fb0 [ 220.131334][T11482] do_syscall_64+0xd0/0x1a0 [ 220.131442][T11482] ? clear_bhb_loop+0x25/0x80 [ 220.131469][T11482] ? clear_bhb_loop+0x25/0x80 [ 220.131538][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.131643][T11482] RIP: 0033:0x7f562bebd41f [ 220.131660][T11482] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 220.131682][T11482] RSP: 002b:00007f562a527030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 220.131742][T11482] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f562bebd41f [ 220.131759][T11482] RDX: 0000000000000001 RSI: 00007f562a5270a0 RDI: 0000000000000006 [ 220.131775][T11482] RBP: 00007f562a527090 R08: 0000000000000000 R09: 0000000000000000 [ 220.131790][T11482] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 220.131803][T11482] R13: 0000000000000000 R14: 00007f562c0e5fa0 R15: 00007ffe2b3b8a28 [ 220.131821][T11482] [ 220.418848][T11416] hsr_slave_0: entered promiscuous mode [ 220.448640][T11416] hsr_slave_1: entered promiscuous mode [ 220.494772][T11416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.542637][T11416] Cannot create hsr debugfs directory [ 220.619380][T11500] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2759'. [ 220.648059][T11503] loop6: detected capacity change from 0 to 1024 [ 220.663064][T11507] Invalid ELF header magic: != ELF [ 220.679082][T11503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.691524][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.706837][ T52] IPVS: stop unused estimator thread 0... [ 220.727197][T11503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.735864][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.744302][T11499] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2759'. [ 220.756359][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2762'. [ 220.767007][T11509] loop5: detected capacity change from 0 to 256 [ 220.782721][T11509] msdos: Bad value for 'gid' [ 220.787391][T11509] msdos: Bad value for 'gid' [ 220.806795][T11503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.832339][ T9531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.939034][T11516] loop6: detected capacity change from 0 to 512 [ 220.959416][T11516] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 221.030075][T11520] loop7: detected capacity change from 0 to 8192 [ 221.083219][T11520] loop7: p1 p3 p4 [ 221.088030][T11520] loop7: p3 size 4294967040 extends beyond EOD, truncated [ 221.098764][T11520] loop7: p4 start 261888 is beyond EOD, truncated [ 221.109129][T11520] SELinux: policydb magic number 0xcfec9c78 does not match expected magic number 0xf97cff8c [ 221.121066][T11520] SELinux: failed to load policy [ 221.163846][T11416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.185356][T11416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.198200][T11525] loop7: detected capacity change from 0 to 512 [ 221.207014][T11416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.213952][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 221.213965][ T29] audit: type=1326 audit(1748017174.737:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7febb683d5ca code=0x7ffc0000 [ 221.254390][T11525] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 221.289076][T11416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.297456][T11525] EXT4-fs (loop7): 1 truncate cleaned up [ 221.313361][T11525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.327322][ T29] audit: type=1326 audit(1748017174.767:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7febb683d5ca code=0x7ffc0000 [ 221.350822][ T29] audit: type=1326 audit(1748017174.767:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7febb683d1d7 code=0x7ffc0000 [ 221.374450][ T29] audit: type=1326 audit(1748017174.767:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7febb684010a code=0x7ffc0000 [ 221.504147][T11264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.533983][T11538] SELinux: policydb string length 2097160 does not match expected length 8 [ 221.550654][T11416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.557906][T11538] SELinux: failed to load policy [ 221.558128][ T29] audit: type=1326 audit(1748017174.937:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febb683d2d0 code=0x7ffc0000 [ 221.586485][ T29] audit: type=1326 audit(1748017174.937:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7febb683d6b7 code=0x7ffc0000 [ 221.609921][ T29] audit: type=1326 audit(1748017174.937:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febb683d2d0 code=0x7ffc0000 [ 221.633513][ T29] audit: type=1326 audit(1748017174.937:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb683e969 code=0x7ffc0000 [ 221.657137][ T29] audit: type=1326 audit(1748017174.937:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.7.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7febb683e969 code=0x7ffc0000 [ 221.680794][ T29] audit: type=1400 audit(1748017174.947:9560): avc: denied { setattr } for pid=11524 comm="syz.7.2767" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.708924][T11416] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.727254][T11545] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2774'. [ 221.764415][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.771536][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.803829][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.811033][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.873690][T11416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.886130][T11553] FAULT_INJECTION: forcing a failure. [ 221.886130][T11553] name failslab, interval 1, probability 0, space 0, times 0 [ 221.898892][T11553] CPU: 1 UID: 0 PID: 11553 Comm: syz.6.2776 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 221.898920][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 221.898932][T11553] Call Trace: [ 221.898937][T11553] [ 221.898947][T11553] __dump_stack+0x1d/0x30 [ 221.898978][T11553] dump_stack_lvl+0xe8/0x140 [ 221.899001][T11553] dump_stack+0x15/0x1b [ 221.899021][T11553] should_fail_ex+0x265/0x280 [ 221.899067][T11553] should_failslab+0x8c/0xb0 [ 221.899102][T11553] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 221.899128][T11553] ? should_fail_ex+0xdb/0x280 [ 221.899228][T11553] ? sidtab_sid2str_get+0xa0/0x130 [ 221.899264][T11553] kmemdup_noprof+0x2b/0x70 [ 221.899284][T11553] sidtab_sid2str_get+0xa0/0x130 [ 221.899451][T11553] security_sid_to_context_core+0x1eb/0x2e0 [ 221.899480][T11553] security_sid_to_context_force+0x2a/0x40 [ 221.899577][T11553] selinux_inode_init_security+0x31f/0x3c0 [ 221.899654][T11553] security_inode_init_security+0x146/0x330 [ 221.899679][T11553] ? __pfx_shmem_initxattrs+0x10/0x10 [ 221.899786][T11553] shmem_mknod+0xad/0x180 [ 221.899895][T11553] shmem_create+0x34/0x50 [ 221.899928][T11553] ? __pfx_shmem_create+0x10/0x10 [ 221.900063][T11553] path_openat+0x1102/0x2170 [ 221.900101][T11553] do_filp_open+0x109/0x230 [ 221.900210][T11553] do_sys_openat2+0xa6/0x110 [ 221.900230][T11553] __x64_sys_creat+0x65/0x90 [ 221.900250][T11553] x64_sys_call+0x114d/0x2fb0 [ 221.900273][T11553] do_syscall_64+0xd0/0x1a0 [ 221.900338][T11553] ? clear_bhb_loop+0x25/0x80 [ 221.900362][T11553] ? clear_bhb_loop+0x25/0x80 [ 221.900442][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.900463][T11553] RIP: 0033:0x7f15c631e969 [ 221.900480][T11553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.900500][T11553] RSP: 002b:00007f15c4987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 221.900521][T11553] RAX: ffffffffffffffda RBX: 00007f15c6545fa0 RCX: 00007f15c631e969 [ 221.900536][T11553] RDX: 0000000000000000 RSI: ecf86c37d53049cc RDI: 0000200000000000 [ 221.900550][T11553] RBP: 00007f15c4987090 R08: 0000000000000000 R09: 0000000000000000 [ 221.900577][T11553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.900591][T11553] R13: 0000000000000001 R14: 00007f15c6545fa0 R15: 00007ffdcf72c9d8 [ 221.900647][T11553] [ 222.148582][T11555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11555 comm=syz.1.2777 [ 222.161291][T11545] loop5: detected capacity change from 0 to 512 [ 222.161642][T11545] journal_path: Non-blockdev passed as './bus' [ 222.173866][T11545] EXT4-fs: error: could not find journal device path [ 222.264727][T11555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 222.273780][T11555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 222.350982][T11416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.542010][T11571] lo speed is unknown, defaulting to 1000 [ 222.596538][T11574] lo speed is unknown, defaulting to 1000 [ 222.808637][T11575] loop5: detected capacity change from 0 to 1024 [ 222.826763][T11573] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 222.841537][T11575] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 223.020443][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2783'. [ 223.360568][T11580] xt_TCPMSS: Only works on TCP SYN packets [ 223.457523][T11416] veth0_vlan: entered promiscuous mode [ 223.499040][T11416] veth1_vlan: entered promiscuous mode [ 223.542700][T11589] netlink: 'syz.5.2785': attribute type 10 has an invalid length. [ 223.550717][T11589] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2785'. [ 223.569710][T11416] veth0_macvtap: entered promiscuous mode [ 223.626733][T11416] veth1_macvtap: entered promiscuous mode [ 223.727662][T11416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.738288][T11416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.748313][T11416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.759044][T11416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.943296][T11416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.961340][T11416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.971861][T11416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.981709][T11416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.992183][T11416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.508855][T11416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.535732][T11600] lo speed is unknown, defaulting to 1000 [ 224.622763][T11601] lo speed is unknown, defaulting to 1000 [ 224.945021][T11416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.953896][T11416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.962628][T11416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.971331][T11416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.006059][T11613] loop7: detected capacity change from 0 to 512 [ 225.016595][T11613] EXT4-fs: Ignoring removed oldalloc option [ 225.083447][T11613] EXT4-fs (loop7): 1 truncate cleaned up [ 225.089919][T11613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.244972][T11264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.314828][T11610] lo speed is unknown, defaulting to 1000 [ 225.481735][T11631] tipc: Started in network mode [ 225.486814][T11631] tipc: Node identity ac14140f, cluster identity 4711 [ 225.508471][T11631] tipc: New replicast peer: 255.255.255.255 [ 225.514692][T11631] tipc: Enabled bearer , priority 10 [ 225.576710][T11633] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(15) [ 225.583377][T11633] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 225.591189][T11633] vhci_hcd vhci_hcd.0: Device attached [ 225.662067][T11634] vhci_hcd: connection closed [ 225.662843][T10458] vhci_hcd: stop threads [ 225.671966][T10458] vhci_hcd: release socket [ 225.676527][T10458] vhci_hcd: disconnect device [ 225.801898][T11641] ================================================================== [ 225.810077][T11641] BUG: KCSAN: data-race in __ip6_datagram_connect / udpv6_sendmsg [ 225.817923][T11641] [ 225.820258][T11641] write to 0xffff8881043ccd0c of 2 bytes by task 11640 on cpu 0: [ 225.828070][T11641] __ip6_datagram_connect+0x74e/0x7e0 [ 225.833473][T11641] udpv6_connect+0x33/0x150 [ 225.838006][T11641] inet_dgram_connect+0x122/0x1c0 [ 225.843051][T11641] __sys_connect+0x1ef/0x2b0 [ 225.847662][T11641] __x64_sys_connect+0x3f/0x50 [ 225.852449][T11641] x64_sys_call+0x1daa/0x2fb0 [ 225.857147][T11641] do_syscall_64+0xd0/0x1a0 [ 225.861663][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.867571][T11641] [ 225.869900][T11641] read to 0xffff8881043ccd0c of 2 bytes by task 11641 on cpu 1: [ 225.877544][T11641] udpv6_sendmsg+0x91a/0x1570 [ 225.882246][T11641] inet6_sendmsg+0xac/0xd0 [ 225.886693][T11641] __sock_sendmsg+0x8b/0x180 [ 225.891306][T11641] __sys_sendto+0x268/0x330 [ 225.895848][T11641] __x64_sys_sendto+0x76/0x90 [ 225.900562][T11641] x64_sys_call+0x2eb6/0x2fb0 [ 225.905253][T11641] do_syscall_64+0xd0/0x1a0 [ 225.909783][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.915698][T11641] [ 225.918035][T11641] value changed: 0x0000 -> 0x234e [ 225.923073][T11641] [ 225.925402][T11641] Reported by Kernel Concurrency Sanitizer on: [ 225.931572][T11641] CPU: 1 UID: 0 PID: 11641 Comm: syz.3.2801 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 225.944099][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 225.954187][T11641] ================================================================== [ 226.522778][ T5328] tipc: Node number set to 2886997007