last executing test programs: 4m38.278817896s ago: executing program 32 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r8}, 0x18) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_getfd(r10, r6, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 4m28.854183143s ago: executing program 33 (id=222): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 4m27.338339863s ago: executing program 34 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r5}, 0x18) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev, 0xffffffff}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e30000000008004e0000208000000000019078ac1e0001e000000104019078030000004500fffe00000000000001000000000064010101"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0x0, @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6b, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x10) r12 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f00000002c0)={r13, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4m26.387262216s ago: executing program 35 (id=261): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x2000000) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) 4m20.839329891s ago: executing program 36 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pivot_root(&(0x7f0000000200)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) (fail_nth: 4) 4m7.167982954s ago: executing program 37 (id=554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x5000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 4m3.469812604s ago: executing program 38 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x8, 0x10, 0x0, 0x5}, &(0x7f0000000100)=0x18) r5 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r5}, 0x38) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r10 = eventfd2(0x0, 0x0) io_getevents(r9, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r9, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r10}]) io_pgetevents(r9, 0x4, 0x1, &(0x7f0000000280)=[{}], &(0x7f00000002c0)={0x77359400}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe69}, {0xa, 0x4e23, 0x2, @remote, 0xb}, r8, 0x6}}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x1, 0x1}, 0x21) 4m3.140012389s ago: executing program 39 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 4m1.223139854s ago: executing program 40 (id=614): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 3m59.811952073s ago: executing program 41 (id=624): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001000000"], 0x48}}, 0x0) 3m54.790464721s ago: executing program 42 (id=530): socket$nl_netfilter(0x10, 0x3, 0xc) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@nouser_xattr}, {@data_err_ignore}], [{@obj_user={'obj_user', 0x3d, '/\'[)*:-^+$i\'*:&{'}}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',afid=0x00', @ANYRESDEC=0x0]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',afid=0x00', @ANYRESDEC=0x0]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) 3m32.906679312s ago: executing program 0 (id=1070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2841, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x7}, 0x1100, 0x5dd8, 0x203a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x23d000, 0x1000}, 0x20) close(0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="0209000a02"], 0x10}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000048000), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x1c) 3m31.710112228s ago: executing program 0 (id=1084): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) dup3(r5, r4, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x3c) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 3m30.806953459s ago: executing program 0 (id=1093): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd5f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'dh\x00', 0x1, 0x20000007, 0x10000049}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x17f) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000900)=0x6, &(0x7f0000000940)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001c00)="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", 0x1000}, {&(0x7f00000007c0)="e7ac9094f9825f6000754d026ac8126ae9111b0ed8b8531d3006619088616148adc7a37492bf34080a44c91a53ec23817ecbdfe4065f3bafd1d6cdb349180006b85ba0af185191559bdd33fcf264fd89f5edae44028c6f44d7e9083323982118a3dbea7dac92280c6d320b3df98ef4446dec93f69ba3160022693dfb5f8a68", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="222a6e91a044e08a05bba54a3673be4ec3dbbb64836c44854c6c1a5465ad5c6c3bba34ceef761be77f934c3f4d28ff7f4004c0e951bb874b2da0b5e474fa77bc14b8babcda7bf809e68ec8ef56b49c00abd7c2d71d26f787ea6479e981cce3239bf0ece4a6a264152314a3d9dbd0399916610bf4f7067aee9a926e7e12ecfc985517883c25fa7d2421f1fb83e45dc0dc7c183754bae587d70da4a2cc2c85825f7f43604c13efda65e4576d54c4b496afef959db6773e416061106caec7b041c1c9d70fadbf9a76b98cd70f", 0xcb}, {&(0x7f00000004c0)="7ba2771f8ab30c536e98dabfd6f3", 0xe}], 0x2, &(0x7f0000000a00)=[{0xfffffdca, 0x114, 0x40, "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"}, {0x108, 0x112, 0x6, "23146ca2a4cba68d0a373b91a06a008a108bc28e361305aa2089c6ef4dc38ed38ec42a0f90fa9e873538cdc1207be615195e73c44e24c80ab609a0a94a9155920805342e03c239fbedc94c99e8c2fce301ad5e2cd5a9bcb10e23c06af6e904da72c9f2063476eddc855ba860c0a49d4a9b17d5a3e14f35569229192d891100cfb7f60c9b5fbc06e82fb5ff355920b10a291bc3643b2611eec324cfc17b84a62a8234c12654aabb147f54967e1c9c804d6a1e92f63821d19f533e7093368b3d85435fc1f5420f0f6f10279d1a63b9502951b5e26ac8407ad72e4eb9bda96ad43efdd4b17f9e91c09f8a71ec3de67d6f932d18670cb63b"}, {0x38, 0x115, 0xffff, "0d4b34d3c9271e4fb2abe1f85e4d26aa8791ecea6e0a3264f2c587fe69590049eda886db0ab42822"}, {0x68, 0x10a, 0xffffffff, "c0e2c4c41eee0656f9292794c7b0adfabe62be59254201939ef1bb7d0c7abdc8faecdeb1965933c0ca9fe855e0b20b3d232006e880b512d9b5b6dc8553a6cb39b0c781b66e59d245ac84538e2a7213cf3abe"}, {0x30, 0x84, 0x6, "40bbba6cc1b48d48fcda4bbb9818bfe47cd25ee1577424664e"}], 0x11e8}}], 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1e00000005000000020000000300010080000000", @ANYRES32=0x1, @ANYBLOB="01000054c80400000053657e57e63fae1ae3f300e3a0104cd2e36188bcad1010d72a6289829309819b2347e3e9ccc81b91cb94793d4a2ce7b90cfac3c3a84863ccf70c267f", @ANYRES32, @ANYRES32=r8, @ANYBLOB="0500000003000000000000000400"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000056c0)={'syztnl1\x00', &(0x7f0000005fc0)={'sit0\x00', 0x0, 0x20, 0x40, 0x19, 0x7, {{0x17, 0x4, 0x2, 0x37, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @remote, {[@end, @ra={0x94, 0x4}, @cipso={0x86, 0x41, 0x3, [{0x5, 0x12, "6088e3aeeedaf336e8e49782b6b46fc3"}, {0x5, 0x3, 'Q'}, {0x6, 0x9, "bcd8734a1376ed"}, {0x0, 0x7, "7d1f00006a"}, {0x1, 0x5, "aa1edd"}, {0x7, 0x11, "7f665c788e38090b846a2c4b7a1321"}]}, @end, @end]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000007d00)=[{{&(0x7f0000000980)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000002c00)="4e7554c35b63b6f699a016d91af626f15f0942794338b7924e842d91c7fbac1c14df040c00a9cb256242bc9cd5d3af5f7898568ea2e554fa68abf7c03dca63e9647f7c0a0236c4abe3072c05c2d1e6a0c63df1baed9f732e2b1664ac635031deda4ef746f4a0976390f8ea989b787848bf341274d7704a609487794fb78460d50fb3f608dc23ceb1750d6b7d5e6598721330b5a1f95edd22a7c4f3a2357b6808", 0xa0}, {&(0x7f0000002cc0)="112c533473ff68", 0x7}, {&(0x7f0000002d00)="cac12e455018bf871782a845e1ca0017d05d3d6794d3c85e8ba8dc956285e176e62f4797e9228af0c1a52ae484dead9ad4048bd24ddf380937871f2fc38971b3416d832cc1791174f0e38e658026aabf10f9a6e83469197e9fe5159ecc65abf67d55322932aa2b1ed7c56357032fdcb571804ec9294294b0b0bf7319e086654ed1c4b0e53fd5a4ec3fca7134428cfd4f2d3199dfbaae80576e483dcd3f9b7cf031e276a5e2fcc66a5c5b3f9a981e34d52bfa3e1d459df83ae834476a548f0caec03fd35eb383a00a4be0c3b571d095479e50b86384c7187b2a007151c306f83763", 0xe1}, {&(0x7f0000002e00)="921256095171d01b3d20d6666f81a74bcb84d3d100bf6eaa08253c50fc1fdd9b5672101c711d4ec6eb8b65beaca9a534a48cc7905de536f25de1d0b872710c56b82529633cbea4cff95f0ed66395734a24596761d9cad94d7ca6f65076bf81386575eca53c42c519bdb7cedea0d4641ecfd77933dd2ddeedefe8233d16247ae454808af12a7d62312034014c90988827e785e90391e6181b5cc18df9497cbce51c5cb1591aa3ba5d87b961e1be3cf1fd629e3f857c067e341c61db4b5a71b4a658375cd552025a3aff1b5cdab1d130", 0xcf}, {&(0x7f0000002f00)="57292153f5e0b071382bfb1c59485fbee030f17b83cb97e656075bdc54b362c08449d6714206710ea569f7fdc850ba1369fdcf25681c488344c39b4c79744b9c158ccdfc54d84843e3a84c1047e43c857172452eea840fb4898c81dbfa2c929d67b0b4d4ad46b18327dd37f569da47196438dbbd79bd6cad9954184781bf4dc1014d31ed33b23b77be736fd6a8a4ffc552c53ffb719d401fdb72b97f55bf4077a240d9b041", 0xa5}, {&(0x7f0000002fc0)="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", 0xfd}], 0x6, &(0x7f0000003140)=ANY=[@ANYBLOB="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"/4216], 0x1078}}, {{&(0x7f00000041c0)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000055c0)=[{&(0x7f0000004200)="f2fb4d64f89cd62674b6d9ff4ce0c70012afd60f592e731e661883c34119c51feadaa55a60118eb90fccd24104bffb5231dcf9ed5148e9bfb833683bf863ca38275e6b682914ec8a92f9530f990efee8206295127bec8822b6c1b561c5b2cb015c4433ffe9bd8518e0", 0x69}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="02e70f71648bce30e71e34aeb7562fb4cb26d7cf467fa8271e9b4bcd15c84d0d87f82ffb76e8a354ec97cefab0227217a3a81a31228f", 0x36}, {&(0x7f00000052c0)="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", 0xfd}, {&(0x7f00000053c0)="f64a58e602e234e2115dec6101f17d3d646e7fbb8985d1896ca93ee2bc202124a0e85c1eb33a145e78ab467e238c182d580f7373fd136afdd7a1c9a026a770338b6dacd37bd3716fac8d809b597a1a34634a7936c9e40ed683a37e0175c15c08ba273b5fad5a8375d7504d76d1549e0a620982fa17961dee868499350fcc69df4712fda48a9b1d50aa03b54eb071ed732294b440968702fd574d5e0458b690123c5d69de7e25757cd1", 0xa9}, {&(0x7f0000005480)="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", 0xff}, {&(0x7f0000005580)="c569", 0x2}], 0x7, &(0x7f0000005700)=ANY=[@ANYBLOB="41b40000000000002900000032000000fff6f9b60100"/32, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000290000000b00000000000005000000002400000000000000290000003200000000000000000000000000ffffe0000002", @ANYRES32=r9, @ANYBLOB="000000001400000000000000290000003e0000000300000000000000"], 0x80}}, {{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000005780)="6453cf24c2886762fdbcedef9d1b50bda5635e1605165fd9541dde1befb3fa6bba3007a063ce4637b826aab43dde1bb1ecfa8935b6a29666cd3354ad8993b1e9a72a15e76b80b8739a24d0f22db6230ee2217a978a3add40a40c51743a6f5381aa736be646704cc254a2a61a5013bab752fab7a071f9f094bdf5b57ab77df185e52b5335f3f4278eb741804649bab269a042022815943ad31efbd11f61c989537066e57c26e3872e259f69b508", 0xad}, {&(0x7f0000005840)="eb942609ee6c26a039b3ec32ebcca26980efaebfe563b2b3b9aeaad17a8c072f80be8680c1591c337269abd7df6038e95923c6dbb5aa86752fa23522a630c865333f01c36996ce007806f89a9d66ca051b5a89b5a10bfa5b79919a7bc83c1ddf96998df89ea68b427b84939bd2f981711f20b5ed4e0f3c3001af67779959580e36a1394a4a234b7fa2a1ab4c16b3e8f5aad2476d4f385d44894e31cde1f3448191242c21146e0beb2d12ca0d0569908619b69ca21b65c330c6b943f91a2ed62adc0facb497a7c2ef9ddae8b23b5a20e22e4bb6552a39b29b9112f29495bd7cda", 0xe0}, {&(0x7f0000005940)="3e45b9d37c1a2872abfcb7b758a982eaf72491ebf928c4e871857f00e3333143d473352b090f68b1c64cb523aba2e0b72ddf65792989b62c5224ab885f8a99695a3f0849dce8631d8393f385e8799e471ddcfd57f0aaeef4c6d2e4d9961c503515bca827e233678a1e832e1376530e3237ab4e2d50b62d75bba1e7659faf6457dac26488a2451c3257533b86315683e902f1282c167916b2fe75ff021a6c4c3e1362f82d1967da35b392dd93d8759219c882542ecfeaceec265f37dd23e1823f01e28a70c670cd9b62aeeca1a9d46049efaa7cd008a71a026828552636ea78cda1b87b3e174da5d433ad149a90", 0xed}, {&(0x7f0000005a40)="1083dede7a16478f2690570b0cdcb7806cf8c1a080cfe5bf7c2746a62404eacc59befd2d6da0eb1a9f621fc59a792319753101d29005793923e0d900aa579e188a45bff780acb68202da076c76a55a812827cffa361f3f31e3d016316d8bdece5d4f6697001d68a9663d465c252b7cc75db116d076eb7c0e55905b3749fc01cd5cf943d74d819c1c93fa760efe0b7a1821a4d1ee6703a36061884351e68f5e233c3e74184251efedade35b6a06efdc04", 0xb0}], 0x4, &(0x7f0000005b40)=ANY=[@ANYBLOB="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"/1056], 0xffffffffffffffd4}}, {{&(0x7f0000005f80)={0xa, 0x4e20, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000007440)=[{&(0x7f0000007e80)="74d8ae3aeed124f99f80755773ed41490f49d21fc46a77b0a024577c24fe116a98e345dd24bd40bdba9f49a4afdec1cac20469e9070ef0df6c43c8666a05fee2db6c262b7c0587633c8b79385545a107562b99916f0a14e2854f46836f74d19f0bd82a042421c453a3b6aa4434dfa770656c4d109157040f7f6b8418e825939e8537107f71184c48b35e31798b", 0x8d}, {&(0x7f0000006080)="b7d86a92fc1b00e56ca77fa79f9796dc063138ccd37661ad33d20ba574fbe94b000dfb3f21a296ec637951046e7da5ba8722fc838136f279b275b0ba2e2bf52ff5bbd7367d2cf60f7a4444771ce4dab83e9d7548f122924bf8b8ec0c70f721b6debbd765e1d5378d89ad73c3e8ef61e96c53f9b82059aaa80bac349430c7cd153d3cd63ca94f3db8a596f89f42f6880bc42bf75560cce348f2c99889c963dfeb1f8ffc3cbc35acab0f8d5e3d4a5e126ff20fc74343528e0263dda1a03884f83627d2", 0xc2}, {&(0x7f0000006180)="7bc45f24e95795d6c69d5436d2804e000000000000000000", 0x18}, {&(0x7f00000061c0)="ec166611fa33db9210a65ab4b960973ae68486fe2b2ac9034264aa848c686560a0b3925ad9700ac6ff9f7b14da573ee8f88315e1122bd83a4de004d97bd4f323e62cbdf645c967c8f5d9be9b44fc6c78e1737019260b19a75b60ec7f2eaaa14fb9f0f67c3da833f312586f4ec91dc058695f279b17aa1bed7514649def7ccaa303c40f293e8c7fd7461b670a0c00fe1849161727ba059044db33e18060147a779e7fdf3e8bc7310d1535", 0xaa}, {&(0x7f0000006280)="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", 0x1000}, {&(0x7f0000007f40)="411ff1395c65d663029af9a900f1e3bcec0e4d10db459d789dd4d8d5d4f420de610e34b16fe28b166905071ec62eef2717b92875ab8753aec14d2035ccf029ae1d512bf8ce37e27f9dcb7de7d4c7605ff6b145ee8c14989045623ce3af8d13dabdaf674ad6851bd784480d029e934e7affd640e6460b8c85f01b7f18b7e50288783698f56a3310b8b20c1b84e2b04c085674ab32f120cbd997380418ec5d827a1a19b0bbab065769f5db9b14768029b92822c380a9bb78bdc28ee101ce4318144c4e286e4330f6721e1436777a602d119d056422e37de40f4ce86154c84bff", 0xdf}, {&(0x7f0000007300)="f61e7dc6b11a7adeab4c75f95535d5bf1a60f7695ccb00bcd8062736d15f51ca8471ccd49146c05916a6e8cdb139e1144aa0ad045b5de37f91300e452018f558374bb1f9457cab3463610733aa603e47fb4488f31a49477bb2900e511c55669babec563309e464dce2f60e885b7036efb845dcd30d3b13baac39f574b295e275da4bb59fbb6f549f5bc5ca495853d00d8acda829479fd64763628ecc851372192163cd097e0b7179c77262841ca9945005a29659dcce1c33e216c0fdf0e5ec53a95f01d7be8f1a9452919092c665e26f6073fc8f44c8408de8e03cbf86ed54b6759793025c31d88539097cca870336ea", 0xf0}, {&(0x7f0000007400)="d41d87b4c02388d1c332d220fffe9a6f213e6051f2b0b927e892ea89fa0449a6828ac74ebd40", 0x26}], 0x8, &(0x7f00000074c0)=ANY=[@ANYBLOB="98000000000000002900000004000000000f0000000000000001000561ca39ccdc416f464d1d066a0bace06f970dcabdfa18a41c4da15b11e3a5281eabe265eeb68eec1829bca2bc2782f06aea4cc728d997dc9a7b655016bc173ba51a9a22fc7e6f0b43442e64f36c4171e390f4e625a30d2717018657f8bda7c0d8a66f000100000100c910ff020000000000000000000000000001000024000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290100003200000020010000000000000000000000000001", @ANYRES32=r12, @ANYBLOB="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"/508], 0x2e0}}, {{&(0x7f00000077c0)={0xa, 0x4e20, 0x31, @dev={0xfe, 0x80, '\x00', 0x33}, 0x81}, 0x1c, &(0x7f0000007a80)=[{&(0x7f0000007800)="360b2b9c0d3da60eee18e624f14d421051b75e831cc995a98bfb53f46c87e7071445428b1720b275f2e5436d46a98b02f0ad66b07f6c79b4cae5df27c66bec2117434f4a37", 0x45}, {&(0x7f0000007880)="d37c64c8fc27b6cc0d7c33d1bf37137685409b9b42d3064b2461062543d2bbc8b41cdbfce41d37a2de10a76e91951d94c9d4894381674d97cfe23914effbb029b933f8e04fa61351b5e2e8edd6ab5f98f7f9f7f538d5812ae4678f74448605b821c76d4d5fbb6bff51b95786ed5d9b580365ee24b31eaca9c9", 0x79}, {&(0x7f0000007900)="151765c947301baa55a912d3d15d55b268470a043a93d014e1c262fa1ca7306c4e9d05f318987c366f9939a90280058637e062154c1736ff", 0x38}, {&(0x7f0000007940)="45b297d79abd80f5da21a470d714241df083b626417ff73808783e8e0f9a50389cde005f7d8fc3", 0x27}, {&(0x7f0000007980)="ee5cd4c57b84c523", 0x8}, {&(0x7f00000079c0)="3c590519be83d5fcca46ee47ab724ff55ae9e6a2b0c15a06e04fc3893eea52f345536f6e80c1e8324832716acca898985cdb68a9a68830079e2356436668854d52e0c0bc3a27a179ca57002588727bbb3083d5a554f597aa18df523108709effcc43d35aae8b9d1d7c1f594f71e93275719dfd6849a1eb12062df764d561ddfef1467c2b345c5a3992840389d13c3e82c528e8882b8453b4626d", 0x9a}], 0x6, &(0x7f0000007b00)=ANY=[@ANYBLOB="140000000000000029000000080000000500000000000000140000000000000029000000340000d2fed5bfcdb89205001400000000000000290000003e000000716bffff00000000"], 0x48}}, {{0x0, 0x0, &(0x7f0000007cc0)=[{&(0x7f0000007b80)="4b02cf649feffeb76b2b0bf3ca04eb920127174607dd010212f944ec9a9b3b87784b1154ff802a7b1b0bc7053769c7eadd0af5241dd3cd7f0e7a318ab28b1705ba98b6d9bdef7ffd03e79b8076694ece3317efe3fb2f559cc0044ee21255e111c2135a56634ae3bd1660a815485e5c2a95fa946a876031ec625d8667e5d9808b43c2212b2bb562f185f3a5fa7d9d8f862a6b88a9f49d6d0555b2a17d95e722565af1d2ee23fb28a9379f8b331d5d160401697557bad53646bca7d713", 0xbc}, {&(0x7f0000007c40)="32eb66cba4bbf1ad851483a9e43c2ee50d791bc6dc8621d0ac0e304810583e57c926e19978abcf18e2bdb15db4c7d51cb0055d122d123754772c194c0fc9cb1ea469ac6f44", 0x45}], 0x2}}], 0x6, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r1, 0x0, 0xf3a, 0x0) write$binfmt_elf64(r13, &(0x7f0000000380)=ANY=[], 0x18c6) getsockopt$IP_VS_SO_GET_SERVICE(r13, 0x0, 0x483, &(0x7f0000000180), &(0x7f00000003c0)=0x68) 3m30.591834643s ago: executing program 43 (id=1099): socket$kcm(0x21, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9135}, 0x18) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 3m30.565603363s ago: executing program 0 (id=1102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000400), &(0x7f00000004c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xfffffffffffffda3, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") 3m30.293355466s ago: executing program 0 (id=1104): r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x11) 3m26.580593365s ago: executing program 0 (id=1141): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) open(0x0, 0x60840, 0x0) set_mempolicy(0x4005, 0x0, 0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xfffffffffffffda3, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 3m26.580396795s ago: executing program 44 (id=1141): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) open(0x0, 0x60840, 0x0) set_mempolicy(0x4005, 0x0, 0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xfffffffffffffda3, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 3m19.634887177s ago: executing program 7 (id=1260): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x757, &(0x7f0000000800)="$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") rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 3m19.543769988s ago: executing program 7 (id=1264): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) creat(&(0x7f00000001c0)='./file1\x00', 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) 3m19.302479541s ago: executing program 7 (id=1275): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@jqfmt_vfsold}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/252, 0xfc}], 0x2}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40c80, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m18.432527802s ago: executing program 7 (id=1302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000400), &(0x7f00000004c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xfffffffffffffda3, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") 3m18.026510348s ago: executing program 7 (id=1312): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@jqfmt_vfsold}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2020) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40c80, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m16.956803591s ago: executing program 7 (id=1330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000006800090300000000ffdbdf250a00000079e8b58f56260db148d655f94e94fe0000000014000600e00000010000000000000000000000000800010001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r5, r5, 0x0, 0x40000f63c) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff9fc15ba4b61508980000b70400000000090000000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x8e4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='fsi_master_gpio_cmd_same_addr\x00', r8, 0x0, 0x37209fd5}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000140)={0x2, 0x3, 0x0, 0xff81, 0x0, 0x3, 0x0}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r10, 0x5607, 0x3) ioctl$VT_ACTIVATE(r10, 0x5606, 0x4) 3m16.898777782s ago: executing program 45 (id=1330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000006800090300000000ffdbdf250a00000079e8b58f56260db148d655f94e94fe0000000014000600e00000010000000000000000000000000800010001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r5, r5, 0x0, 0x40000f63c) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff9fc15ba4b61508980000b70400000000090000000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x8e4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='fsi_master_gpio_cmd_same_addr\x00', r8, 0x0, 0x37209fd5}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000140)={0x2, 0x3, 0x0, 0xff81, 0x0, 0x3, 0x0}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r10, 0x5607, 0x3) ioctl$VT_ACTIVATE(r10, 0x5606, 0x4) 2m43.300942403s ago: executing program 4 (id=2346): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 2m43.236104904s ago: executing program 4 (id=2349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 3) 2m42.939068098s ago: executing program 4 (id=2355): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000003200)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) clock_nanosleep(0xfffffffffffffdfc, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x10) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r3, &(0x7f0000000140)='./control\x00', 0x200) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./control\x00', 0x0, 0x4010}, 0xfffffffffffffeb0) getsockname$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001100)=0x14) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) readv(r4, &(0x7f00000031c0)=[{&(0x7f00000030c0)=""/226, 0xe2}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x4, 0x6, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x7, '\x00', r7, r4, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="110000005200010004000000000000001c"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYBLOB="883d854adb34a269ac28e86ae191190d88d4127ae58057146b96bd813083d35a9816f65e4f7fec", @ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x27, 0xe, 0x0, &(0x7f00000005c0)="f8ad48cc02cb29dcc8007f5b0813", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c80a0000", @ANYRES16=r10, @ANYBLOB="00042abd7000ecdbdf260e00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0xac8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m42.832437379s ago: executing program 4 (id=2359): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) sendfile(r1, r1, 0x0, 0x800000009) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[], 0x28}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1000903, 0x12) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (fail_nth: 8) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m42.126640928s ago: executing program 4 (id=2374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = socket(0x18, 0x3, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r4, r3, 0x0, 0x8) 2m41.711533324s ago: executing program 4 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000200)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) 2m41.650197915s ago: executing program 46 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000200)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) 39.602855189s ago: executing program 6 (id=4528): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) unshare(0x2c020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffff7f}) 39.54006384s ago: executing program 6 (id=4529): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x0, 0x7ffc1ffb}]}) eventfd2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f7, &(0x7f00000004c0)="$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") dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_io_uring_setup(0xc43, &(0x7f0000000880)={0x0, 0x24dd, 0x20, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x200}, 0x0, 0x9, 0x800000, 0x5, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x9}, 0x18) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xffa8) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x377}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 38.456220084s ago: executing program 6 (id=4544): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$unix(0x1, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create1(0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRESOCT=r0], 0x20) 38.388905325s ago: executing program 6 (id=4546): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000270001"], 0x50}, 0x1, 0x0, 0x0, 0x95a3fe7642136a8}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f00000000c0)='./file0\x00', r2}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) r10 = mq_open(&(0x7f0000000800)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\b\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#G\xd5\x93BoR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x85\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96\xcd_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\xcd\xac\xcd\xf7\xe689\x92R\xcd1b\x9b\x15\xfc\xcc\x97\x10\xc9\x7f#\x91\xef\x8eSwKz\xa9\x89\xe2\x87g\xfa\xef\x1ai\xc1\xba,\x01\xda\xf0\xd6\xf9\x18\x86\xef\xab5\x8fL\x05\xe9Z\xe0e\xb3\x1a\xe8-\x00S\x85\xcd\xf5\x80\x15\xb9\\&!\x968\x03@Z?\xfdg\xe0-\x9f\x86mL\x13 \xe2x\x97\x91KZ\x908JA\xe4\x8c-\xb6\xf5\f\x95q\x0f\xc2\x8f\xfb\xe9\xf3\xafO~\xb5\xa3\x82>g\x99\xbd\x8a5<\x04\x10|Q\xdcD\xde\xdb\x95\xb4in\x9el-\xedVN\x8d\r:\xbf\xcaa\x80O\xd0EEOU(\rU\xbe\f\xd1\xdf\x99\xa5iw\x96\xc2\x1f5\xb2\xb3\xc4\x01\xa8\xf2\x19A\xaa\x83\x02r\xadx\xefa\xbd\xae\xfd\xc7;QJ\x00'/751, 0x40, 0x10, 0x0) mq_getsetattr(r10, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) move_mount(r12, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 38.388177155s ago: executing program 6 (id=4548): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x58) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)="a7", 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000000880)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='mm_page_free\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0xfc, 0x5}]}, 0x10) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0x9ffc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@ocfs2={0xc}, 0x0, 0x1200) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="870c000000"], 0x0, 0x200) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x4042, 0x41}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r10 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) socket$inet_mptcp(0x2, 0x1, 0x106) 38.336404116s ago: executing program 6 (id=4549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty=0xa4ffffff}, 0xc) 38.335892316s ago: executing program 47 (id=4549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty=0xa4ffffff}, 0xc) 31.528683815s ago: executing program 1 (id=4641): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$unix(0x1, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create1(0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRESOCT=r0], 0x20) 31.108325821s ago: executing program 1 (id=4645): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@delchain={0x4c, 0x65, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0xffe0}, {0xc, 0xf}, {0xb, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x7, 0x56}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x40}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") close(r0) 29.783829058s ago: executing program 1 (id=4651): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x8, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000004003, {0x0, 0x0, 0x9abf37a6d50d14bd}}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x2e, 0x2000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) close(r4) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r6 = creat(&(0x7f0000000080)='./bus\x00', 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4814}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d"], 0x1d0}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xc}, 0x1100, 0x5dd8, 0xfffffff9, 0x8, 0xffffffffffffffff, 0x8, 0xfffb, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffdfffffffffff, r6, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f0000000700)=[{&(0x7f0000002840)=""/4116, 0x1014}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000580)=""/85, 0x55}], 0x7, 0x563, 0x40080, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x3a, 0x80, 0x18, [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x555}, {0xd, 0x24, 0xf, 0x1, 0xf6, 0x3, 0xe38, 0x5a}, [@mdlm_detail={0x8, 0x24, 0x13, 0x8, "bf7cb93a"}, @obex={0x5, 0x24, 0x15, 0xfff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7a, 0x4, 0x3c}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xf8, 0x7, 0xe3, 0xff}, 0x45, &(0x7f0000000240)={0x5, 0xf, 0x45, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xb6, 0x5, 0x1, 0xf0f, 0x40, [0x0, 0xc0, 0xc000, 0x30, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x80, 0x7, 0x7, 0x19}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xd9, 0x3, 0x7, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x400}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) 28.482439285s ago: executing program 1 (id=4663): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001680)='./file0\x00', 0x201805a, &(0x7f0000000100)={[{@abort}, {@bh}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x7a0, &(0x7f0000000ec0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/192, 0xc0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='netlink_extack\x00', r2, 0x0, 0x2000000000000003}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "f199d8ba2114a420", "b2c62d103e3c86ae1701b8f290581456", "cb44d90f", "175c9ff0f8383497"}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(0x0, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000100)={0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x4024094) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0800000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 28.326934257s ago: executing program 1 (id=4667): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create1(0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRESOCT=r0], 0x20) 27.169323012s ago: executing program 1 (id=4677): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0xba01}, 0x810) (fail_nth: 10) 27.141255063s ago: executing program 48 (id=4677): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0xba01}, 0x810) (fail_nth: 10) 2.854885902s ago: executing program 5 (id=5053): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) syz_emit_ethernet(0x72, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000000000000000000000000000000000000ffffe000000117c17f079171000700840000f5613b02b3fe958aa38826c983f15f398a1a9163521264f0fac46d02ddf88494fceb779865a1f2b0056b87c4f948988e8f0a496c95d8d28c8b472a21f5ad7b327f937f377f25644835cc2b5d36d845ab4e88b970aab2359625dc920d2025b78611f9514efbfdf826961e2b345e571b81cd638a7c3f"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000004c0), 0x0, 0x5e7, &(0x7f0000000600)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) unshare(0x24040000) unshare(0x2c020400) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="f25ace399ade483dbcf0d36e93b794ea5179d7ca2c44bee8c6ccdd4cda888f06b56dc1021b7afe18b8a3da5e393d40300ccbfe6b582a6ef71de2019768903e1330a19283df9f256fd2c86986132b9b9bb2d5329e6d50f2f5f02eecee53485b8e6b1191ad39e05d39b2b28f5916d587e758daeffe81056f4f8d2da1be16e4b9c2b3ad00f8e77f55134609d67b5bccea70b6aef4f51945bd39605da3ba391a5f3a83a946780cc1c60dac43dbfead84de7e05d63eecd086b2318a9045dd2751d76ce65d832ebbc0da2e0c1c2336"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) 2.639955185s ago: executing program 9 (id=5058): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.545688636s ago: executing program 5 (id=5060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.545390976s ago: executing program 9 (id=5061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7ffd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000f80), 0x0}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001e00)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.527009567s ago: executing program 3 (id=5063): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000240)={'system_u:object_r:mail_spool_t:s0', 0x20, 'unconfined', 0x20, 0x7}, 0x42) (fail_nth: 4) 2.512510407s ago: executing program 9 (id=5064): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 2.196187271s ago: executing program 3 (id=5066): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 2.191659421s ago: executing program 5 (id=5068): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x0, 0x7ffc1ffb}]}) eventfd2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f7, &(0x7f00000004c0)="$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") dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) syz_io_uring_setup(0xc43, &(0x7f0000000880)={0x0, 0x24dd, 0x20, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x200}, 0x0, 0x9, 0x800000, 0x5, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x377}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r5, 0xa32, 0x0, 0x47, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 2.165770751s ago: executing program 3 (id=5069): sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000100), 0x4001) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, 0x0, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0xa0028000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)) 2.157398562s ago: executing program 9 (id=5071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) syz_clone(0xf000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.012305753s ago: executing program 8 (id=5074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7ffd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000f80), 0x0}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001e00)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.4600555s ago: executing program 8 (id=5078): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2, 0x0, 0x178}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.370955742s ago: executing program 8 (id=5081): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 1.369570522s ago: executing program 2 (id=5082): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 1.331579812s ago: executing program 2 (id=5083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.319837803s ago: executing program 8 (id=5084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70860fc00000003000000000000009500000000000097a0f98a7cb6ec4ad024fef387932394042d7b"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) semop(0x0, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000340)=""/107) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) utimes(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) 1.272256973s ago: executing program 3 (id=5085): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000100000000000009000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff0000"], &(0x7f00000001c0)='GPL\x00', 0x6df, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x7, 0xfffffeff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000980)=[{0x3, 0x5, 0x5}, {0x5, 0x2, 0x10}, {0x5, 0x3, 0x0, 0x1}], 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.207988024s ago: executing program 9 (id=5086): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x40180, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x5) write$eventfd(r2, &(0x7f0000000100), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) fallocate(r2, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x8, 0x0, 0x2, 0x3ff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r6, 0x10, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) 1.117654615s ago: executing program 2 (id=5087): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x40180, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x5) write$eventfd(r2, &(0x7f0000000100), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) fallocate(r2, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x8, 0x0, 0x2, 0x3ff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r6, 0x10, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) 1.103067715s ago: executing program 9 (id=5088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7ffd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000f80), 0x0}, 0x20) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000a40)=""/4096) 1.093627135s ago: executing program 3 (id=5089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7ffd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000f80), 0x0}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001e00)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 964.950457ms ago: executing program 5 (id=5090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 921.545368ms ago: executing program 8 (id=5091): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2, 0x0, 0x178}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 917.488088ms ago: executing program 5 (id=5092): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (fail_nth: 3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) read(r0, &(0x7f0000000840)=""/40, 0x28) 909.705638ms ago: executing program 2 (id=5093): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x2615) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 588.352902ms ago: executing program 8 (id=5094): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24099, 0x22, 0x3, 0x2b0}, &(0x7f0000000240), &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r6, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000001c0)={0x77359400}, 0x0) 588.001212ms ago: executing program 5 (id=5095): sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000100), 0x4001) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, 0x0, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0xa0028000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)) 567.860372ms ago: executing program 3 (id=5096): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x0, 0x7ffc1ffb}]}) r1 = eventfd2(0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2, 0x3, 0xff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRES8=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f7, &(0x7f00000004c0)="$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") dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) r6 = syz_io_uring_setup(0xc43, &(0x7f0000000880)={0x0, 0x24dd, 0x20, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x200}, 0x0, 0x9, 0x800000, 0x5, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r11, 0x0, 0x9}, 0x18) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0xffa8) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) r12 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x377}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r12, 0xa32, 0x0, 0x47, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 182.988408ms ago: executing program 2 (id=5097): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 2 (id=5098): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$unix(0x1, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) epoll_create1(0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRESOCT=r0], 0x20) kernel console output (not intermixed with test programs): 17b/0x1d0 [ 276.115233][T16802] __x64_sys_sendmsg+0xd4/0x160 [ 276.115253][T16802] x64_sys_call+0x2999/0x2fb0 [ 276.115280][T16802] do_syscall_64+0xd0/0x1a0 [ 276.115307][T16802] ? clear_bhb_loop+0x25/0x80 [ 276.115410][T16802] ? clear_bhb_loop+0x25/0x80 [ 276.115438][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.115471][T16802] RIP: 0033:0x7fe7471be969 [ 276.115491][T16802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.115581][T16802] RSP: 002b:00007fe745827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.115604][T16802] RAX: ffffffffffffffda RBX: 00007fe7473e5fa0 RCX: 00007fe7471be969 [ 276.115620][T16802] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 276.115636][T16802] RBP: 00007fe745827090 R08: 0000000000000000 R09: 0000000000000000 [ 276.115651][T16802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.115711][T16802] R13: 0000000000000000 R14: 00007fe7473e5fa0 R15: 00007ffc87b841c8 [ 276.115732][T16802] [ 276.117187][ T29] audit: type=1400 audit(1746349245.752:8332): avc: denied { create } for pid=16801 comm="syz.2.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.416942][ T29] audit: type=1400 audit(1746349245.812:8333): avc: denied { bind } for pid=16798 comm="syz.9.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.420167][T16800] netlink: '+}[@': attribute type 1 has an invalid length. [ 276.444702][T16800] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 276.469182][T16800] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.472065][ T29] audit: type=1326 audit(1746349246.122:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.6.4507" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78d569e969 code=0x0 [ 276.522731][T16813] loop6: detected capacity change from 0 to 128 [ 276.541707][T16812] loop5: detected capacity change from 0 to 1024 [ 276.680638][T16814] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 276.714009][T16814] SELinux: failed to load policy [ 276.731124][T16812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.769168][T16812] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 276.793880][T16812] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 276.806184][T16812] EXT4-fs (loop5): This should not happen!! Data will be lost [ 276.806184][T16812] [ 276.815849][T16812] EXT4-fs (loop5): Total free blocks count 0 [ 276.821908][T16812] EXT4-fs (loop5): Free/Dirty block details [ 276.827871][T16812] EXT4-fs (loop5): free_blocks=68451041280 [ 276.833684][T16812] EXT4-fs (loop5): dirty_blocks=80 [ 276.838818][T16812] EXT4-fs (loop5): Block reservation details [ 276.844826][T16812] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 276.880438][T16824] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 276.958034][T16826] loop8: detected capacity change from 0 to 128 [ 276.996620][ T29] audit: type=1400 audit(1746349246.642:8335): avc: denied { mount } for pid=16827 comm="syz.2.4510" name="/" dev="configfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 277.019478][ T29] audit: type=1400 audit(1746349246.652:8336): avc: denied { search } for pid=16827 comm="syz.2.4510" name="/" dev="configfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.041737][ T29] audit: type=1400 audit(1746349246.652:8337): avc: denied { read } for pid=16827 comm="syz.2.4510" name="/" dev="configfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.063727][ T29] audit: type=1400 audit(1746349246.652:8338): avc: denied { open } for pid=16827 comm="syz.2.4510" path="/" dev="configfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.085913][ T29] audit: type=1400 audit(1746349246.652:8339): avc: denied { remount } for pid=16825 comm="syz.8.4511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 277.132995][ T29] audit: type=1326 audit(1746349246.772:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.8.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f62ae969 code=0x7ffc0000 [ 277.218329][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4513'. [ 277.334790][T16842] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4515'. [ 277.346649][T16842] netlink: 4360 bytes leftover after parsing attributes in process `syz.8.4515'. [ 277.391211][T16851] FAULT_INJECTION: forcing a failure. [ 277.391211][T16851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 277.403833][T16854] netlink: 'syz.8.4520': attribute type 10 has an invalid length. [ 277.404667][T16851] CPU: 0 UID: 0 PID: 16851 Comm: syz.6.4518 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 277.404704][T16851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 277.404719][T16851] Call Trace: [ 277.404806][T16851] [ 277.404815][T16851] __dump_stack+0x1d/0x30 [ 277.404862][T16851] dump_stack_lvl+0xe8/0x140 [ 277.404885][T16851] dump_stack+0x15/0x1b [ 277.404905][T16851] should_fail_ex+0x265/0x280 [ 277.404970][T16851] should_fail_alloc_page+0xf2/0x100 [ 277.405008][T16851] alloc_pages_bulk_noprof+0xef/0x540 [ 277.405047][T16851] copy_splice_read+0xf3/0x5f0 [ 277.405123][T16851] ? __pfx_copy_splice_read+0x10/0x10 [ 277.405147][T16851] splice_direct_to_actor+0x26c/0x680 [ 277.405174][T16851] ? __pfx_direct_splice_actor+0x10/0x10 [ 277.405207][T16851] do_splice_direct+0xda/0x150 [ 277.405232][T16851] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 277.405264][T16851] do_sendfile+0x380/0x640 [ 277.405305][T16851] __x64_sys_sendfile64+0x105/0x150 [ 277.405399][T16851] x64_sys_call+0xb39/0x2fb0 [ 277.405425][T16851] do_syscall_64+0xd0/0x1a0 [ 277.405450][T16851] ? clear_bhb_loop+0x25/0x80 [ 277.405538][T16851] ? clear_bhb_loop+0x25/0x80 [ 277.405563][T16851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.405594][T16851] RIP: 0033:0x7f78d569e969 [ 277.405612][T16851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.405703][T16851] RSP: 002b:00007f78d3d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 277.405725][T16851] RAX: ffffffffffffffda RBX: 00007f78d58c5fa0 RCX: 00007f78d569e969 [ 277.405783][T16851] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 277.405797][T16851] RBP: 00007f78d3d07090 R08: 0000000000000000 R09: 0000000000000000 [ 277.405811][T16851] R10: 000000000000ee0c R11: 0000000000000246 R12: 0000000000000002 [ 277.405826][T16851] R13: 0000000000000000 R14: 00007f78d58c5fa0 R15: 00007ffea2147658 [ 277.405914][T16851] [ 277.655560][T16863] FAULT_INJECTION: forcing a failure. [ 277.655560][T16863] name failslab, interval 1, probability 0, space 0, times 0 [ 277.668716][T16863] CPU: 0 UID: 0 PID: 16863 Comm: syz.5.4522 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 277.668744][T16863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 277.668756][T16863] Call Trace: [ 277.668762][T16863] [ 277.668770][T16863] __dump_stack+0x1d/0x30 [ 277.668792][T16863] dump_stack_lvl+0xe8/0x140 [ 277.668824][T16863] dump_stack+0x15/0x1b [ 277.668844][T16863] should_fail_ex+0x265/0x280 [ 277.668927][T16863] should_failslab+0x8c/0xb0 [ 277.668955][T16863] kmem_cache_alloc_noprof+0x50/0x310 [ 277.669065][T16863] ? __kernfs_new_node+0x6d/0x350 [ 277.669098][T16863] __kernfs_new_node+0x6d/0x350 [ 277.669128][T16863] ? kernfs_next_descendant_post+0xd3/0x110 [ 277.669192][T16863] ? up_write+0x18/0x60 [ 277.669216][T16863] ? kernfs_activate+0x90/0xa0 [ 277.669310][T16863] kernfs_new_node+0xd0/0x140 [ 277.669363][T16863] kernfs_create_dir_ns+0x44/0xe0 [ 277.669389][T16863] sysfs_create_dir_ns+0xd4/0x1d0 [ 277.669424][T16863] kobject_add_internal+0x464/0x760 [ 277.669453][T16863] kobject_add+0xdb/0x150 [ 277.669477][T16863] ? device_add+0x2e8/0x770 [ 277.669507][T16863] device_add+0x2f6/0x770 [ 277.669570][T16863] wakeup_source_sysfs_add+0x13a/0x1b0 [ 277.669593][T16863] wakeup_source_register+0xfd/0x240 [ 277.669668][T16863] ep_insert+0x7fe/0xd10 [ 277.669706][T16863] do_epoll_ctl+0x6c3/0x870 [ 277.669733][T16863] __x64_sys_epoll_ctl+0xcb/0x100 [ 277.669832][T16863] x64_sys_call+0x26ef/0x2fb0 [ 277.669860][T16863] do_syscall_64+0xd0/0x1a0 [ 277.669880][T16863] ? clear_bhb_loop+0x25/0x80 [ 277.670043][T16863] ? clear_bhb_loop+0x25/0x80 [ 277.670071][T16863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.670172][T16863] RIP: 0033:0x7f31cd40e969 [ 277.670191][T16863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.670211][T16863] RSP: 002b:00007f31cba77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 277.670241][T16863] RAX: ffffffffffffffda RBX: 00007f31cd635fa0 RCX: 00007f31cd40e969 [ 277.670253][T16863] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 277.670265][T16863] RBP: 00007f31cba77090 R08: 0000000000000000 R09: 0000000000000000 [ 277.670276][T16863] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 277.670292][T16863] R13: 0000000000000000 R14: 00007f31cd635fa0 R15: 00007ffcb1abc938 [ 277.670315][T16863] [ 277.670327][T16863] kobject: kobject_add_internal failed for wakeup12 (error: -12 parent: wakeup) [ 278.052996][T16874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4527'. [ 278.072663][T16876] loop5: detected capacity change from 0 to 128 [ 278.091658][ T3370] IPVS: starting estimator thread 0... [ 278.120287][T16869] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.169704][T16883] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 278.181797][T16884] loop6: detected capacity change from 0 to 128 [ 278.188654][T16878] IPVS: using max 2112 ests per chain, 105600 per kthread [ 278.208649][T16883] SELinux: failed to load policy [ 278.230067][T16876] bio_check_eod: 7184 callbacks suppressed [ 278.230080][T16876] syz.5.4525: attempt to access beyond end of device [ 278.230080][T16876] loop5: rw=2049, sector=945, nr_sectors = 8 limit=128 [ 278.260163][T16886] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 278.277118][T16876] syz.5.4525: attempt to access beyond end of device [ 278.277118][T16876] loop5: rw=524288, sector=153, nr_sectors = 8 limit=128 [ 278.305045][T16876] syz.5.4525: attempt to access beyond end of device [ 278.305045][T16876] loop5: rw=524288, sector=169, nr_sectors = 8 limit=128 [ 278.318965][T16886] SELinux: failed to load policy [ 278.325751][T16887] syz.6.4529: attempt to access beyond end of device [ 278.325751][T16887] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 278.341230][T16887] syz.6.4529: attempt to access beyond end of device [ 278.341230][T16887] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 278.354804][T16887] syz.6.4529: attempt to access beyond end of device [ 278.354804][T16887] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 278.370032][T16876] syz.5.4525: attempt to access beyond end of device [ 278.370032][T16876] loop5: rw=524288, sector=185, nr_sectors = 8 limit=128 [ 278.397790][T16876] syz.5.4525: attempt to access beyond end of device [ 278.397790][T16876] loop5: rw=524288, sector=201, nr_sectors = 8 limit=128 [ 278.425415][T16876] syz.5.4525: attempt to access beyond end of device [ 278.425415][T16876] loop5: rw=524288, sector=217, nr_sectors = 8 limit=128 [ 278.454547][T16876] syz.5.4525: attempt to access beyond end of device [ 278.454547][T16876] loop5: rw=524288, sector=233, nr_sectors = 8 limit=128 [ 278.493213][T16892] loop8: detected capacity change from 0 to 2048 [ 278.575650][T16892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.808202][T16447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.821286][T16902] lo speed is unknown, defaulting to 1000 [ 278.827336][T16902] dummy0 speed is unknown, defaulting to 1000 [ 278.941465][T16909] loop8: detected capacity change from 0 to 256 [ 278.974436][T16909] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196) [ 278.982655][T16909] FAT-fs (loop8): Filesystem has been set read-only [ 279.013447][T16909] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196) [ 279.065749][T16913] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4538'. [ 279.256454][T16932] loop9: detected capacity change from 0 to 256 [ 279.289268][T16935] unsupported nlmsg_type 40 [ 279.381498][T16942] loop5: detected capacity change from 0 to 1024 [ 279.455201][T16945] lo speed is unknown, defaulting to 1000 [ 279.468181][T16945] dummy0 speed is unknown, defaulting to 1000 [ 279.550190][T16945] chnl_net:caif_netlink_parms(): no params data found [ 279.599535][T14469] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.634200][T16972] __nla_validate_parse: 3 callbacks suppressed [ 279.634212][T16972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4558'. [ 279.654493][T16945] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.661694][T16945] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.669117][T16972] FAULT_INJECTION: forcing a failure. [ 279.669117][T16972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 279.670903][T16945] bridge_slave_0: entered allmulticast mode [ 279.682438][T16972] CPU: 0 UID: 0 PID: 16972 Comm: syz.2.4558 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 279.682476][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 279.682494][T16972] Call Trace: [ 279.682503][T16972] [ 279.682523][T16972] __dump_stack+0x1d/0x30 [ 279.682551][T16972] dump_stack_lvl+0xe8/0x140 [ 279.682578][T16972] dump_stack+0x15/0x1b [ 279.682607][T16972] should_fail_ex+0x265/0x280 [ 279.682671][T16972] should_fail_alloc_page+0xf2/0x100 [ 279.682707][T16972] __alloc_frozen_pages_noprof+0xff/0x360 [ 279.682738][T16972] alloc_pages_mpol+0xb3/0x250 [ 279.682836][T16972] alloc_pages_noprof+0x90/0x130 [ 279.682864][T16972] get_free_pages_noprof+0xc/0x30 [ 279.682895][T16972] __pollwait+0xc2/0x270 [ 279.682993][T16972] ? __pfx___pollwait+0x10/0x10 [ 279.683022][T16972] ? __pfx_bpf_map_poll+0x10/0x10 [ 279.683048][T16972] ringbuf_map_poll_kern+0x5a/0xd0 [ 279.683084][T16972] ? __pfx_ringbuf_map_poll_kern+0x10/0x10 [ 279.683203][T16972] bpf_map_poll+0x5c/0x80 [ 279.683228][T16972] do_select+0x8ee/0xf40 [ 279.683318][T16972] ? __pfx___pollwait+0x10/0x10 [ 279.683350][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683384][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683419][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683497][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683532][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683566][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683643][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683679][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683769][T16972] ? __pfx_pollwake+0x10/0x10 [ 279.683805][T16972] core_sys_select+0x3b2/0x600 [ 279.683835][T16972] ? _parse_integer+0x27/0x40 [ 279.683888][T16972] ? set_user_sigmask+0x84/0x190 [ 279.683917][T16972] __se_sys_pselect6+0x216/0x280 [ 279.683963][T16972] __x64_sys_pselect6+0x78/0x90 [ 279.683997][T16972] x64_sys_call+0x1caa/0x2fb0 [ 279.684078][T16972] do_syscall_64+0xd0/0x1a0 [ 279.684106][T16972] ? clear_bhb_loop+0x25/0x80 [ 279.684140][T16972] ? clear_bhb_loop+0x25/0x80 [ 279.684169][T16972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.684232][T16972] RIP: 0033:0x7fe7471be969 [ 279.684251][T16972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.684308][T16972] RSP: 002b:00007fe745827038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 279.684362][T16972] RAX: ffffffffffffffda RBX: 00007fe7473e5fa0 RCX: 00007fe7471be969 [ 279.684378][T16972] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 279.684471][T16972] RBP: 00007fe745827090 R08: 0000000000000000 R09: 0000000000000000 [ 279.684487][T16972] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 279.684503][T16972] R13: 0000000000000000 R14: 00007fe7473e5fa0 R15: 00007ffc87b841c8 [ 279.684527][T16972] [ 279.969663][T16945] bridge_slave_0: entered promiscuous mode [ 279.979229][T14469] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.990295][T16447] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 196) [ 280.004445][T16945] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.011632][T16945] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.018832][T16945] bridge_slave_1: entered allmulticast mode [ 280.025397][T16945] bridge_slave_1: entered promiscuous mode [ 280.044744][T14469] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.057290][T16945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.068021][T16945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.093814][T16945] team0: Port device team_slave_0 added [ 280.100527][T16945] team0: Port device team_slave_1 added [ 280.119118][T14469] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.147982][T16945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.155078][T16945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.184349][T16945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.199972][T16945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.206980][T16945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.233136][T16945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.308459][T14469] bridge_slave_1: left allmulticast mode [ 280.314407][T14469] bridge_slave_1: left promiscuous mode [ 280.320174][T14469] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.332848][T16994] loop9: detected capacity change from 0 to 1024 [ 280.340417][T16994] EXT4-fs: Ignoring removed i_version option [ 280.346689][T16994] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.353261][T16994] EXT4-fs: Ignoring removed nobh option [ 280.358995][T16994] EXT4-fs: Ignoring removed bh option [ 280.381455][T14469] bridge_slave_0: left promiscuous mode [ 280.387212][T14469] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.397593][T16994] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.413532][T16994] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.4568: Allocating blocks 385-513 which overlap fs metadata [ 280.430456][T16994] EXT4-fs (loop9): pa ffff8881065c3620: logic 16, phys. 129, len 24 [ 280.438481][T16994] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 280.459862][T16994] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 280.472122][T16994] EXT4-fs (loop9): This should not happen!! Data will be lost [ 280.472122][T16994] [ 280.481952][T16994] EXT4-fs (loop9): Total free blocks count 0 [ 280.487964][T16994] EXT4-fs (loop9): Free/Dirty block details [ 280.493974][T16994] EXT4-fs (loop9): free_blocks=128 [ 280.499143][T16994] EXT4-fs (loop9): dirty_blocks=0 [ 280.504181][T16994] EXT4-fs (loop9): Block reservation details [ 280.510241][T16994] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 280.560597][T17008] loop5: detected capacity change from 0 to 128 [ 280.581239][T14469] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.591370][T14469] bond_slave_0: left promiscuous mode [ 280.598224][T14469] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.614845][T14469] bond_slave_1: left promiscuous mode [ 280.621279][T14469] $Hÿ (unregistering): Released all slaves [ 280.635084][T16945] hsr_slave_0: entered promiscuous mode [ 280.641368][T16945] hsr_slave_1: entered promiscuous mode [ 280.647478][T16945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.656000][T17008] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 280.656727][T16945] Cannot create hsr debugfs directory [ 280.665995][T17008] SELinux: failed to load policy [ 280.700170][T14469] hsr_slave_0: left promiscuous mode [ 280.713732][T14469] hsr_slave_1: left promiscuous mode [ 280.728999][T14469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.736560][T14469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.744070][T14469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.751608][T14469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.764045][T14469] veth1_macvtap: left promiscuous mode [ 280.878697][T14469] veth0_macvtap: left promiscuous mode [ 280.886595][T14469] veth1_vlan: left promiscuous mode [ 280.896626][T14469] veth0_vlan: left promiscuous mode [ 281.041640][T14469] team0 (unregistering): Port device team_slave_1 removed [ 281.057351][T14469] team0 (unregistering): Port device team_slave_0 removed [ 281.164517][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 281.164533][ T29] audit: type=1400 audit(1746349250.822:8456): avc: denied { name_bind } for pid=17017 comm="syz.8.4574" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 281.193074][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4574'. [ 281.250792][T16945] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.266473][ T29] audit: type=1400 audit(1746349250.922:8457): avc: denied { setopt } for pid=17017 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 281.295898][ T29] audit: type=1400 audit(1746349250.952:8458): avc: denied { write } for pid=17025 comm="syz.2.4576" path="" dev="sockfs" ino=56278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 281.340089][T16945] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.407603][T17028] netlink: 'syz.2.4577': attribute type 29 has an invalid length. [ 281.416126][T17028] netlink: 'syz.2.4577': attribute type 29 has an invalid length. [ 281.424641][T17028] netlink: 604 bytes leftover after parsing attributes in process `syz.2.4577'. [ 281.435331][T16945] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.492487][ T29] audit: type=1326 audit(1746349251.152:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 281.521637][T16945] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.524071][ T29] audit: type=1326 audit(1746349251.182:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 281.555069][ T29] audit: type=1326 audit(1746349251.182:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 281.578810][ T29] audit: type=1326 audit(1746349251.182:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 281.602185][ T29] audit: type=1326 audit(1746349251.182:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 281.626036][ T29] audit: type=1326 audit(1746349251.182:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 281.649542][ T29] audit: type=1326 audit(1746349251.182:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 281.688938][T17043] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4584'. [ 281.724297][T16945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.733132][T16945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.744452][T16945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.754119][T16945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.794165][T16945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.806510][T16945] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.817802][T14464] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.824925][T14464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.843448][T16945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.853846][T16945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.867294][T14464] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.874407][T14464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.930905][T16945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.007987][T16945] veth0_vlan: entered promiscuous mode [ 282.023926][T16945] veth1_vlan: entered promiscuous mode [ 282.059601][T16945] veth0_macvtap: entered promiscuous mode [ 282.072088][T17059] veth1_to_bond: entered allmulticast mode [ 282.080073][T17059] netlink: 'syz.8.4586': attribute type 2 has an invalid length. [ 282.088002][T17058] veth1_to_bond: left allmulticast mode [ 282.111670][T16945] veth1_macvtap: entered promiscuous mode [ 282.133129][T16945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.143739][T16945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.153627][T16945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.164166][T16945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.185111][T16945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.198548][T16945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.209134][T16945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.219018][T16945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.229590][T16945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.239393][T16945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.249882][T16945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.260005][T16945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.270622][T16945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.283440][T16945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.290504][T17065] 9pnet_fd: Insufficient options for proto=fd [ 282.294243][T16945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.305546][T16945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.314390][T16945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.323095][T16945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.374830][T17070] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4590'. [ 282.406377][T17075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4550'. [ 282.465675][T17081] vlan0: entered allmulticast mode [ 282.505414][T17088] loop1: detected capacity change from 0 to 512 [ 282.534048][T17088] EXT4-fs: Ignoring removed nobh option [ 282.579636][T17088] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #4: comm syz.1.4595: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 771, max 4(4), depth 0(0) [ 282.630099][T17088] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.4595: Bad quota inode: 4, type: 1 [ 282.641506][T17088] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.658556][T17094] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 282.709061][T17088] EXT4-fs (loop1): mount failed [ 282.751876][T17088] loop1: detected capacity change from 0 to 512 [ 282.758941][T17088] EXT4-fs: test_dummy_encryption option not supported [ 282.805458][T17103] loop9: detected capacity change from 0 to 128 [ 282.932257][T17112] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 282.968683][T17112] SELinux: failed to load policy [ 283.257159][T17103] bio_check_eod: 40709 callbacks suppressed [ 283.257192][T17103] syz.9.4598: attempt to access beyond end of device [ 283.257192][T17103] loop9: rw=0, sector=185, nr_sectors = 8 limit=128 [ 283.295495][T17103] syz.9.4598: attempt to access beyond end of device [ 283.295495][T17103] loop9: rw=0, sector=185, nr_sectors = 8 limit=128 [ 283.356611][T17103] syz.9.4598: attempt to access beyond end of device [ 283.356611][T17103] loop9: rw=0, sector=185, nr_sectors = 8 limit=128 [ 283.415600][T17103] syz.9.4598: attempt to access beyond end of device [ 283.415600][T17103] loop9: rw=0, sector=185, nr_sectors = 8 limit=128 [ 283.465468][T17103] syz.9.4598: attempt to access beyond end of device [ 283.465468][T17103] loop9: rw=0, sector=185, nr_sectors = 8 limit=128 [ 283.477862][T17117] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4604'. [ 283.511353][T17103] syz.9.4598: attempt to access beyond end of device [ 283.511353][T17103] loop9: rw=0, sector=185, nr_sectors = 8 limit=128 [ 283.555539][T17103] syz.9.4598: attempt to access beyond end of device [ 283.555539][T17103] loop9: rw=0, sector=185, nr_sectors = 8 limit=128 [ 283.621069][T17120] loop9: detected capacity change from 0 to 2048 [ 283.649687][T17120] Alternate GPT is invalid, using primary GPT. [ 283.656002][T17120] loop9: p1 p2 p3 [ 283.694292][T17122] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 283.700856][T17122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.708348][T17122] vhci_hcd vhci_hcd.0: Device attached [ 283.731502][T17128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4607'. [ 283.755688][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4606'. [ 283.764770][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4606'. [ 283.804473][T17123] vhci_hcd: connection closed [ 283.804820][T14468] vhci_hcd: stop threads [ 283.814083][T14468] vhci_hcd: release socket [ 283.818567][T14468] vhci_hcd: disconnect device [ 283.932777][T17139] vlan2: entered allmulticast mode [ 283.976116][T17141] netlink: 'syz.9.4611': attribute type 21 has an invalid length. [ 284.258331][T17148] netlink: 'syz.8.4615': attribute type 29 has an invalid length. [ 284.267425][T17148] netlink: 'syz.8.4615': attribute type 29 has an invalid length. [ 284.605651][T17165] IPv6: Can't replace route, no match found [ 284.675696][T17171] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 284.748466][T17173] vlan2: entered allmulticast mode [ 284.950885][T17181] loop8: detected capacity change from 0 to 128 [ 285.059801][T17181] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 285.069661][T17181] SELinux: failed to load policy [ 285.080915][T17181] syz.8.4627: attempt to access beyond end of device [ 285.080915][T17181] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 285.094555][T17181] syz.8.4627: attempt to access beyond end of device [ 285.094555][T17181] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 285.110053][T17181] syz.8.4627: attempt to access beyond end of device [ 285.110053][T17181] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 285.196156][T17185] 9pnet_fd: Insufficient options for proto=fd [ 285.257653][T17189] __nla_validate_parse: 2 callbacks suppressed [ 285.257670][T17189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4630'. [ 285.336408][T17193] tmpfs: Bad value for 'mpol' [ 285.698520][T17202] loop9: detected capacity change from 0 to 128 [ 285.729009][T17202] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.773466][T17202] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.792001][T17204] vhci_hcd: invalid port number 96 [ 285.797284][T17204] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 285.875916][T14467] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.203422][T17218] lo speed is unknown, defaulting to 1000 [ 286.209729][T17218] dummy0 speed is unknown, defaulting to 1000 [ 286.455375][T17223] 9pnet_fd: Insufficient options for proto=fd [ 286.557441][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 286.557478][ T29] audit: type=1400 audit(1746349256.212:8706): avc: denied { create } for pid=17231 comm="syz.1.4645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.591225][T17232] loop1: detected capacity change from 0 to 512 [ 286.591694][ T29] audit: type=1326 audit(1746349256.242:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17227 comm="syz.8.4643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6f62ae969 code=0x0 [ 286.620501][ T29] audit: type=1400 audit(1746349256.242:8708): avc: denied { write } for pid=17231 comm="syz.1.4645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.646077][T17235] loop8: detected capacity change from 0 to 128 [ 287.561788][T17242] siw: device registration error -23 [ 287.620337][T17232] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 287.630833][T17232] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 287.640823][T17232] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4645: Failed to acquire dquot type 1 [ 287.682649][T17232] EXT4-fs (loop1): 1 truncate cleaned up [ 287.688786][T17232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.758870][T17235] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 287.778688][T17232] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.816130][T17235] SELinux: failed to load policy [ 287.826801][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4649'. [ 287.835855][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4649'. [ 287.871422][T16945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.901471][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4649'. [ 287.910610][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4649'. [ 287.937203][T17255] 9pnet_fd: Insufficient options for proto=fd [ 287.999212][T17261] FAULT_INJECTION: forcing a failure. [ 287.999212][T17261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.012567][T17261] CPU: 1 UID: 0 PID: 17261 Comm: syz.2.4654 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 288.012600][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 288.012613][T17261] Call Trace: [ 288.012621][T17261] [ 288.012631][T17261] __dump_stack+0x1d/0x30 [ 288.012685][T17261] dump_stack_lvl+0xe8/0x140 [ 288.012737][T17261] dump_stack+0x15/0x1b [ 288.012753][T17261] should_fail_ex+0x265/0x280 [ 288.012782][T17261] should_fail_alloc_page+0xf2/0x100 [ 288.012844][T17261] __alloc_frozen_pages_noprof+0xff/0x360 [ 288.012890][T17261] alloc_pages_mpol+0xb3/0x250 [ 288.012912][T17261] vma_alloc_folio_noprof+0x1aa/0x300 [ 288.012937][T17261] handle_mm_fault+0x1056/0x2ae0 [ 288.013068][T17261] ? mas_walk+0xf2/0x120 [ 288.013093][T17261] do_user_addr_fault+0x636/0x1090 [ 288.013125][T17261] exc_page_fault+0x54/0xc0 [ 288.013180][T17261] asm_exc_page_fault+0x26/0x30 [ 288.013198][T17261] RIP: 0033:0x7fe74716bf6b [ 288.013212][T17261] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 288.013230][T17261] RSP: 002b:00007fe745824e10 EFLAGS: 00010246 [ 288.013246][T17261] RAX: 00007fe745826f30 RBX: 00007fe7473b3620 RCX: 0000000000000000 [ 288.013307][T17261] RDX: 00007fe745826f78 RSI: 00007fe74721dbf8 RDI: 00007fe745824e30 [ 288.013319][T17261] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 288.013331][T17261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.013342][T17261] R13: 0000000000000000 R14: 00007fe7473e5fa0 R15: 00007ffc87b841c8 [ 288.013361][T17261] [ 288.013372][T17261] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 288.072604][T17263] smc: net device bond0 applied user defined pnetid SYZ0 [ 288.178885][T17257] lo speed is unknown, defaulting to 1000 [ 288.202317][T17257] dummy0 speed is unknown, defaulting to 1000 [ 288.218560][T17266] loop1: detected capacity change from 0 to 2048 [ 288.235793][T17269] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4655'. [ 288.291435][T17271] vlan2: entered allmulticast mode [ 288.298996][T17266] loop1: p1 < > p4 [ 288.304038][T17266] loop1: p4 size 8388608 extends beyond EOD, truncated [ 288.333808][T17262] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4651'. [ 288.354924][ T29] audit: type=1326 audit(1746349258.012:8709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17256 comm="syz.1.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3205e969 code=0x7ffc0000 [ 288.380092][ T29] audit: type=1326 audit(1746349258.042:8710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17256 comm="syz.1.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e3205d2d0 code=0x7ffc0000 [ 288.403748][ T29] audit: type=1326 audit(1746349258.042:8711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17256 comm="syz.1.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0e32060197 code=0x7ffc0000 [ 288.427311][ T29] audit: type=1326 audit(1746349258.042:8712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17256 comm="syz.1.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e3205e969 code=0x7ffc0000 [ 288.450748][ T29] audit: type=1326 audit(1746349258.042:8713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17256 comm="syz.1.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0e32060197 code=0x7ffc0000 [ 288.555114][T17278] loop9: detected capacity change from 0 to 256 [ 288.627050][T17280] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 289.255132][T17294] loop1: detected capacity change from 0 to 2048 [ 289.261868][T17294] EXT4-fs: Ignoring removed bh option [ 289.267444][T17294] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.274252][T17294] EXT4-fs: Ignoring removed nobh option [ 289.300557][T17294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.313881][T17294] EXT4-fs error (device loop1): ext4_read_inline_dir:1501: inode #12: block 5: comm syz.1.4663: path /16/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 289.335795][T17302] loop8: detected capacity change from 0 to 128 [ 289.355355][T16945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor: bg 0: block 2: invalid block bitmap [ 289.369948][T16945] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 289.379508][T16945] EXT4-fs error (device loop1): ext4_read_inline_dir:1501: inode #12: block 5: comm syz-executor: path /16/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 289.404058][T16945] EXT4-fs error (device loop1): ext4_read_inline_dir:1501: inode #12: block 5: comm syz-executor: path /16/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 289.427107][T16945] EXT4-fs error (device loop1): empty_inline_dir:1785: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 289.457685][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 289.473915][T16945] EXT4-fs error (device loop1): ext4_read_inline_dir:1501: inode #12: block 5: comm syz-executor: path /16/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 289.539258][T17309] vlan0: entered allmulticast mode [ 289.551495][T17311] FAULT_INJECTION: forcing a failure. [ 289.551495][T17311] name failslab, interval 1, probability 0, space 0, times 0 [ 289.564207][T17311] CPU: 1 UID: 0 PID: 17311 Comm: syz.9.4669 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 289.564233][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 289.564290][T17311] Call Trace: [ 289.564296][T17311] [ 289.564304][T17311] __dump_stack+0x1d/0x30 [ 289.564327][T17311] dump_stack_lvl+0xe8/0x140 [ 289.564345][T17311] dump_stack+0x15/0x1b [ 289.564362][T17311] should_fail_ex+0x265/0x280 [ 289.564400][T17311] ? sctp_add_bind_addr+0x71/0x1e0 [ 289.564428][T17311] should_failslab+0x8c/0xb0 [ 289.564462][T17311] __kmalloc_cache_noprof+0x4c/0x320 [ 289.564485][T17311] sctp_add_bind_addr+0x71/0x1e0 [ 289.564506][T17311] sctp_copy_local_addr_list+0x199/0x220 [ 289.564578][T17311] sctp_copy_one_addr+0x7f/0x280 [ 289.564599][T17311] sctp_bind_addr_copy+0x79/0x290 [ 289.564628][T17311] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 289.564688][T17311] sctp_connect_new_asoc+0x1c3/0x3a0 [ 289.564797][T17311] sctp_sendmsg+0xf10/0x18d0 [ 289.564832][T17311] ? selinux_socket_sendmsg+0xe1/0x1b0 [ 289.564861][T17311] ? __pfx_sctp_sendmsg+0x10/0x10 [ 289.564886][T17311] inet_sendmsg+0xc2/0xd0 [ 289.564962][T17311] __sock_sendmsg+0x102/0x180 [ 289.564985][T17311] __sys_sendto+0x268/0x330 [ 289.565016][T17311] __x64_sys_sendto+0x76/0x90 [ 289.565049][T17311] x64_sys_call+0x2eb6/0x2fb0 [ 289.565106][T17311] do_syscall_64+0xd0/0x1a0 [ 289.565130][T17311] ? clear_bhb_loop+0x25/0x80 [ 289.565241][T17311] ? clear_bhb_loop+0x25/0x80 [ 289.565268][T17311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.565298][T17311] RIP: 0033:0x7f18a9a6e969 [ 289.565316][T17311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.565335][T17311] RSP: 002b:00007f18a80d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 289.565353][T17311] RAX: ffffffffffffffda RBX: 00007f18a9c95fa0 RCX: 00007f18a9a6e969 [ 289.565407][T17311] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 289.565420][T17311] RBP: 00007f18a80d7090 R08: 0000200000000100 R09: 000000000000001c [ 289.565432][T17311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.565443][T17311] R13: 0000000000000000 R14: 00007f18a9c95fa0 R15: 00007ffd4651bad8 [ 289.565462][T17311] [ 289.566032][T16945] EXT4-fs error (device loop1): ext4_read_inline_dir:1501: inode #12: block 5: comm syz-executor: path /16/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 289.621201][T17314] loop5: detected capacity change from 0 to 128 [ 289.625928][T16945] EXT4-fs error (device loop1): empty_inline_dir:1785: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 289.730204][T17315] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 289.855540][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 289.877220][T16945] EXT4-fs error (device loop1): ext4_read_inline_dir:1501: inode #12: block 5: comm syz-executor: path /16/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 289.899030][T17322] loop9: detected capacity change from 0 to 2048 [ 289.900751][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 289.921044][T17314] bio_check_eod: 14253 callbacks suppressed [ 289.921059][T17314] syz.5.4671: attempt to access beyond end of device [ 289.921059][T17314] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 289.921603][T17315] SELinux: failed to load policy [ 289.927006][T17314] syz.5.4671: attempt to access beyond end of device [ 289.927006][T17314] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 289.947628][T17302] SELinux: policydb magic number 0xa202123 does not match expected magic number 0xf97cff8c [ 289.962656][T17314] syz.5.4671: attempt to access beyond end of device [ 289.962656][T17314] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 289.971020][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 289.996604][T17314] syz.5.4671: attempt to access beyond end of device [ 289.996604][T17314] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 289.996968][T17307] syz.8.4665: attempt to access beyond end of device [ 289.996968][T17307] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 290.024355][T17302] SELinux: failed to load policy [ 290.029420][T17307] syz.8.4665: attempt to access beyond end of device [ 290.029420][T17307] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 290.043137][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 290.060075][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 290.075549][T17307] syz.8.4665: attempt to access beyond end of device [ 290.075549][T17307] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 290.089791][T17307] syz.8.4665: attempt to access beyond end of device [ 290.089791][T17307] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 290.103761][T17307] syz.8.4665: attempt to access beyond end of device [ 290.103761][T17307] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 290.111324][T17314] syz.5.4671: attempt to access beyond end of device [ 290.111324][T17314] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 290.123851][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4674'. [ 290.139697][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 290.159212][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 290.204309][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 290.231614][T16945] EXT4-fs warning (device loop1): empty_inline_dir:1792: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 290.513505][T17304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.562330][T17333] FAULT_INJECTION: forcing a failure. [ 290.562330][T17333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.575727][T17333] CPU: 0 UID: 0 PID: 17333 Comm: syz.8.4676 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 290.575756][T17333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 290.575770][T17333] Call Trace: [ 290.575775][T17333] [ 290.575800][T17333] __dump_stack+0x1d/0x30 [ 290.575859][T17333] dump_stack_lvl+0xe8/0x140 [ 290.575877][T17333] dump_stack+0x15/0x1b [ 290.575893][T17333] should_fail_ex+0x265/0x280 [ 290.575926][T17333] should_fail_alloc_page+0xf2/0x100 [ 290.575961][T17333] __alloc_frozen_pages_noprof+0xff/0x360 [ 290.576071][T17333] alloc_pages_mpol+0xb3/0x250 [ 290.576093][T17333] vma_alloc_folio_noprof+0x1aa/0x300 [ 290.576121][T17333] handle_mm_fault+0x1056/0x2ae0 [ 290.576291][T17333] ? mas_walk+0xf2/0x120 [ 290.576315][T17333] do_user_addr_fault+0x636/0x1090 [ 290.576350][T17333] ? fpregs_assert_state_consistent+0x84/0xa0 [ 290.576384][T17333] exc_page_fault+0x54/0xc0 [ 290.576442][T17333] asm_exc_page_fault+0x26/0x30 [ 290.576460][T17333] RIP: 0033:0x7fe6f6170cc3 [ 290.576475][T17333] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 290.576492][T17333] RSP: 002b:00007fe6f48f54a0 EFLAGS: 00010206 [ 290.576506][T17333] RAX: 0000000000002000 RBX: 00007fe6f48f5540 RCX: 00007fe6ec4d6000 [ 290.576526][T17333] RDX: 00007fe6f48f56e0 RSI: 0000000000000000 RDI: 00007fe6f48f55e0 [ 290.576540][T17333] RBP: 00000000000000b3 R08: 0000000000000006 R09: 0000000000000022 [ 290.576554][T17333] R10: 0000000000000024 R11: 00007fe6f48f5540 R12: 0000000000000001 [ 290.576568][T17333] R13: 00007fe6f634bfc0 R14: 00000000000000ff R15: 00007fe6f48f55e0 [ 290.576590][T17333] [ 290.576672][T17333] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 290.757344][T17333] loop8: detected capacity change from 0 to 512 [ 290.757797][T14467] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.776751][T17333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.794316][T17333] EXT4-fs (loop8): orphan cleanup on readonly fs [ 290.801266][T17333] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4676: Failed to acquire dquot type 1 [ 290.813749][T17333] EXT4-fs (loop8): 1 truncate cleaned up [ 290.814327][T17333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.852585][T14467] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.865672][T17345] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4680'. [ 290.878337][T17339] netlink: 'syz.5.4679': attribute type 1 has an invalid length. [ 290.922394][T14467] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.044285][T17334] lo speed is unknown, defaulting to 1000 [ 291.053321][T17334] dummy0 speed is unknown, defaulting to 1000 [ 291.082409][T14467] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.426117][T16447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.517565][T17361] vlan0: entered allmulticast mode [ 291.578093][T17334] chnl_net:caif_netlink_parms(): no params data found [ 291.596700][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4686'. [ 291.633411][T14467] bridge_slave_1: left allmulticast mode [ 291.639226][T14467] bridge_slave_1: left promiscuous mode [ 291.645011][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.660305][T14467] bridge_slave_0: left allmulticast mode [ 291.665990][T14467] bridge_slave_0: left promiscuous mode [ 291.671762][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.760787][T14467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.770631][T14467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.780565][T14467] bond0 (unregistering): Released all slaves [ 291.825629][T17334] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.832745][T17334] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.843064][T17334] bridge_slave_0: entered allmulticast mode [ 291.849970][T17334] bridge_slave_0: entered promiscuous mode [ 291.855588][T17381] loop9: detected capacity change from 0 to 1024 [ 291.873715][T17334] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.880816][T17334] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.890765][T17334] bridge_slave_1: entered allmulticast mode [ 291.897273][T17334] bridge_slave_1: entered promiscuous mode [ 291.908655][T17381] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.930284][T14467] hsr_slave_0: left promiscuous mode [ 291.930684][T14467] hsr_slave_1: left promiscuous mode [ 291.931031][T14467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.931114][T14467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.931727][T14467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.931749][T14467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.951730][T14467] veth1_macvtap: left promiscuous mode [ 291.982741][T17391] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4691'. [ 291.992530][T14467] veth0_macvtap: left promiscuous mode [ 291.998037][T14467] veth1_vlan: left promiscuous mode [ 292.008782][T14467] veth0_vlan: left promiscuous mode [ 292.097858][T14467] team0 (unregistering): Port device team_slave_1 removed [ 292.116175][T14467] team0 (unregistering): Port device team_slave_0 removed [ 292.157026][T17334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.171170][T17334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.197146][T17334] team0: Port device team_slave_0 added [ 292.203807][T17334] team0: Port device team_slave_1 added [ 292.221458][T17334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.228473][T17334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.254506][T17334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.279586][T17334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.286575][T17334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.312534][T17334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.348310][T17334] hsr_slave_0: entered promiscuous mode [ 292.359055][T17334] hsr_slave_1: entered promiscuous mode [ 292.365735][T17334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.373470][T17334] Cannot create hsr debugfs directory [ 292.392942][T13244] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.425711][T17410] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 292.554362][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 292.554375][ T29] audit: type=1326 audit(1746349262.202:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17421 comm="syz.5.4702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31cd40e969 code=0x0 [ 292.599194][T17423] loop5: detected capacity change from 0 to 128 [ 292.707603][ T29] audit: type=1326 audit(1746349262.352:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.9.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a9a6e969 code=0x7fc00000 [ 292.742484][T17433] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 292.753888][T17433] SELinux: failed to load policy [ 292.779522][T17434] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 292.795453][T17334] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.816655][T17334] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.840757][T17334] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.862369][T17334] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.878114][ T29] audit: type=1326 audit(1746349262.532:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.2.4708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7471be969 code=0x0 [ 292.942274][T17334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.953624][T17444] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 292.980571][T17449] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 292.991704][T17449] SELinux: failed to load policy [ 292.997937][T17334] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.014797][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.021933][T14466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.042506][T17454] netlink: 'syz.9.4713': attribute type 3 has an invalid length. [ 293.116084][T17457] loop8: detected capacity change from 0 to 256 [ 293.158446][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.165553][T14467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.257239][T17334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.352436][T17334] veth0_vlan: entered promiscuous mode [ 293.364892][T17334] veth1_vlan: entered promiscuous mode [ 293.385007][T17334] veth0_macvtap: entered promiscuous mode [ 293.393098][T17334] veth1_macvtap: entered promiscuous mode [ 293.406275][T17334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.416841][T17334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.426714][T17334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.437195][T17334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.452642][T17334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.479669][T17334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.490248][T17334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.500194][T17334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.510642][T17334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.520500][T17334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.530963][T17334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.540928][T17334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.551399][T17334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.566244][T17334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.579767][T17334] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.588696][T17334] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.597479][T17334] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.606275][T17334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.652788][T17470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.663055][T17470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.717934][T17475] netlink: 'syz.3.4715': attribute type 39 has an invalid length. [ 293.784512][T17477] netlink: 'syz.2.4716': attribute type 39 has an invalid length. [ 293.890388][ T29] audit: type=1400 audit(1746349263.552:8940): avc: denied { append } for pid=17484 comm="syz.9.4719" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 293.892050][T17485] program syz.9.4719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.000990][ T29] audit: type=1400 audit(1746349263.662:8941): avc: denied { wake_alarm } for pid=17494 comm="syz.8.4724" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 294.023969][ T29] audit: type=1400 audit(1746349263.682:8942): avc: denied { ioctl } for pid=17488 comm="syz.9.4721" path="socket:[58263]" dev="sockfs" ino=58263 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.056282][T17498] ipvlan2: entered promiscuous mode [ 294.063288][T17498] bridge0: port 3(ipvlan2) entered blocking state [ 294.069807][T17498] bridge0: port 3(ipvlan2) entered disabled state [ 294.077858][T17498] ipvlan2: entered allmulticast mode [ 294.083332][T17498] bridge0: entered allmulticast mode [ 294.089622][T17498] ipvlan2: left allmulticast mode [ 294.094735][T17498] bridge0: left allmulticast mode [ 294.110275][T17502] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4726'. [ 294.284445][T17510] loop9: detected capacity change from 0 to 128 [ 294.328712][ T29] audit: type=1326 audit(1746349263.982:8943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17514 comm="syz.9.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a9a6e969 code=0x7ffc0000 [ 294.330187][T17515] pim6reg1: entered promiscuous mode [ 294.352263][ T29] audit: type=1326 audit(1746349263.982:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17514 comm="syz.9.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a9a6e969 code=0x7ffc0000 [ 294.357550][T17515] pim6reg1: entered allmulticast mode [ 294.386633][ T29] audit: type=1326 audit(1746349263.982:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17514 comm="syz.9.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f18a9a6e969 code=0x7ffc0000 [ 294.410228][ T29] audit: type=1326 audit(1746349263.982:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17514 comm="syz.9.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a9a6e969 code=0x7ffc0000 [ 294.435105][T17508] FAULT_INJECTION: forcing a failure. [ 294.435105][T17508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.448235][T17508] CPU: 1 UID: 0 PID: 17508 Comm: syz.5.4729 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 294.448320][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 294.448331][T17508] Call Trace: [ 294.448367][T17508] [ 294.448372][T17508] __dump_stack+0x1d/0x30 [ 294.448395][T17508] dump_stack_lvl+0xe8/0x140 [ 294.448415][T17508] dump_stack+0x15/0x1b [ 294.448499][T17508] should_fail_ex+0x265/0x280 [ 294.448525][T17508] should_fail+0xb/0x20 [ 294.448552][T17508] should_fail_usercopy+0x1a/0x20 [ 294.448570][T17508] _copy_from_user+0x1c/0xb0 [ 294.448620][T17508] __se_sys_io_uring_setup+0x11f/0x210 [ 294.448697][T17508] __x64_sys_io_uring_setup+0x31/0x40 [ 294.448726][T17508] x64_sys_call+0x184b/0x2fb0 [ 294.448746][T17508] do_syscall_64+0xd0/0x1a0 [ 294.448768][T17508] ? clear_bhb_loop+0x25/0x80 [ 294.448791][T17508] ? clear_bhb_loop+0x25/0x80 [ 294.448891][T17508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.448911][T17508] RIP: 0033:0x7f31cd40e969 [ 294.448923][T17508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.448938][T17508] RSP: 002b:00007f31cba77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 294.448999][T17508] RAX: ffffffffffffffda RBX: 00007f31cd635fa0 RCX: 00007f31cd40e969 [ 294.449013][T17508] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 00000000000079d6 [ 294.449026][T17508] RBP: 00007f31cba77090 R08: 0000000000000000 R09: 0000000000000000 [ 294.449039][T17508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.449052][T17508] R13: 0000000000000000 R14: 00007f31cd635fa0 R15: 00007ffcb1abc938 [ 294.449071][T17508] [ 294.627181][T17519] loop8: detected capacity change from 0 to 256 [ 294.737907][T17525] program syz.2.4736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.741057][T17527] loop5: detected capacity change from 0 to 512 [ 294.754093][T17527] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 294.924556][T17527] loop5: detected capacity change from 0 to 164 [ 294.979044][T17541] loop9: detected capacity change from 0 to 512 [ 294.986210][T17541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.007396][T17541] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.021320][T17547] netlink: 'syz.5.4743': attribute type 2 has an invalid length. [ 295.024851][T17541] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.030001][T17547] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4743'. [ 295.045917][ T3448] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 295.060519][T17548] netlink: 'syz.2.4744': attribute type 1 has an invalid length. [ 295.086789][T13244] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.139899][T17554] loop5: detected capacity change from 0 to 128 [ 295.262661][T17554] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 295.281943][T17554] SELinux: failed to load policy [ 295.304336][T17554] bio_check_eod: 6713 callbacks suppressed [ 295.304351][T17554] syz.5.4745: attempt to access beyond end of device [ 295.304351][T17554] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 295.324304][T17554] syz.5.4745: attempt to access beyond end of device [ 295.324304][T17554] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 295.338273][T17554] syz.5.4745: attempt to access beyond end of device [ 295.338273][T17554] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 295.352353][T17554] syz.5.4745: attempt to access beyond end of device [ 295.352353][T17554] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 295.367926][T17554] syz.5.4745: attempt to access beyond end of device [ 295.367926][T17554] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 295.391602][T17554] syz.5.4745: attempt to access beyond end of device [ 295.391602][T17554] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 295.434312][T17554] syz.5.4745: attempt to access beyond end of device [ 295.434312][T17554] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 295.463945][T17554] syz.5.4745: attempt to access beyond end of device [ 295.463945][T17554] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 295.479049][T17554] syz.5.4745: attempt to access beyond end of device [ 295.479049][T17554] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 295.493245][T17554] syz.5.4745: attempt to access beyond end of device [ 295.493245][T17554] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 295.587701][T17579] SELinux: failed to load policy [ 295.940266][T17585] smc: net device bond0 erased user defined pnetid SYZ0 [ 295.966215][T17589] netlink: 'syz.2.4758': attribute type 29 has an invalid length. [ 295.974951][T17589] netlink: 'syz.2.4758': attribute type 29 has an invalid length. [ 295.983213][T17589] netlink: 492 bytes leftover after parsing attributes in process `syz.2.4758'. [ 296.015853][T17590] loop5: detected capacity change from 0 to 256 [ 296.164081][T17601] netlink: 'syz.3.4762': attribute type 39 has an invalid length. [ 296.190882][T17605] smc: net device bond0 applied user defined pnetid SYZ2 [ 296.198453][T17605] smc: net device bond0 erased user defined pnetid SYZ2 [ 296.387845][T17614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.396476][T17614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.432887][T17614] netlink: '+}[@': attribute type 1 has an invalid length. [ 296.440191][T17614] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 296.457408][T17614] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 296.972222][T17625] loop5: detected capacity change from 0 to 128 [ 297.203733][T17635] netlink: 'syz.9.4773': attribute type 39 has an invalid length. [ 297.458309][T17650] loop9: detected capacity change from 0 to 512 [ 297.518348][T17652] siw: device registration error -23 [ 297.703613][T17654] netlink: 'syz.3.4781': attribute type 10 has an invalid length. [ 297.727359][T17654] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.734541][T17654] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.796869][T17654] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.804034][T17654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.811331][T17654] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.818362][T17654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.846512][T17654] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 297.858874][T14465] ------------[ cut here ]------------ [ 297.864354][T14465] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 297.872625][T14465] WARNING: CPU: 0 PID: 14465 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x1f0/0x200 [ 297.875910][T17650] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 297.883212][T14465] Modules linked in: [ 297.897024][T14465] CPU: 0 UID: 0 PID: 14465 Comm: kworker/u8:52 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 297.909842][T14465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 297.920032][T14465] Workqueue: bond0 bond_mii_monitor [ 297.925361][T14465] RIP: 0010:__linkwatch_sync_dev+0x1f0/0x200 [ 297.931461][T14465] Code: 15 50 d3 86 e8 81 21 26 fd c6 05 8f ff 87 02 01 90 48 c7 c7 6a 1b 5a 86 48 c7 c6 43 04 46 86 ba 38 00 00 00 e8 41 4d d6 fc 90 <0f> 0b 90 90 e9 d6 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 [ 297.951195][T14465] RSP: 0018:ffffc90004113b70 EFLAGS: 00010246 [ 297.957278][T14465] RAX: 7b021a7f7a1fbd00 RBX: ffff88811821d000 RCX: ffff88811184b180 [ 297.965413][T14465] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 297.973427][T14465] RBP: 0000000000000000 R08: 0001c900041139ef R09: 0000000000000000 [ 297.981536][T14465] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000000 [ 297.989529][T14465] R13: ffffffff85922c70 R14: ffffffff85922c70 R15: 0000000000000000 [ 297.997533][T14465] FS: 0000000000000000(0000) GS:ffff8882aee51000(0000) knlGS:0000000000000000 [ 298.006497][T14465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.013172][T14465] CR2: 0000000000000000 CR3: 000000012bc70000 CR4: 00000000003506f0 [ 298.021264][T14465] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 298.029270][T14465] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 298.037259][T14465] Call Trace: [ 298.040830][T14465] [ 298.043779][T14465] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 298.049529][T14465] ethtool_op_get_link+0x15/0x50 [ 298.054607][T14465] bond_check_dev_link+0x292/0x430 [ 298.059778][T14465] bond_mii_monitor+0x2da/0x1770 [ 298.064803][T14465] ? __list_add_valid_or_report+0x38/0xe0 [ 298.070694][T14465] ? __pwq_activate_work+0x1ad/0x290 [ 298.076071][T14465] ? try_to_wake_up+0x212/0x630 [ 298.080968][T14465] process_scheduled_works+0x4cb/0x9d0 [ 298.086529][T14465] worker_thread+0x582/0x770 [ 298.091226][T14465] kthread+0x486/0x510 [ 298.095376][T14465] ? finish_task_switch+0xad/0x2b0 [ 298.100515][T14465] ? __pfx_worker_thread+0x10/0x10 [ 298.105759][T14465] ? __pfx_kthread+0x10/0x10 [ 298.110399][T14465] ret_from_fork+0x4b/0x60 [ 298.114849][T14465] ? __pfx_kthread+0x10/0x10 [ 298.119597][T14465] ret_from_fork_asm+0x1a/0x30 [ 298.120818][T17650] EXT4-fs (loop9): 1 truncate cleaned up [ 298.124412][T14465] [ 298.124424][T14465] ---[ end trace 0000000000000000 ]--- [ 298.159100][T17650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.187322][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 298.187335][ T29] audit: type=1400 audit(1746349267.842:9037): avc: denied { ioctl } for pid=17649 comm="syz.9.4779" path="/321/file0" dev="tmpfs" ino=1738 ioctlcmd=0x1268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 298.225711][ T29] audit: type=1400 audit(1746349267.882:9038): avc: denied { create } for pid=17649 comm="syz.9.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 298.245333][ T29] audit: type=1400 audit(1746349267.882:9039): avc: denied { lock } for pid=17649 comm="syz.9.4779" path="/321/file2/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.270522][T17664] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 298.340285][T17667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4787'. [ 298.342844][T13244] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.503619][T17683] netlink: 'syz.9.4788': attribute type 39 has an invalid length. [ 298.554030][ T29] audit: type=1326 audit(1746349268.212:9040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.9.4792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18a9a6e969 code=0x0 [ 298.611078][T17688] loop9: detected capacity change from 0 to 128 [ 298.620560][T17684] loop8: detected capacity change from 0 to 128 [ 298.642741][T17689] netlink: 'syz.2.4793': attribute type 1 has an invalid length. [ 298.701644][T17684] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 298.788736][T17684] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.817598][T17691] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 298.827476][T17691] SELinux: failed to load policy [ 298.984881][T17703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4797'. [ 299.129453][T17708] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 299.317710][T17716] netlink: 'syz.3.4802': attribute type 39 has an invalid length. [ 299.358336][T16447] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.445265][T17722] vlan2: entered allmulticast mode [ 299.560937][ T29] audit: type=1400 audit(1746349269.222:9041): avc: denied { getopt } for pid=17728 comm="syz.9.4807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.942432][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4811'. [ 300.074280][T17746] netlink: 'syz.5.4813': attribute type 3 has an invalid length. [ 300.250914][ T29] audit: type=1400 audit(1746349269.912:9042): avc: denied { ioctl } for pid=17759 comm="syz.5.4819" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 300.304982][T17766] netlink: 492 bytes leftover after parsing attributes in process `syz.2.4822'. [ 300.315531][ T29] audit: type=1326 audit(1746349269.972:9043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.2.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 300.341435][ T29] audit: type=1326 audit(1746349269.972:9044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.2.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 300.365139][ T29] audit: type=1326 audit(1746349269.972:9045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.2.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 300.388752][ T29] audit: type=1326 audit(1746349269.972:9046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17765 comm="syz.2.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7471be969 code=0x7ffc0000 [ 300.585025][T17790] loop3: detected capacity change from 0 to 1024 [ 300.600308][T17790] EXT4-fs: Ignoring removed orlov option [ 300.608305][T17789] lo speed is unknown, defaulting to 1000 [ 300.613331][T17792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.615500][T17789] dummy0 speed is unknown, defaulting to 1000 [ 300.622706][T17792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.637340][T17790] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 300.650522][T17794] loop8: detected capacity change from 0 to 512 [ 300.664310][T17794] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4834: iget: bad extended attribute block 1 [ 300.682960][T17795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.692441][T17790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.693938][T17794] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4834: couldn't read orphan inode 15 (err -117) [ 300.733289][T17794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.747755][T17789] bond1: entered promiscuous mode [ 300.755255][T17334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.817192][T17794] EXT4-fs error (device loop8): ext4_lookup:1789: inode #15: comm syz.8.4834: iget: bad extended attribute block 1 [ 300.873507][T17804] vlan2: entered allmulticast mode [ 300.921011][T16447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.974484][T17811] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4839'. [ 300.990260][T17811] netem: change failed [ 301.156685][T17817] validate_nla: 5 callbacks suppressed [ 301.156705][T17817] netlink: 'syz.8.4841': attribute type 39 has an invalid length. [ 301.416931][T17827] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 301.633953][T17842] FAULT_INJECTION: forcing a failure. [ 301.633953][T17842] name failslab, interval 1, probability 0, space 0, times 0 [ 301.646784][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.3.4850 Tainted: G W 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 301.646818][T17842] Tainted: [W]=WARN [ 301.646913][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 301.646929][T17842] Call Trace: [ 301.646938][T17842] [ 301.646947][T17842] __dump_stack+0x1d/0x30 [ 301.646971][T17842] dump_stack_lvl+0xe8/0x140 [ 301.647074][T17842] dump_stack+0x15/0x1b [ 301.647095][T17842] should_fail_ex+0x265/0x280 [ 301.647129][T17842] should_failslab+0x8c/0xb0 [ 301.647166][T17842] kmem_cache_alloc_noprof+0x50/0x310 [ 301.647299][T17842] ? copy_mm+0xdf/0x1310 [ 301.647326][T17842] copy_mm+0xdf/0x1310 [ 301.647357][T17842] ? __hrtimer_setup+0x144/0x170 [ 301.647381][T17842] ? __pfx_it_real_fn+0x10/0x10 [ 301.647469][T17842] ? __pfx_it_real_fn+0x10/0x10 [ 301.647572][T17842] ? tty_audit_fork+0x4b/0x60 [ 301.647598][T17842] ? __init_rwsem+0x5d/0x70 [ 301.647697][T17842] copy_process+0xcf1/0x1f90 [ 301.647738][T17842] kernel_clone+0x16c/0x5b0 [ 301.647784][T17842] ? vfs_write+0x75e/0x8d0 [ 301.647817][T17842] __x64_sys_clone+0xe6/0x120 [ 301.647920][T17842] x64_sys_call+0x2c59/0x2fb0 [ 301.647945][T17842] do_syscall_64+0xd0/0x1a0 [ 301.647972][T17842] ? clear_bhb_loop+0x25/0x80 [ 301.647999][T17842] ? clear_bhb_loop+0x25/0x80 [ 301.648070][T17842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.648097][T17842] RIP: 0033:0x7f6f99aee969 [ 301.648116][T17842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.648138][T17842] RSP: 002b:00007f6f98114fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 301.648159][T17842] RAX: ffffffffffffffda RBX: 00007f6f99d16160 RCX: 00007f6f99aee969 [ 301.648171][T17842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 301.648260][T17842] RBP: 00007f6f98115090 R08: 0000000000000000 R09: 0000000000000000 [ 301.648271][T17842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 301.648283][T17842] R13: 0000000000000000 R14: 00007f6f99d16160 R15: 00007ffe7cce8c68 [ 301.648300][T17842] [ 301.914950][T17843] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 301.955028][T17846] loop9: detected capacity change from 0 to 1024 [ 301.962333][T17843] SELinux: failed to load policy [ 302.002015][T17846] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.039432][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4852'. [ 302.079046][T17854] bridge_slave_1: left allmulticast mode [ 302.084812][T17854] bridge_slave_1: left promiscuous mode [ 302.090607][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.101907][T17854] bridge_slave_0: left promiscuous mode [ 302.107617][T17854] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.326415][T17858] netlink: 'syz.8.4854': attribute type 29 has an invalid length. [ 302.336604][T13244] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.365279][T17858] netlink: 'syz.8.4854': attribute type 29 has an invalid length. [ 302.387905][T17858] netlink: 492 bytes leftover after parsing attributes in process `syz.8.4854'. [ 302.427303][T17868] loop3: detected capacity change from 0 to 512 [ 302.435260][T17868] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 302.452584][T17868] EXT4-fs (loop3): 1 truncate cleaned up [ 302.459487][T17868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.543727][T17334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.615933][T17882] vlan2: entered allmulticast mode [ 302.628408][T17887] loop9: detected capacity change from 0 to 128 [ 302.758349][T17887] bio_check_eod: 16984 callbacks suppressed [ 302.758366][T17887] syz.9.4862: attempt to access beyond end of device [ 302.758366][T17887] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 302.780687][T17892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4869'. [ 302.823163][T17887] syz.9.4862: attempt to access beyond end of device [ 302.823163][T17887] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 302.866199][T17887] syz.9.4862: attempt to access beyond end of device [ 302.866199][T17887] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 302.895506][T17887] syz.9.4862: attempt to access beyond end of device [ 302.895506][T17887] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 302.926779][T17887] syz.9.4862: attempt to access beyond end of device [ 302.926779][T17887] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 302.960554][T17887] syz.9.4862: attempt to access beyond end of device [ 302.960554][T17887] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 303.010234][T17887] syz.9.4862: attempt to access beyond end of device [ 303.010234][T17887] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 303.040900][T17887] syz.9.4862: attempt to access beyond end of device [ 303.040900][T17887] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 303.098234][T17908] loop8: detected capacity change from 0 to 2048 [ 303.127195][T17887] syz.9.4862: attempt to access beyond end of device [ 303.127195][T17887] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 303.200795][T17887] syz.9.4862: attempt to access beyond end of device [ 303.200795][T17887] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 303.221838][T17911] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4873'. [ 303.270325][T17908] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4873'. [ 303.331043][T17913] hsr0: entered promiscuous mode [ 303.340291][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 303.340309][ T29] audit: type=1326 audit(1746349273.002:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f99ae5927 code=0x7ffc0000 [ 303.370027][ T29] audit: type=1326 audit(1746349273.002:9129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f99a8ab39 code=0x7ffc0000 [ 303.393477][ T29] audit: type=1326 audit(1746349273.002:9130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f99aee969 code=0x7ffc0000 [ 303.417109][ T29] audit: type=1326 audit(1746349273.002:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f99ae5927 code=0x7ffc0000 [ 303.440710][ T29] audit: type=1326 audit(1746349273.002:9132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f99a8ab39 code=0x7ffc0000 [ 303.464188][ T29] audit: type=1326 audit(1746349273.002:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6f99aee969 code=0x7ffc0000 [ 303.492382][ T29] audit: type=1326 audit(1746349273.002:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f99ae5927 code=0x7ffc0000 [ 303.515990][ T29] audit: type=1326 audit(1746349273.002:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f99a8ab39 code=0x7ffc0000 [ 303.539429][ T29] audit: type=1326 audit(1746349273.002:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f99aee969 code=0x7ffc0000 [ 303.563025][ T29] audit: type=1326 audit(1746349273.002:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f99ae5927 code=0x7ffc0000 [ 303.713373][T17935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.722174][T17935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.812642][T17946] siw: device registration error -23 [ 304.107611][T17952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4888'. [ 304.287515][T17956] loop5: detected capacity change from 0 to 2048 [ 304.335056][T17956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4889'. [ 304.345613][T17959] loop9: detected capacity change from 0 to 128 [ 304.559364][T17971] FAULT_INJECTION: forcing a failure. [ 304.559364][T17971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.572723][T17971] CPU: 1 UID: 0 PID: 17971 Comm: syz.2.4895 Tainted: G W 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 304.572790][T17971] Tainted: [W]=WARN [ 304.572795][T17971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 304.572806][T17971] Call Trace: [ 304.572812][T17971] [ 304.572820][T17971] __dump_stack+0x1d/0x30 [ 304.572839][T17971] dump_stack_lvl+0xe8/0x140 [ 304.572855][T17971] dump_stack+0x15/0x1b [ 304.572949][T17971] should_fail_ex+0x265/0x280 [ 304.572983][T17971] should_fail+0xb/0x20 [ 304.573013][T17971] should_fail_usercopy+0x1a/0x20 [ 304.573108][T17971] strncpy_from_user+0x25/0x230 [ 304.573135][T17971] ? __kmalloc_cache_noprof+0x189/0x320 [ 304.573182][T17971] getname_flags+0x230/0x3b0 [ 304.573290][T17971] __se_sys_acct+0x3d/0x490 [ 304.573313][T17971] ? fpregs_assert_state_consistent+0x84/0xa0 [ 304.573337][T17971] __x64_sys_acct+0x1f/0x30 [ 304.573357][T17971] x64_sys_call+0x18cf/0x2fb0 [ 304.573405][T17971] do_syscall_64+0xd0/0x1a0 [ 304.573428][T17971] ? clear_bhb_loop+0x25/0x80 [ 304.573445][T17971] ? clear_bhb_loop+0x25/0x80 [ 304.573465][T17971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.573488][T17971] RIP: 0033:0x7fe7471be969 [ 304.573532][T17971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.573550][T17971] RSP: 002b:00007fe745827038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 304.573569][T17971] RAX: ffffffffffffffda RBX: 00007fe7473e5fa0 RCX: 00007fe7471be969 [ 304.573579][T17971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002180 [ 304.573619][T17971] RBP: 00007fe745827090 R08: 0000000000000000 R09: 0000000000000000 [ 304.573632][T17971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.573645][T17971] R13: 0000000000000000 R14: 00007fe7473e5fa0 R15: 00007ffc87b841c8 [ 304.573664][T17971] [ 304.906646][T17969] loop5: detected capacity change from 0 to 2048 [ 305.072089][T17985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.072189][T17969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.158150][T17969] infiniband syz!: set active [ 305.162956][T17969] infiniband syz!: added team_slave_0 [ 305.175153][T17985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.217061][T17969] RDS/IB: syz!: added [ 305.221342][T17969] smc: adding ib device syz! with port count 1 [ 305.227992][T17969] smc: ib device syz! port 1 has pnetid [ 305.246195][T17989] loop8: detected capacity change from 0 to 128 [ 305.598723][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4901'. [ 305.619904][T17990] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 305.640516][T17990] SELinux: failed to load policy [ 305.764415][T15263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.778051][T17997] netlink: 'syz.2.4902': attribute type 3 has an invalid length. [ 305.855867][T18003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4903'. [ 305.876328][T17999] netlink: 'syz.2.4904': attribute type 39 has an invalid length. [ 305.950055][T18012] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4908'. [ 306.075278][T18016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.112061][T18016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.170440][T18026] netlink: 'syz.3.4914': attribute type 1 has an invalid length. [ 306.244424][T18030] netlink: 'syz.8.4916': attribute type 1 has an invalid length. [ 306.462934][T18035] netlink: 'syz.3.4917': attribute type 39 has an invalid length. [ 306.528388][T18042] loop9: detected capacity change from 0 to 512 [ 306.538513][T18044] loop3: detected capacity change from 0 to 512 [ 306.546937][T18044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 306.559882][T18044] EXT4-fs (loop3): 1 truncate cleaned up [ 306.566082][T18044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.581120][T18042] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.593927][T18042] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 306.628306][T17334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.629244][T18042] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #2: block 18: comm syz.9.4919: lblock 23 mapped to illegal pblock 18 (length 1) [ 306.971750][T13244] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.011320][T18076] netlink: 'syz.5.4931': attribute type 3 has an invalid length. [ 307.049140][T18079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.069526][T18079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.114778][T18085] __nla_validate_parse: 5 callbacks suppressed [ 307.114792][T18085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4935'. [ 307.148352][T18085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4935'. [ 307.160136][T18083] vlan2: entered allmulticast mode [ 307.223921][T18085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.309894][T18093] netlink: 'syz.2.4938': attribute type 3 has an invalid length. [ 307.361602][T18097] netlink: 'syz.2.4940': attribute type 3 has an invalid length. [ 307.414071][T18098] netlink: 'syz.8.4939': attribute type 1 has an invalid length. [ 307.597631][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4943'. [ 307.657228][T18108] siw: device registration error -23 [ 308.603551][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 308.603566][ T29] audit: type=1326 audit(1746349278.262:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18115 comm="syz.3.4947" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f99aee969 code=0x0 [ 308.673635][T18120] loop5: detected capacity change from 0 to 764 [ 308.692335][ T29] audit: type=1400 audit(1746349278.352:9196): avc: denied { setattr } for pid=18122 comm="syz.2.4949" name="vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 308.702058][T18118] netlink: 'syz.8.4946': attribute type 39 has an invalid length. [ 308.725080][T18120] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 308.739508][T18125] loop3: detected capacity change from 0 to 128 [ 308.814956][T18128] bio_check_eod: 12074 callbacks suppressed [ 308.814976][T18128] syz.3.4947: attempt to access beyond end of device [ 308.814976][T18128] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 308.865579][T18127] vlan2: entered allmulticast mode [ 308.884259][T18135] netlink: 'syz.5.4951': attribute type 3 has an invalid length. [ 308.901181][T18128] syz.3.4947: attempt to access beyond end of device [ 308.901181][T18128] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 308.917239][T18128] syz.3.4947: attempt to access beyond end of device [ 308.917239][T18128] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 308.957885][T18141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4954'. [ 308.970731][T18128] syz.3.4947: attempt to access beyond end of device [ 308.970731][T18128] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 309.020501][T18128] syz.3.4947: attempt to access beyond end of device [ 309.020501][T18128] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 309.099199][T18128] syz.3.4947: attempt to access beyond end of device [ 309.099199][T18128] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 309.114703][T18149] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4957'. [ 309.159958][T18128] syz.3.4947: attempt to access beyond end of device [ 309.159958][T18128] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 309.193407][T18128] syz.3.4947: attempt to access beyond end of device [ 309.193407][T18128] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 309.206896][T18160] loop8: detected capacity change from 0 to 2048 [ 309.222992][T18128] syz.3.4947: attempt to access beyond end of device [ 309.222992][T18128] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 309.254205][T18128] syz.3.4947: attempt to access beyond end of device [ 309.254205][T18128] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 309.278035][T18162] loop9: detected capacity change from 0 to 256 [ 309.313524][T18164] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 309.472189][T18168] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4961'. [ 309.548346][T18171] netlink: 'syz.3.4964': attribute type 1 has an invalid length. [ 309.613923][ T29] audit: type=1400 audit(1746349279.272:9197): avc: denied { read write } for pid=18165 comm="syz.2.4963" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 309.639276][ T29] audit: type=1400 audit(1746349279.272:9198): avc: denied { open } for pid=18165 comm="syz.2.4963" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 309.688982][T18173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.746275][T18173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.830151][T18179] loop3: detected capacity change from 0 to 512 [ 309.930693][T18182] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 309.968509][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4970'. [ 310.004446][T18191] loop3: detected capacity change from 0 to 512 [ 310.021376][T18191] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 310.031462][T18191] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 310.041515][T18191] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4971: Failed to acquire dquot type 1 [ 310.056123][T18191] EXT4-fs (loop3): 1 truncate cleaned up [ 310.062334][T18191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.074956][T18191] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.086429][T18191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.091202][ T29] audit: type=1400 audit(1746349279.752:9199): avc: denied { read } for pid=18185 comm="syz.5.4969" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 310.112652][T18191] lo speed is unknown, defaulting to 1000 [ 310.118690][ T29] audit: type=1400 audit(1746349279.752:9200): avc: denied { open } for pid=18185 comm="syz.5.4969" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 310.126716][T18191] dummy0 speed is unknown, defaulting to 1000 [ 310.276179][T18206] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 310.302365][ T29] audit: type=1326 audit(1746349279.952:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.3.4975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f99aee969 code=0x0 [ 310.325320][ T29] audit: type=1326 audit(1746349279.962:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.2.4976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7471be969 code=0x0 [ 310.348295][T18214] loop3: detected capacity change from 0 to 128 [ 310.472232][T18217] loop9: detected capacity change from 0 to 128 [ 310.509752][T18217] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.559137][T18217] ext4 filesystem being mounted at /347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.595078][T18225] siw: device registration error -23 [ 310.658109][T18218] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 310.922178][T18218] SELinux: failed to load policy [ 310.957177][T13244] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.117792][T18241] FAULT_INJECTION: forcing a failure. [ 311.117792][T18241] name failslab, interval 1, probability 0, space 0, times 0 [ 311.130535][T18241] CPU: 1 UID: 0 PID: 18241 Comm: syz.8.4986 Tainted: G W 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 311.130660][T18241] Tainted: [W]=WARN [ 311.130669][T18241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 311.130686][T18241] Call Trace: [ 311.130694][T18241] [ 311.130703][T18241] __dump_stack+0x1d/0x30 [ 311.130729][T18241] dump_stack_lvl+0xe8/0x140 [ 311.130766][T18241] dump_stack+0x15/0x1b [ 311.130781][T18241] should_fail_ex+0x265/0x280 [ 311.130815][T18241] should_failslab+0x8c/0xb0 [ 311.130852][T18241] __kmalloc_noprof+0xa5/0x3e0 [ 311.130913][T18241] ? copy_net_ns+0xdb/0x720 [ 311.130943][T18241] ? inc_ucount+0xcb/0x140 [ 311.130975][T18241] copy_net_ns+0xdb/0x720 [ 311.131006][T18241] create_new_namespaces+0x20e/0x410 [ 311.131098][T18241] unshare_nsproxy_namespaces+0xe8/0x120 [ 311.131145][T18241] ksys_unshare+0x3d0/0x6d0 [ 311.131174][T18241] ? ksys_write+0x16e/0x1a0 [ 311.131240][T18241] __x64_sys_unshare+0x1f/0x30 [ 311.131263][T18241] x64_sys_call+0x2d4b/0x2fb0 [ 311.131285][T18241] do_syscall_64+0xd0/0x1a0 [ 311.131308][T18241] ? clear_bhb_loop+0x25/0x80 [ 311.131363][T18241] ? clear_bhb_loop+0x25/0x80 [ 311.131386][T18241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.131408][T18241] RIP: 0033:0x7fe6f62ae969 [ 311.131452][T18241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.131467][T18241] RSP: 002b:00007fe6f4917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 311.131498][T18241] RAX: ffffffffffffffda RBX: 00007fe6f64d5fa0 RCX: 00007fe6f62ae969 [ 311.131509][T18241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 311.131519][T18241] RBP: 00007fe6f4917090 R08: 0000000000000000 R09: 0000000000000000 [ 311.131529][T18241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.131541][T18241] R13: 0000000000000001 R14: 00007fe6f64d5fa0 R15: 00007ffdf3ec8d08 [ 311.131556][T18241] [ 311.410570][T18248] validate_nla: 3 callbacks suppressed [ 311.410587][T18248] netlink: 'syz.5.4989': attribute type 3 has an invalid length. [ 311.445458][T18255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=18255 comm=syz.3.4991 [ 311.542374][T18262] netlink: 'syz.8.4996': attribute type 29 has an invalid length. [ 311.577018][T18262] netlink: 'syz.8.4996': attribute type 29 has an invalid length. [ 311.586679][T18270] netlink: 'syz.5.4999': attribute type 1 has an invalid length. [ 311.596323][T18262] netlink: 492 bytes leftover after parsing attributes in process `syz.8.4996'. [ 311.622203][T18271] loop3: detected capacity change from 0 to 128 [ 311.651433][T18272] loop9: detected capacity change from 0 to 128 [ 311.755621][T18275] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 311.792603][T18275] SELinux: failed to load policy [ 311.947198][T18287] 9pnet: Could not find request transport: rdmale0 [ 312.080221][T18290] loop5: detected capacity change from 0 to 128 [ 312.237709][T18289] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 312.259811][T18289] SELinux: failed to load policy [ 312.448208][T18294] FAULT_INJECTION: forcing a failure. [ 312.448208][T18294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.461383][T18294] CPU: 0 UID: 0 PID: 18294 Comm: syz.8.5004 Tainted: G W 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 312.461435][T18294] Tainted: [W]=WARN [ 312.461443][T18294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 312.461462][T18294] Call Trace: [ 312.461468][T18294] [ 312.461476][T18294] __dump_stack+0x1d/0x30 [ 312.461497][T18294] dump_stack_lvl+0xe8/0x140 [ 312.461573][T18294] dump_stack+0x15/0x1b [ 312.461608][T18294] should_fail_ex+0x265/0x280 [ 312.461690][T18294] should_fail+0xb/0x20 [ 312.461722][T18294] should_fail_usercopy+0x1a/0x20 [ 312.461743][T18294] _copy_from_user+0x1c/0xb0 [ 312.461767][T18294] __sys_sendto+0x19e/0x330 [ 312.461889][T18294] __x64_sys_sendto+0x76/0x90 [ 312.461982][T18294] x64_sys_call+0x2eb6/0x2fb0 [ 312.462042][T18294] do_syscall_64+0xd0/0x1a0 [ 312.462066][T18294] ? clear_bhb_loop+0x25/0x80 [ 312.462090][T18294] ? clear_bhb_loop+0x25/0x80 [ 312.462205][T18294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.462342][T18294] RIP: 0033:0x7fe6f62ae969 [ 312.462357][T18294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.462372][T18294] RSP: 002b:00007fe6f4917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 312.462464][T18294] RAX: ffffffffffffffda RBX: 00007fe6f64d5fa0 RCX: 00007fe6f62ae969 [ 312.462478][T18294] RDX: 0000000000000001 RSI: 00002000000016c0 RDI: 0000000000000003 [ 312.462505][T18294] RBP: 00007fe6f4917090 R08: 0000200000001440 R09: 0000000000000010 [ 312.462516][T18294] R10: 0000000000018844 R11: 0000000000000246 R12: 0000000000000001 [ 312.462529][T18294] R13: 0000000000000000 R14: 00007fe6f64d5fa0 R15: 00007ffdf3ec8d08 [ 312.462551][T18294] [ 312.675830][T18298] netlink: 'syz.3.5007': attribute type 3 has an invalid length. [ 312.688263][T18301] netlink: 'syz.9.5005': attribute type 3 has an invalid length. [ 312.748469][T18307] bridge_slave_0: left promiscuous mode [ 312.754331][T18307] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.765950][T18314] netlink: 'syz.3.5011': attribute type 1 has an invalid length. [ 312.783824][T18307] bridge_slave_1: left allmulticast mode [ 312.789799][T18307] bridge_slave_1: left promiscuous mode [ 312.795664][T18307] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.817647][T18307] bond0: (slave bond_slave_0): Releasing backup interface [ 312.827902][T18307] bond0: (slave bond_slave_1): Releasing backup interface [ 312.842830][T18307] team0: Port device team_slave_0 removed [ 312.853048][T18307] team0: Port device team_slave_1 removed [ 312.861987][T18307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.869787][T18307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.880612][T18307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.888052][T18307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.015585][T18327] netlink: 'syz.9.5016': attribute type 1 has an invalid length. [ 313.058015][T18329] netlink: 'syz.3.5017': attribute type 29 has an invalid length. [ 313.094609][T18329] netlink: 'syz.3.5017': attribute type 29 has an invalid length. [ 313.109550][T18329] netlink: 492 bytes leftover after parsing attributes in process `syz.3.5017'. [ 313.405959][T18352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.416240][T18352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.529854][T18363] loop9: detected capacity change from 0 to 512 [ 313.536796][T18363] EXT4-fs (loop9): blocks per group (255) and clusters per group (8192) inconsistent [ 313.582646][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5031'. [ 313.591769][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5031'. [ 313.613782][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 313.613793][ T29] audit: type=1326 audit(1746349283.272:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 313.645998][ T29] audit: type=1326 audit(1746349283.312:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 313.672739][T18366] FAULT_INJECTION: forcing a failure. [ 313.672739][T18366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.686006][T18366] CPU: 1 UID: 0 PID: 18366 Comm: syz.8.5032 Tainted: G W 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 313.686047][T18366] Tainted: [W]=WARN [ 313.686056][T18366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 313.686075][T18366] Call Trace: [ 313.686080][T18366] [ 313.686087][T18366] __dump_stack+0x1d/0x30 [ 313.686110][T18366] dump_stack_lvl+0xe8/0x140 [ 313.686128][T18366] dump_stack+0x15/0x1b [ 313.686146][T18366] should_fail_ex+0x265/0x280 [ 313.686199][T18366] should_fail+0xb/0x20 [ 313.686226][T18366] should_fail_usercopy+0x1a/0x20 [ 313.686243][T18366] _copy_from_user+0x1c/0xb0 [ 313.686267][T18366] copy_from_bpfptr+0x5c/0x90 [ 313.686298][T18366] bpf_prog_load+0x74a/0x1070 [ 313.686395][T18366] ? security_bpf+0x2b/0x90 [ 313.686426][T18366] __sys_bpf+0x51d/0x790 [ 313.686463][T18366] __x64_sys_bpf+0x41/0x50 [ 313.686523][T18366] x64_sys_call+0x2478/0x2fb0 [ 313.686548][T18366] do_syscall_64+0xd0/0x1a0 [ 313.686573][T18366] ? clear_bhb_loop+0x25/0x80 [ 313.686664][T18366] ? clear_bhb_loop+0x25/0x80 [ 313.686690][T18366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.686716][T18366] RIP: 0033:0x7fe6f62ae969 [ 313.686736][T18366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.686757][T18366] RSP: 002b:00007fe6f4917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.686774][T18366] RAX: ffffffffffffffda RBX: 00007fe6f64d5fa0 RCX: 00007fe6f62ae969 [ 313.686787][T18366] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 313.686802][T18366] RBP: 00007fe6f4917090 R08: 0000000000000000 R09: 0000000000000000 [ 313.686817][T18366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.686830][T18366] R13: 0000000000000000 R14: 00007fe6f64d5fa0 R15: 00007ffdf3ec8d08 [ 313.686853][T18366] [ 313.688086][ T29] audit: type=1326 audit(1746349283.312:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 313.901337][ T29] audit: type=1326 audit(1746349283.312:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 313.924825][ T29] audit: type=1326 audit(1746349283.312:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 313.948422][ T29] audit: type=1326 audit(1746349283.312:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 313.971849][ T29] audit: type=1326 audit(1746349283.312:9294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 313.995461][ T29] audit: type=1326 audit(1746349283.312:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 314.019036][ T29] audit: type=1326 audit(1746349283.312:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 314.043151][ T29] audit: type=1326 audit(1746349283.312:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18360 comm="syz.5.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cd40e969 code=0x7ffc0000 [ 314.083390][T18376] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 314.129953][T18383] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5038'. [ 314.158096][T18383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5038'. [ 314.364506][T18396] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5045'. [ 314.388884][T18396] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5045'. [ 314.427813][T18401] siw: device registration error -23 [ 314.515873][T18397] loop9: detected capacity change from 0 to 2048 [ 314.723570][T18397] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5044'. [ 314.843292][T18418] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 314.922161][T18424] loop5: detected capacity change from 0 to 1024 [ 314.951262][T18424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.025070][T18430] netlink: 492 bytes leftover after parsing attributes in process `syz.8.5055'. [ 315.118845][T18436] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 315.148475][T15263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.189492][T18445] FAULT_INJECTION: forcing a failure. [ 315.189492][T18445] name failslab, interval 1, probability 0, space 0, times 0 [ 315.202178][T18445] CPU: 0 UID: 0 PID: 18445 Comm: syz.3.5063 Tainted: G W 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 315.202222][T18445] Tainted: [W]=WARN [ 315.202230][T18445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 315.202245][T18445] Call Trace: [ 315.202252][T18445] [ 315.202260][T18445] __dump_stack+0x1d/0x30 [ 315.202283][T18445] dump_stack_lvl+0xe8/0x140 [ 315.202305][T18445] dump_stack+0x15/0x1b [ 315.202331][T18445] should_fail_ex+0x265/0x280 [ 315.202368][T18445] should_failslab+0x8c/0xb0 [ 315.202403][T18445] __kmalloc_noprof+0xa5/0x3e0 [ 315.202444][T18445] ? sel_write_member+0x18c/0x370 [ 315.202469][T18445] sel_write_member+0x18c/0x370 [ 315.202621][T18445] selinux_transaction_write+0xc3/0x110 [ 315.202724][T18445] ? __pfx_selinux_transaction_write+0x10/0x10 [ 315.202776][T18445] vfs_write+0x266/0x8d0 [ 315.202803][T18445] ? __rcu_read_unlock+0x4f/0x70 [ 315.202827][T18445] ? __fget_files+0x184/0x1c0 [ 315.202859][T18445] ksys_write+0xda/0x1a0 [ 315.202887][T18445] __x64_sys_write+0x40/0x50 [ 315.202994][T18445] x64_sys_call+0x2cdd/0x2fb0 [ 315.203019][T18445] do_syscall_64+0xd0/0x1a0 [ 315.203078][T18445] ? clear_bhb_loop+0x25/0x80 [ 315.203105][T18445] ? clear_bhb_loop+0x25/0x80 [ 315.203132][T18445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.203180][T18445] RIP: 0033:0x7f6f99aee969 [ 315.203197][T18445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.203226][T18445] RSP: 002b:00007f6f98157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.203318][T18445] RAX: ffffffffffffffda RBX: 00007f6f99d15fa0 RCX: 00007f6f99aee969 [ 315.203334][T18445] RDX: 0000000000000042 RSI: 0000200000000240 RDI: 0000000000000003 [ 315.203384][T18445] RBP: 00007f6f98157090 R08: 0000000000000000 R09: 0000000000000000 [ 315.203400][T18445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.203415][T18445] R13: 0000000000000000 R14: 00007f6f99d15fa0 R15: 00007ffe7cce8c68 [ 315.203439][T18445] [ 315.467145][T18450] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5060'. [ 315.508721][T18455] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 315.543678][T18460] loop8: detected capacity change from 0 to 512 [ 315.556866][T18460] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 315.570768][T18460] EXT4-fs (loop8): 1 truncate cleaned up [ 315.576760][T18460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.622795][T18467] loop5: detected capacity change from 0 to 128 [ 315.639025][T16447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.740935][T18475] siw: device registration error -23 [ 316.132641][T18467] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 316.145065][T18467] SELinux: failed to load policy [ 316.163126][T18467] bio_check_eod: 21544 callbacks suppressed [ 316.163138][T18467] syz.5.5068: attempt to access beyond end of device [ 316.163138][T18467] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 316.189216][T18467] syz.5.5068: attempt to access beyond end of device [ 316.189216][T18467] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 316.224136][T18485] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 316.273463][T18467] syz.5.5068: attempt to access beyond end of device [ 316.273463][T18467] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 316.329930][T18467] syz.5.5068: attempt to access beyond end of device [ 316.329930][T18467] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 316.359577][T18467] syz.5.5068: attempt to access beyond end of device [ 316.359577][T18467] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 316.427637][T18498] validate_nla: 17 callbacks suppressed [ 316.427679][T18498] netlink: 'syz.2.5083': attribute type 39 has an invalid length. [ 316.447984][T18505] loop9: detected capacity change from 0 to 128 [ 316.459203][T18502] netlink: 'syz.8.5084': attribute type 29 has an invalid length. [ 316.468860][T18502] netlink: 'syz.8.5084': attribute type 29 has an invalid length. [ 316.470402][T18467] syz.5.5068: attempt to access beyond end of device [ 316.470402][T18467] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 316.491493][T18505] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.506055][T18505] ext4 filesystem being mounted at /370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 316.513630][T18467] syz.5.5068: attempt to access beyond end of device [ 316.513630][T18467] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 316.561921][T18467] syz.5.5068: attempt to access beyond end of device [ 316.561921][T18467] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 316.608763][T18467] syz.5.5068: attempt to access beyond end of device [ 316.608763][T18467] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 316.608802][T13244] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.622211][T18467] syz.5.5068: attempt to access beyond end of device [ 316.622211][T18467] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 316.656015][T18511] netlink: 'syz.3.5089': attribute type 1 has an invalid length. [ 316.793258][T18521] FAULT_INJECTION: forcing a failure. [ 316.793258][T18521] name failslab, interval 1, probability 0, space 0, times 0 [ 316.806018][T18521] CPU: 0 UID: 0 PID: 18521 Comm: syz.5.5092 Tainted: G W 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 316.806123][T18521] Tainted: [W]=WARN [ 316.806129][T18521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 316.806142][T18521] Call Trace: [ 316.806148][T18521] [ 316.806156][T18521] __dump_stack+0x1d/0x30 [ 316.806285][T18521] dump_stack_lvl+0xe8/0x140 [ 316.806301][T18521] dump_stack+0x15/0x1b [ 316.806330][T18521] should_fail_ex+0x265/0x280 [ 316.806364][T18521] should_failslab+0x8c/0xb0 [ 316.806428][T18521] kmem_cache_alloc_noprof+0x50/0x310 [ 316.806511][T18521] ? alloc_empty_file+0x76/0x200 [ 316.806544][T18521] ? mntput+0x4b/0x80 [ 316.806559][T18521] alloc_empty_file+0x76/0x200 [ 316.806655][T18521] path_openat+0x68/0x2170 [ 316.806676][T18521] ? _parse_integer_limit+0x170/0x190 [ 316.806728][T18521] ? kstrtoull+0x111/0x140 [ 316.806808][T18521] ? kstrtouint+0x76/0xc0 [ 316.806831][T18521] do_filp_open+0x109/0x230 [ 316.806874][T18521] do_sys_openat2+0xa6/0x110 [ 316.806892][T18521] __x64_sys_openat+0xf2/0x120 [ 316.806909][T18521] x64_sys_call+0x1af/0x2fb0 [ 316.806949][T18521] do_syscall_64+0xd0/0x1a0 [ 316.807048][T18521] ? clear_bhb_loop+0x25/0x80 [ 316.807118][T18521] ? clear_bhb_loop+0x25/0x80 [ 316.807141][T18521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.807163][T18521] RIP: 0033:0x7f31cd40e969 [ 316.807248][T18521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.807267][T18521] RSP: 002b:00007f31cba77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.807286][T18521] RAX: ffffffffffffffda RBX: 00007f31cd635fa0 RCX: 00007f31cd40e969 [ 316.807299][T18521] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 316.807312][T18521] RBP: 00007f31cba77090 R08: 0000000000000000 R09: 0000000000000000 [ 316.807325][T18521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.807338][T18521] R13: 0000000000000001 R14: 00007f31cd635fa0 R15: 00007ffcb1abc938 [ 316.807358][T18521] [ 317.098352][T18524] vlan0: entered allmulticast mode [ 317.202665][T18532] loop3: detected capacity change from 0 to 128 [ 317.306384][T18535] siw: device registration error -23 [ 317.640847][T18543] netlink: 'syz.2.5097': attribute type 39 has an invalid length. [ 317.676824][T18532] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 317.687031][T18532] SELinux: failed to load policy [ 317.748639][T18544] ================================================================== [ 317.756766][T18544] BUG: KCSAN: data-race in getrusage / try_to_unmap_one [ 317.763735][T18544] [ 317.766059][T18544] write to 0xffff8881191bfa00 of 8 bytes by task 18532 on cpu 0: [ 317.773777][T18544] try_to_unmap_one+0xf0e/0x2140 [ 317.778728][T18544] __rmap_walk_file+0x1e9/0x2b0 [ 317.783592][T18544] try_to_unmap+0x1ae/0x1e0 [ 317.788104][T18544] shrink_folio_list+0x121a/0x2670 [ 317.793223][T18544] reclaim_folio_list+0x80/0x2b0 [ 317.798160][T18544] reclaim_pages+0x215/0x270 [ 317.802751][T18544] madvise_cold_or_pageout_pte_range+0xd61/0xdd0 [ 317.809103][T18544] walk_pgd_range+0x86b/0x11b0 [ 317.813869][T18544] __walk_page_range+0xdd/0x340 [ 317.818731][T18544] walk_page_range_mm+0x352/0x4a0 [ 317.823756][T18544] walk_page_range+0x56/0x70 [ 317.828346][T18544] madvise_do_behavior+0x1bea/0x24a0 [ 317.833635][T18544] __x64_sys_madvise+0xc9/0x100 [ 317.838499][T18544] x64_sys_call+0x2455/0x2fb0 [ 317.843173][T18544] do_syscall_64+0xd0/0x1a0 [ 317.847690][T18544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.853590][T18544] [ 317.855905][T18544] read to 0xffff8881191bfa00 of 8 bytes by task 18544 on cpu 1: [ 317.863530][T18544] getrusage+0xa52/0xbb0 [ 317.867777][T18544] io_sq_thread+0x5dd/0x1110 [ 317.872367][T18544] ret_from_fork+0x4b/0x60 [ 317.876802][T18544] ret_from_fork_asm+0x1a/0x30 [ 317.881562][T18544] [ 317.883882][T18544] value changed: 0x00000000000016fd -> 0x0000000000001760 [ 317.890992][T18544] [ 317.893312][T18544] Reported by Kernel Concurrency Sanitizer on: [ 317.899458][T18544] CPU: 1 UID: 0 PID: 18544 Comm: iou-sqp-18532 Tainted: G W 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 317.913784][T18544] Tainted: [W]=WARN [ 317.917580][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 317.927633][T18544] ==================================================================