last executing test programs: 4m25.688311314s ago: executing program 32 (id=1953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4, 0x0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000011000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009d40b2dd23656f568616000000000000000059ff97a5522f7f32cb47a85f1a5c9c3f8a27c6f544d505350141a611b5eccbc314c4b7b824b893f48e1ce10b4cf9183ab66d5053"], 0x50) r3 = inotify_init() r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYRESHEX, @ANYRES32=r6], 0x835, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r7 = inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x20000000000001bb, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095", @ANYRESOCT=r3, @ANYRESOCT=r4, @ANYBLOB="a61814daee819b500ccd1435a41c08f8df7ed7d9cdd33fc958faa3986469069b90827f73ebc6e53548ff8c42c6f1e0b000860a46ff8453f67b40160c1e23a7e04c0e7ff36194ec52bbd9707caa20d6e67e0c69686952d5eefb2cd9c3263cb509c4cf817cfa0c599d5232a64d71", @ANYRES64=r8, @ANYRESDEC=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 4m19.993848207s ago: executing program 33 (id=2076): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff03, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000040051b7b8a00000000b70000e035f3faecac851e3a14dccaac0000b57904630b20b3f196606eec04eb870f5a7a2926efb02b4f8902d92f876f170036ba2d89b998691a52b6c4bd30269f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESHEX=r4, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000806c010000150010001800feffffff09000d2000000401a80074efc22bb31ad49f50a03cb4d92706000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e67c20b278d56cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) 4m17.262770028s ago: executing program 34 (id=2131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) 4m16.087586757s ago: executing program 35 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) rename(0x0, 0x0) (fail_nth: 1) 4m5.164170209s ago: executing program 36 (id=2383): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000548500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup(r0) inotify_rm_watch(r2, r1) read$char_usb(r2, &(0x7f0000000000)=""/128, 0x80) 4m4.782553722s ago: executing program 37 (id=2390): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', 0xffffffffffffffff, 0x0, 0x7ffe}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000']) 3m56.754540122s ago: executing program 38 (id=2514): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0xfffffffffffffffc) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000001580)=""/4096) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000000000000000000000edffffffffffffff0000000000000000"], 0x50) 3m52.937824841s ago: executing program 39 (id=2575): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m42.756158287s ago: executing program 40 (id=2729): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 3m40.482617134s ago: executing program 4 (id=2763): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000']) 3m40.481318164s ago: executing program 5 (id=2764): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) 3m40.441433344s ago: executing program 5 (id=2765): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='rss_stat\x00', r3, 0x0, 0x3}, 0x18) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 3m40.415715894s ago: executing program 5 (id=2767): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x3, @any, 0x0, 0xfffffffffffffffc}, 0xe) unshare(0x60000480) 3m40.408051795s ago: executing program 4 (id=2769): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 3m40.381430555s ago: executing program 4 (id=2770): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m40.361735465s ago: executing program 4 (id=2771): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8002, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffff00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000063110800000000008510000002000000850000000500000095000000000000009500a50500000000ab46e77dfa08d5a5ed5007e537903330f1afe48b17a6845b244c02a146f56ddd3f9e75c53f23a73b9cf5236b08c5d8b43438b69cf7597730c6e6e853123566668dba7b212b32f7597beeae88aa942d4a2bd732d4d1"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@r2t={{0x9, 0x5, 0x18, 0x5, 0x4}, 0x4, 0x46, 0xffffe, 0x9}, 0x80, 0x0, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) 3m40.231840316s ago: executing program 4 (id=2772): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) (fail_nth: 4) 3m39.808095539s ago: executing program 4 (id=2773): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x16, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffe, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setresuid(0xee01, 0xee00, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500ba00000400000d00000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0x15) dup(r5) 3m39.807871669s ago: executing program 41 (id=2773): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x16, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffe, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setresuid(0xee01, 0xee00, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500ba00000400000d00000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0x15) dup(r5) 3m39.504164261s ago: executing program 5 (id=2776): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x2) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwrite64(r2, 0x0, 0x0, 0x7) 3m38.940438296s ago: executing program 5 (id=2779): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 3m38.452975609s ago: executing program 5 (id=2786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000440)='./file0\x00') r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x8080, 0x112) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002500)=ANY=[], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0700000000000000000000000000000000000000279641a8bb06ff750332adbc1e3f29d7795d81c17b74d49c50b02b13e136f438eb2b260ae39f6f8d26c90be3b34d16dbbb9cb15b4c2724e52b2e5d83ffa16672d35c2045ac4bff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x28, 0x3, 0x8000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtaction={0x480, 0x30, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{0x46c, 0x1, [@m_bpf={0x6c, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0x43, 0x6, "824ae121f60271fb60515cea06ba2d35317bf42851337c42624f63070a4d0cafdad0017342e7187d44c2d83e6f9e7aa34836e9f717f5e21db6c35e07806d9d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x124, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x33628d7a, 0x4, 0x6, 0x5}, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, 0xff0000ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x2000000c, 0x3, 0x9}, @rand_addr=0x64010102, @loopback, 0xffffffff, 0x1}}]}, {0xac, 0x6, "4b95102fbd39e5296977dcc00010000016b19187b38af05d5fbd2b6213b6997c11b2139cb25d6001025eab2b3db4d962c4f4e6c97b4107a1c47c3f8cb86682a6b02720adc85c79c49d1be297a923d4196c5b2c2ed97679dfe11ca71b7e81432013f4bd79019c666b7d922ed35c9ef51eab1f275724611272a2a9c72d1e76366a2025cca70ed88bcaec0b51725e7d29e24aa05d7e1c3701707617d893872ca579e45ea3dfe3247965"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x140, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xe, 0x6, 0x6, 0x94}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0xea, 0x6, "7282f1107600785eaae4b88f2bf71c6029f12958bdd148a749444708f2dc5074242d36536184304146773ce7d055c74e311e2461ee961be901f0f36263b884d6648f04970a42b95d2ef17bfd351e07ee353a41c899ca5f18a76db38ebc8a3d85b9e0dee2bcc6af74a3eb0cb52a36dc17f30569392ffac4355198942c930fe3fed2485ceb6fa185d708bdbbdf81ed5b9207eb67835908c251b7e7e546d357eb77396b6cb024579bd5e48ea27bd0dd2e27cd21f2ab7c3eaa7d5bbcf5a81d9251de8bff95864b09baa1d3e8effda0bc134fc4061b7c242a270e2bbce9d492118519f2a4ae7fe2ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x198, 0x18, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc98, 0x10e7, 0xfff997ce70fd1239, 0x8, 0x1}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf34d, 0xfffffbff, 0x0, 0x2, 0x101}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0xffffffffffffffff, 0x7, 0x5}, 0xfffd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x80000001, 0x4, 0x4, 0x8}, 0x152}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x5, 0x8, 0xffffffff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x8, 0x2, 0x2, 0xe}, 0xff0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa1, 0xffffffff, 0x10000003, 0xe397, 0x6}, 0x20c8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x43b7b99e59b5cdcf, 0x8, 0x200}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x1, 0xc}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80000000, 0x0, 0xfff, 0x401}, 0x9}}]}, {0x4d, 0x6, "ab16b80345d7c106dd4a0c7a911b336579fcf5245e887856906406d1d653a398da5d5620c9bb75748cd96014ffdfbb4d5b7cf8d46e2ae4ff426bc89b19a7e20789634683287de8a4db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x480}}, 0x0) socket(0x29, 0x803, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, @void, @value}, 0xa0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) syz_emit_ethernet(0x76, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000403a00fc000000000000000000000000000000ff020000000000000000000000000001020090780000000269ff0f0000000000008e25000000000000000000000000aafe8800000000000000000000000000012900063167000000d3897b1f4edff52d"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_set$pid(0x3, 0x0, 0x0) 3m38.43679771s ago: executing program 42 (id=2786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000440)='./file0\x00') r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x8080, 0x112) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002500)=ANY=[], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0700000000000000000000000000000000000000279641a8bb06ff750332adbc1e3f29d7795d81c17b74d49c50b02b13e136f438eb2b260ae39f6f8d26c90be3b34d16dbbb9cb15b4c2724e52b2e5d83ffa16672d35c2045ac4bff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x28, 0x3, 0x8000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtaction={0x480, 0x30, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{0x46c, 0x1, [@m_bpf={0x6c, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0x43, 0x6, "824ae121f60271fb60515cea06ba2d35317bf42851337c42624f63070a4d0cafdad0017342e7187d44c2d83e6f9e7aa34836e9f717f5e21db6c35e07806d9d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x124, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x33628d7a, 0x4, 0x6, 0x5}, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, 0xff0000ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x2000000c, 0x3, 0x9}, @rand_addr=0x64010102, @loopback, 0xffffffff, 0x1}}]}, {0xac, 0x6, "4b95102fbd39e5296977dcc00010000016b19187b38af05d5fbd2b6213b6997c11b2139cb25d6001025eab2b3db4d962c4f4e6c97b4107a1c47c3f8cb86682a6b02720adc85c79c49d1be297a923d4196c5b2c2ed97679dfe11ca71b7e81432013f4bd79019c666b7d922ed35c9ef51eab1f275724611272a2a9c72d1e76366a2025cca70ed88bcaec0b51725e7d29e24aa05d7e1c3701707617d893872ca579e45ea3dfe3247965"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x140, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xe, 0x6, 0x6, 0x94}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0xea, 0x6, "7282f1107600785eaae4b88f2bf71c6029f12958bdd148a749444708f2dc5074242d36536184304146773ce7d055c74e311e2461ee961be901f0f36263b884d6648f04970a42b95d2ef17bfd351e07ee353a41c899ca5f18a76db38ebc8a3d85b9e0dee2bcc6af74a3eb0cb52a36dc17f30569392ffac4355198942c930fe3fed2485ceb6fa185d708bdbbdf81ed5b9207eb67835908c251b7e7e546d357eb77396b6cb024579bd5e48ea27bd0dd2e27cd21f2ab7c3eaa7d5bbcf5a81d9251de8bff95864b09baa1d3e8effda0bc134fc4061b7c242a270e2bbce9d492118519f2a4ae7fe2ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x198, 0x18, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc98, 0x10e7, 0xfff997ce70fd1239, 0x8, 0x1}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf34d, 0xfffffbff, 0x0, 0x2, 0x101}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0xffffffffffffffff, 0x7, 0x5}, 0xfffd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x80000001, 0x4, 0x4, 0x8}, 0x152}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x5, 0x8, 0xffffffff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x8, 0x2, 0x2, 0xe}, 0xff0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa1, 0xffffffff, 0x10000003, 0xe397, 0x6}, 0x20c8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x43b7b99e59b5cdcf, 0x8, 0x200}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x1, 0xc}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80000000, 0x0, 0xfff, 0x401}, 0x9}}]}, {0x4d, 0x6, "ab16b80345d7c106dd4a0c7a911b336579fcf5245e887856906406d1d653a398da5d5620c9bb75748cd96014ffdfbb4d5b7cf8d46e2ae4ff426bc89b19a7e20789634683287de8a4db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x480}}, 0x0) socket(0x29, 0x803, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, @void, @value}, 0xa0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) syz_emit_ethernet(0x76, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000403a00fc000000000000000000000000000000ff020000000000000000000000000001020090780000000269ff0f0000000000008e25000000000000000000000000aafe8800000000000000000000000000012900063167000000d3897b1f4edff52d"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_set$pid(0x3, 0x0, 0x0) 2m6.096480553s ago: executing program 7 (id=4578): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1008}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m6.005740694s ago: executing program 7 (id=4579): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 2m5.869286025s ago: executing program 7 (id=4581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000440)='./file0\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x8080, 0x112) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002500)=ANY=[], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0700000000000000000000000000000000000000279641a8bb06ff750332adbc1e3f29d7795d81c17b74d49c50b02b13e136f438eb2b260ae39f6f8d26c90be3b34d16dbbb9cb15b4c2724e52b2e5d83ffa16672d35c2045ac4bff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000c00)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x28, 0x3, 0x8000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtaction={0x4b0, 0x30, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{0x49c, 0x1, [@m_bpf={0x9c, 0x1c, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0x1ff, 0xfffffffffffffff9, 0x5, 0x9}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x43, 0x6, "824ae121f60271fb60515cea06ba2d35317bf42851337c42624f63070a4d0cafdad0017342e7187d44c2d83e6f9e7aa34836e9f717f5e21db6c35e07806d9d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x124, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x33628d7a, 0x4, 0x6, 0x5}, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, 0xff0000ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x2000000c, 0x3, 0x9}, @rand_addr=0x64010102, @loopback, 0xffffffff, 0x1}}]}, {0xac, 0x6, "4b95102fbd39e5296977dcc00010000016b19187b38af05d5fbd2b6213b6997c11b2139cb25d6001025eab2b3db4d962c4f4e6c97b4107a1c47c3f8cb86682a6b02720adc85c79c49d1be297a923d4196c5b2c2ed97679dfe11ca71b7e81432013f4bd79019c666b7d922ed35c9ef51eab1f275724611272a2a9c72d1e76366a2025cca70ed88bcaec0b51725e7d29e24aa05d7e1c3701707617d893872ca579e45ea3dfe3247965"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x140, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xe, 0x6, 0x6, 0x94}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0xea, 0x6, "7282f1107600785eaae4b88f2bf71c6029f12958bdd148a749444708f2dc5074242d36536184304146773ce7d055c74e311e2461ee961be901f0f36263b884d6648f04970a42b95d2ef17bfd351e07ee353a41c899ca5f18a76db38ebc8a3d85b9e0dee2bcc6af74a3eb0cb52a36dc17f30569392ffac4355198942c930fe3fed2485ceb6fa185d708bdbbdf81ed5b9207eb67835908c251b7e7e546d357eb77396b6cb024579bd5e48ea27bd0dd2e27cd21f2ab7c3eaa7d5bbcf5a81d9251de8bff95864b09baa1d3e8effda0bc134fc4061b7c242a270e2bbce9d492118519f2a4ae7fe2ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x198, 0x18, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc98, 0x10e7, 0xfff997ce70fd1239, 0x8, 0x1}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf34d, 0xfffffbff, 0x0, 0x2, 0x101}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0xffffffffffffffff, 0x7, 0x5}, 0xfffd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x80000001, 0x4, 0x4, 0x8}, 0x152}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x5, 0x8, 0xffffffff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x8, 0x2, 0x2, 0xe}, 0xff0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa1, 0xffffffff, 0x10000003, 0xe397, 0x6}, 0x20c8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x43b7b99e59b5cdcf, 0x8, 0x200}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x1, 0xc}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80000000, 0x0, 0xfff, 0x401}, 0x9}}]}, {0x4d, 0x6, "ab16b80345d7c106dd4a0c7a911b336579fcf5245e887856906406d1d653a398da5d5620c9bb75748cd96014ffdfbb4d5b7cf8d46e2ae4ff426bc89b19a7e20789634683287de8a4db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x4b0}}, 0x0) socket(0x29, 0x803, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, @void, @value}, 0xa0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc9ffb}]}) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r6) syz_emit_ethernet(0x76, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000403a00fc000000000000000000000000000000ff020000000000000000000000000001020090780000000269ff0f0000000000008e25000000000000000000000000aafe8800000000000000000000000000012900063167000000d3897b1f4edff52d"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_set$pid(0x3, 0x0, 0x0) 2m4.886461072s ago: executing program 7 (id=4600): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d3000636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d67696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c726f64ed72caee686f72746e616d653d6c6f7765722c00"], 0xfd, 0x29c, &(0x7f0000000ac0)="$eJzs3M9rE0EUwPHXtEnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq31E8ehOs/0Av3ryLlyIIXnqQrnQ3a7Yl2B82bmy+Hyg73ZmXmd2dhLcLO1v33jytll2rbJqSSKskRNZkWyS3W+oY6WwTfjklUWtydfLH5wt37j+4WSgW5xZU5wuL1/KqOn3xw/OXby99bE7efTf9flw2cw+3vue/bJ7dPLe1sxh+er2pRpfq9aZZcmxdrrhVS/W2YxvX1krNtRt76stOfWWlraa2PJVZadiuq6bW1qrd1mZdm422msemUlPLsnQqI8Nm9MgRpfWFBVPoy2AQh4leOxuNghntWVla/xeDAgAAgyWu/P9JxdWKq7WD8v+EkP/3j5//7/RMGnE6JHdvAAom0/n+7kX+DwAAAAAAAAAAAAAAAAAAAADA/2Db87Ke52XDbfg3LiJpEQn/j3uc6I9jXP+RGIeLExZ5cS8t4rxulVqlYBvUF8pSEUdsmUmK/PTnQ0dQnr9RnJtRX042nNVOvP+S4HgYH8r1jp8N4jUSv9oqJSUT7T8vWTnTOz6/Lz4pIq1SSq5cjsRbkpVPj6Qujiz787ob/2pW9fqt4r7+J/x2AAAAAACcBpb+ltt7/xusJmlZGi4bsq8+2Nl9PiDZA54PqGykpBs/JufH4jtuAAAAAACGidt+UTWOYzcoHK0wjKfOSgeT5o+NPc9b3W30950mRCSmI/0mIgNwwk+68PVZcAEP0zjOXyUAAAAA/dBN+g8fk+rngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGEKHXTwsbH+ctcci3Y3Gc5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYPgVAAD//4R/G2A=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xc200, 0x90759d0ca75742f4) fadvise64(r1, 0x0, 0x3f00, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c002) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000400)=0x5) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r3, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0x800000000000000}, 0x18) close(r3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r8, @ANYBLOB="f3a476a0aa4d30a63f5edbb973fee710648dae9938258e5e3a8e43cf1b3d4a6923d18c6ff646a2e1a64d1ffd98ccc72f52cb26baffd2a27115d12ab995088c1ecfe15be8e4efbe3e7fa837619e1bf1fdc5a66e76598f4cc1b926069fd905b5f48fec435f5b23f7999d16369bc0ac612c4e4e65db909bc8e6b5b2", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES8=r9], 0x10, 0x500}}], 0x2, 0x0) 2m4.239148177s ago: executing program 7 (id=4611): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x400, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200000000000000000000c6559c45365bdf21635e9a81f18d0f54035da4e7b8c4525843d5b7ff8c8561f8700362e90d2e868f0ee2353cd850d55f593bf1a9b123b599470454bd6e7a50e0cc46cf9ddfd15b9fe0ddfa287a89a2ca168cfa4e0e6ca12c655ca5678d10ac6352a09f97df458894ca92a79e8cdb6e046100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x8040) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x7040, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001f00)={0x1, &(0x7f0000001e40)="3bcb20e6a04cde9a5d765699be46167a254b8850e48a5deb4e3317d126c17ff801362f7d6cc576480f0f8dc1167f87281ee80ec85a83071ebca30462d812fabe783d50a0762cf831d4fa1511", &(0x7f0000001ec0)=@tcp=r4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x68a2, 0x10000, {{0x9, 0x4, 0x2, 0x8, 0x24, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xf, 0xd9, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast]}]}}}}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000008800)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000003c0)="ee", 0x1}], 0x1}}], 0x1, 0x4004) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) r10 = openat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000001b00)={0x8000, 0xc9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x19, 0x10, &(0x7f0000000680)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x3, 0x3, 0x6, 0x3, 0x1, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x10, '\x00', r6, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x3, 0x0, &(0x7f0000001b40)=[{0x3, 0x2, 0x7, 0x5}, {0x5, 0x3, 0x10, 0x2}, {0x0, 0x2, 0x9, 0x63c277368dce1396}], 0x10, 0x2, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x4305, @icmp={{0x5, 0x4, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @dev}}}}}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) 2m0.278709187s ago: executing program 3 (id=4677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80180, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_io_uring_complete(0x0) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r7}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x2, 'wg0\x00', {0x3}, 0xff79}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) lchown(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r3, 0x400454cd, 0xffff) 1m58.906572087s ago: executing program 7 (id=4695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000002000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 1m58.906452197s ago: executing program 43 (id=4695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000002000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 1m56.651682184s ago: executing program 3 (id=4722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="000000000000000000bda55f05e2b8d400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000900), &(0x7f0000000700)=0x68) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) 1m56.486889045s ago: executing program 3 (id=4723): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0x0, &(0x7f0000004080), 0x1, 0x76f, &(0x7f0000002080)="$eJzs3c9rHOUbAPBnNknTpv1+E0HQegoIGijdmBpbBQ8VDyJYKOjZumy2oWaTLdlNaUJARQQvgooHQS89+6PevIk/rvpfeJCWqmmx4kEis5lNN81uk22TrHU/H5j2eWdm886zM/O+7+4MOwH0rNH0n1zE4Yh4P4kYzuYnETFQj/ojTq6td3NluZhOSayuvvxbUl/nxspyMZpekzqYFR6OiO/fiTiS21xvdXFpplAul+az8nht9vx4dXHp6LnZwnRpujR3fGJy8tiJp04c37lc//hp6dDVD154/MuTf7390OX3fkjiZBzKljXnsVNGYzTWUh9I38INnt/pyros6fYGcFfS47Nv7SyPwzEcffUIAPgveyMiVgGAHpPo/wGgxzS+B7ixslxsTN39RmJvXXsuIvav5d+4vrm2pD+7Zre/fh106Eay4cpIEhEjO1D/aER8+vWrn6dT7NJ1SIBW3vwmCza1/8mmexY69cQ21hm9raz9g73zbTr+ebrV+C+3Pv6JFuOfwRbn7t3Y+vzPXdmBatpKx3/PNt3bdrMp/8xIX1b6X33MN5CcPVcupW3b/yNiLAYG0/LEHeoYu/739XbLmsd/v3/4+mdp/en/t9bIXekf3PiaqUKtcC85N7v2VsQj/a3yT9b3f9Jm/Ht6m3W8+My7n7Rbluaf5tuYNue/u1YvRTzWcv/fuqMtueP9ieP1w2G8cVC08NXPHw/F+pm0UfP+T6e0/sZngb2Q7v+hO+c/kjTfr1ntvI4fLw1/127Z1vm3Pv73Ja/U433ZvIuFWm1+ImJf8tLm+cduvbZRbqyf5j/2aD3/A9kqm9q/Vsd/+pnwta0Szzai/+qvX9x9/rsrzX+qo/3feXD55kxfu/q3t/8n69FYNmc77d92N/Be3jsAAAAAAAAAAAAAAAAAAAAAAAAA2K5cRByKJJdfj3O5fH7tGd4PxlCuXKnWjpytLMxNRf1Z2SMxkGv81OVw0++hTmS/h98oH7ut/GREPBARHw0eqJfzxUp5qtvJAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDmYJvn/6d+Gez21gEAu2Z/tzcAANhz+n8A6D2d9v/GCwBw/9OfA0Dv0f8DQO/R/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDLTp86lU6rf64sF9Py1IXFhZnKhaNTpepMfnahmC9W5s/npyuV6XIpX6zMbvX3ypXK+cmYW7g4XitVa+PVxaUzs5WFudqZc7OF6dKZ0sCeZAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnakuLs0UyuXSvKCj4ED2/v1btkcg2Nmgyw0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH3inwAAAP//CDwgEQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x61, &(0x7f0000000040)}) utime(&(0x7f0000000000)='./file1\x00', 0x0) 1m56.299082426s ago: executing program 3 (id=4725): syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:Dd', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x4) gettid() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) request_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syzkaller\x00', r2) 1m55.744540661s ago: executing program 3 (id=4736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 1m54.814603298s ago: executing program 3 (id=4749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x1ff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d180009"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020601020000000000000000050000000900020073797a310000000005000400020000c90c000300686173683a697000050005001d77aa4f0500010006000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c00000009060101fffffff7000000000200ffff08000940000000390900020073797a3100000000050001000700fe005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x101, 0x4, "de6ad101f90fc489966a85b6be3487f87d7618782129a2baf92c7345b61fa3614ea4ed7a9cdb8d43790f9c833faccb3c0ab427ebb5a86378128a6ae39fd68c07", "6ace017fa3d8d8675bc19c1c1bac3163b751ecba47a5ffbf88d858026dcbbb60", [0x9, 0x7fffffffffffffff]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='GPL\x00', &(0x7f0000000280)='GPL\x00', 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_getoverrun(r7) 1m54.814392708s ago: executing program 44 (id=4749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x1ff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d180009"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020601020000000000000000050000000900020073797a310000000005000400020000c90c000300686173683a697000050005001d77aa4f0500010006000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c00000009060101fffffff7000000000200ffff08000940000000390900020073797a3100000000050001000700fe005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x101, 0x4, "de6ad101f90fc489966a85b6be3487f87d7618782129a2baf92c7345b61fa3614ea4ed7a9cdb8d43790f9c833faccb3c0ab427ebb5a86378128a6ae39fd68c07", "6ace017fa3d8d8675bc19c1c1bac3163b751ecba47a5ffbf88d858026dcbbb60", [0x9, 0x7fffffffffffffff]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='GPL\x00', &(0x7f0000000280)='GPL\x00', 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_getoverrun(r7) 18.065147904s ago: executing program 2 (id=6493): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="61df9c", 0x3}], 0x1, 0x9, 0x6) 18.027061285s ago: executing program 2 (id=6494): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=0x60, 0x0) 17.955076795s ago: executing program 2 (id=6496): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind$unix(r2, &(0x7f0000001200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 17.917341815s ago: executing program 2 (id=6497): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x400000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[], 0x69) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 17.474668058s ago: executing program 2 (id=6499): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x34, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}]}]}, 0x34}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/144, 0x90}, 0xdb2e}], 0x1, 0x2043, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0}]) 16.876037043s ago: executing program 2 (id=6511): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000100000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r3}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03005ed450207483097600000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x34) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f00000004c0)=[{r8}], 0x1, 0x0, 0x0, 0x0) syz_open_pts(r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x47) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r11, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) 16.837118643s ago: executing program 45 (id=6511): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000100000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r3}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03005ed450207483097600000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x34) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f00000004c0)=[{r8}], 0x1, 0x0, 0x0, 0x0) syz_open_pts(r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x47) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r11, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) 2.329076312s ago: executing program 9 (id=6775): syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb084045000078000000000011907800000000e000000200004e2000649078020000000000000000000000fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0c00000000000800e400000000000135f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696f"], 0x0) 2.311412443s ago: executing program 9 (id=6776): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4b0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)}, 0x40000100) 1.460631919s ago: executing program 8 (id=6794): r0 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae50003c00fbff008310001f9f660fcf0e5a05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x8014) (fail_nth: 1) 1.364726229s ago: executing program 9 (id=6796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.194184671s ago: executing program 9 (id=6797): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) close(r0) 1.193842451s ago: executing program 8 (id=6798): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x34, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}]}]}, 0x34}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0}]) 1.092724582s ago: executing program 0 (id=6799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r4, r4, 0x0, 0xfffe80) 1.070680152s ago: executing program 9 (id=6800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="3801000010001307000000000000000020010000000000000000000000000000ff01000000000000000000000000000100000000000000000a00000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d032000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000005e650000000000000000000000000000000000000000000000040000000000000000000000020000000000000000000000000010000000000000000000000000000000000026bd70000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x80000002, 0x0, 0x2, 0x2, 0x20800, 0x3, 0x3, 0x0, 0x0, 0x2, 0x248a, 0xa, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0xf, 0x0, 0x9, 0x5999, 0x1, 0x0, 0x0, 0x2be}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 541.451186ms ago: executing program 0 (id=6803): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="3e5abc6b15f3", 0x0, 0x0, 0x32, 0x2, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'trylock', ' ', 'io'}, 0xb) write$vga_arbiter(r5, 0x0, 0xf) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x10d, 0xf4, &(0x7f0000010140), &(0x7f00000001c0)=0x4) sendto$inet6(r6, 0x0, 0x0, 0x810, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES16=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES16=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 540.192266ms ago: executing program 8 (id=6805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="3801000010001307000000000000000020010000000000000000000000000000ff01000000000000000000000000000100000000000000000a00000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d032000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000005e650000000000000000000000000000000000000000000000040000000000000000000000020000000000000000000000000010000000000000000000000000000000000026bd70000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 539.866905ms ago: executing program 9 (id=6806): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4b0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{0x0}], 0x1}, 0x40000100) 478.731976ms ago: executing program 0 (id=6807): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000100)=""/54, 0x36, 0x2000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000080)=""/19, &(0x7f00000000c0)=0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x94) write$cgroup_int(r4, &(0x7f0000000000)=0x91c, 0x12) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000140)=0x4, 0x2) shutdown(r0, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000010c0), &(0x7f0000000380)=0x8) syz_emit_ethernet(0xaf6, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) 438.940886ms ago: executing program 8 (id=6810): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) close(r0) 410.544657ms ago: executing program 0 (id=6811): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 410.140157ms ago: executing program 6 (id=6812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x3, 0x4, 0x2, 0x4000, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x40) 390.841187ms ago: executing program 0 (id=6813): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000100)=""/54, 0x36, 0x2000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000080)=""/19, &(0x7f00000000c0)=0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x94) write$cgroup_int(r4, &(0x7f0000000000)=0x91c, 0x12) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000140)=0x4, 0x2) shutdown(r0, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000010c0), &(0x7f0000000380)=0x8) syz_emit_ethernet(0xaf6, &(0x7f0000001500)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd600000000ac03a0020010000000000000000000000000000ff020000000000000000000000000001010390787f00000060e1f588000700ffff02000000000000000000000000000100000000000000000000ffffac1414aa2f000f0065000000be50000000000000c910fe880000000000000000000000000001006cb59b07fde02ef047372247fb8d8fdb190d17773f2fc9ee0d09f3b0f4c3c7a5103b69ef1334ad36052c8e8f095a6ca396c4a34272f15f460838204bbbcb8faca0a5206261baf4257782cee69398e6e9be12290e1af28b74ea0a7afd9e5f37398a92303a433593af09ba63dd5a5ff07483081fc66fa06baa5534371c58596fd1e4a77b041752be2f1bc20f3f202a1ec1200f893c39e18d075068dd4e12c9ab7a775caecae7f9d49efd9dfb07fec38e5d21d19c750866a36fdd664dccb558c506d116425a7e76f537f30593f7d2d0db740a68ab3fd316531664c830d0260a40128c63f0cfd8114e1d830e4e3e5ffcbf2e774054e908d67808222ae31341d6ef290a01467b63507c94b6f08a1a47d35d789d521ee6e6b72b03dcdb4813cd7bf229f30bce718a7384523e5b07bf6df7e53089fef48d7f42a2082d59281b4ac815f15f20dd6db22755ed66effcc8d83785893f8c6c306b33a036570606600ae824bb18a1132b831070ce5bab9b137de380387d0c4262fe287e9427b4f2eb21ad3ab13907861e7d6093df5a656374aa6aff7e38582e70d7a7a6c0be3ff4127ba6441b8a6cbcf134b4c617f368408204bb39af3f2e82231e9eb76b64574be9cb462e13cd4c36bcf59af6943d11248c56a0c532dd7606b8065dddd4f0714c46fca389409d67d54cc97ad751ca5bdde2a711e9e76bbb858852d0df49bd7da29a8b8cf1f2a4f0696b8b07a6341593922c4c5b49d4d4faec961d8020f6f242c58f9501bcf1c218c8ad37b478632fd508a24f46e14826c6d364a786118a27a9eb6cfc5900f7a94c2d63817f60736adfd24fb41d3b17e638f3e16979569122f68261076235893edb9469119923e86d794e02ed9ac33dc92f19535a4cff7dd84f5c90d745889073e7fc5596ac5e83c0b543fc458e51d075dc49f910dda79c177ab01f3f39179f2459ba902acbcd1e428d2588aa618f022db37bd6e3bf29b0226e66dfe23bf4c4426f69c658b24dc126c734a549bbbab11ced12a55d61454bc8742e7de5c672aad9587a1d0ac58cf99600b16c701a65aa5027a30f2d568227b9a8aaefab538b60441a856d82276fdde7b985a15e19ea13c3406672d12e76849b6360478412621bea17556a0c13b714fc863a98607076c75a6d589cc48acbdd2b60a62ead90586dac1795ac75f5a3959975e74a69bc887737fd353639f987839e4ef31425a44746192db35632e60e0d82ad11ca3564dbd2dc5dc17b203c9cffc3b58d1c7de0c4b64897a1a4c6df9f3dd9e00ec987bd76118f68757b9838b58cdde9d18ec45380b0f0524afc2065ca0d8b13438856c4c3562c908a25c3cb01242548ed3070ce1da7a341dffee6538e845cbe81e4c2627372d084d168eed646747619b25653836df4b9a20c9006f040a0b02ce8d9e8e444aa0208c952c5b1854b388a122c13b436ef160c18d7c4f46e758ffa2baeaae502ca8ec63da40c3a9fa39f98718c24385ae8262d92d33432a350e88c2db85ff9fd5c0cc8c2b495c0efb6e84a443f91f0d05bc7eae7a78648cd363be9b1132f30ba22169cdb953808424d409678c42832a0e87d553e61123c1073d75baf2c68a169c13de02e9d17307a3f6f6e781b4105c3d1d652dd0050483ca6cbf2569eeba40bf82f999fccd5cc58dd625e29eb7d1cfb482ad86ac6e6c54c0b2287b41f5ebdcbf6fbf8ac206baf3985ab007367e8e334b37577f7ec040d754aeb8b4e0232c1f99bbee6b36e9e744adbcb330ce6d7bc943a4be5d166d4b84e59294af3e759ccd967144c5a072aba15f8e5a454e2d1029b1c6dad8d571a614b774fff846904bc98f31d92d0c7d85e12bd8ea2b764a392e2fb96eda591e3f5d90eea9fa9453af78c965659fcb99b69d8ec0ca33e49a5729f5abd52138b28c43dd57d5af41e980c0edb2154e47ea837b43d51a093013ad240e77998c3953ee3f8eea1ccf6bcdeae9f220fec32251a98dd6e8dc26e726dcf133befb464ca017777ff51d28963339670d0e48d67d9878ae09d1742bab10b4440d083fa77cb2d7bfa056dbbccd50213c8713dce6d043bce10b5c8abffec1d94f304ef837c4a6e5ec45e29f2478c949c3a669a8385799a15d7abafc75e2a60f33c1ad75be676242b90c8bc90ea557d78615b1aea23ab46e382d616a05c824fce4872a0cad937f1fb49da54655545341bfebc8238ba186b5eeaa2edd656b1f98ee25bbe1fb7f510c68e838cab4a5aa58390c94f2572024f65da9b705e117ac90b5f7b6d9dce73d24ebf2b707997f7ecb203a54afdf2c4b7119d25bac205f726615fd48ca6a01d08bb64c7f28790aa0d52aa04dce70e538f6a92a3d4a49785831b53ab5da2c06758bde9c6faba7ace6c6a2b2003b268fa8af12e604a95111b5404f237bbcc35ed2154c01c86c855e9e1c566576c5f90b0d470c93b9be67ff508a2fc45c77c2f80404b42e81077d7688e865530e51e21937ae99d34cda20e8891586d10b87784d5c1d6bca39e06654acf6bec6cb47727bb427d08f227e57b687279c08b3385b00a7093eea45ecbbfbb3f1ac5436a4dea45e72a80f5dac7cc3e2968cf74347925be26e1a9d52d3bd88872f329a142728e55695ba159b79891221739bedbaf208c46ba9ebe03e664456b46a37374c8c7a5f82de847a5d0c55c68f987cf7152d8540d26033ab0253f2b09b4bf547c675c6e787b1b78f26aa9eb343cef4e41f18179f14968787c427de9d17d10b2aa05595c5bd030aaf669390420400cc4e872173d91bfc8c7abba3fb4a92862df148ca04add25d69211bd1aca90bc21ade0f030f4cf93cc5f6a0892a25ea3a7c50c32f9a24a191ebacfaa7eea4437a1c145e54ae8230bf2e9ef065705421f0129529e20500c5fa273d3e558b7708e103b6f672b4355373d8276adf3bb7d7c3aebfe5aa189ebd98048b64f5db7dc4f331fb4c7e79859a3ab89aae8215361db63cf69f7b9f3bfd4fe8c589d8c66387caf0d01fc28e9b381f9235ee9a1ed0f9a7895d8c5d2cbd3293d74d5a442e7943a8e15143ea1fe96f376c29b0a250a9084f84451a90df0c06b10a527867bf02497961b139c1e527e3e0a9e049eb50491b7cdb99d666383c8572304e9da53f7b2dddd8b1f48d4cd2faa905c1b6f0030f0d244b10fe665dbf5a35ced826dc036da0a87366bba2cbd52988a9e84984ec4d7e266268ac8fe838439256f330e9f17257af75322aff261fa0802e4b58a254c56ae62c1c5f74e44731439523384177359461239e51ed40e726130befa9c3b429936f567a8cff8dc17c500791e5c2de8c3207880b27a8922c9371b68592e27c64563a56405d3e87b124341df564cf7aae4b9497488e17b8eb59690a22a5e02d636a4681cc27924e42c308aeb4a43650a5f895b04c95d76dd3c6618e1d2a063fe26afffd2806129e6e6c1746c9d62d76434f9536c78cbcecc17a114e6d3635f046318c1375d852a73bbd9e063559d2fd71ccb75a968bef2aa3e671527eb4d1fbe3e56505153e6edccfa17f1352ce0cc692a78a2b504e73a7201f8dd0c12c198c9ea9a5f049dc829a5396e117c092e848201c730a7170c41f0cdecb2a2b2b1f77195352ca1597c0b4e312ab2f84dee8f468d62724b34dc35df033bdce40d7238c19cbb2526c58568b23349f3317c1466cbfebbe4d558d8c3c870e4246a81b0ff8b8c6be584b3ac1cd33be7f1eb13d7186bfde725ea494fbb0b86052c30e6ae5239cae6e39b13a83288ee570a64878316736546e0d883eebc791b6ab301993effe2869a"], 0x0) 390.098737ms ago: executing program 1 (id=6814): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x34, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}]}]}, 0x34}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0}]) 386.207427ms ago: executing program 8 (id=6815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r4, r4, 0x0, 0xfffe80) 367.189407ms ago: executing program 6 (id=6816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000480)={0x1d, r7}, 0x10) close(r6) 344.256247ms ago: executing program 6 (id=6817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="3801000010001307000000000000000020010000000000000000000000000000ff01000000000000000000000000000100000000000000000a00000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d032000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000005e650000000000000000000000000000000000000000000000040000000000000000000000020000000000000000000000000010000000000000000000000000000000000026bd70000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x80000002, 0x0, 0x2, 0x2, 0x20800, 0x3, 0x3, 0x0, 0x0, 0x2, 0x248a, 0xa, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0xf, 0x0, 0x9, 0x5999, 0x1, 0x0, 0x0, 0x2be}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 262.315248ms ago: executing program 1 (id=6818): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="3e5abc6b15f3", 0x0, 0x0, 0x32, 0x2, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'trylock', ' ', 'io'}, 0xb) write$vga_arbiter(r5, 0x0, 0xf) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x10d, 0xf4, &(0x7f0000010140), &(0x7f00000001c0)=0x4) sendto$inet6(r6, 0x0, 0x0, 0x810, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES16=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES16=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 261.896398ms ago: executing program 8 (id=6819): bpf$MAP_CREATE(0x0, 0x0, 0x50) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x8]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf7}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0x91}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x7}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 261.526398ms ago: executing program 6 (id=6820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="3801000010001307000000000000000020010000000000000000000000000000ff01000000000000000000000000000100000000000000000a00000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d032000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000005e650000000000000000000000000000000000000000000000040000000000000000000000020000000000000000000000000010000000000000000000000000000000000026bd70000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 235.996718ms ago: executing program 0 (id=6821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 185.545008ms ago: executing program 1 (id=6822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000100)=""/54, 0x36, 0x2000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000080)=""/19, &(0x7f00000000c0)=0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x94) write$cgroup_int(r4, &(0x7f0000000000)=0x91c, 0x12) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000140)=0x4, 0x2) shutdown(r0, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000010c0), &(0x7f0000000380)=0x8) syz_emit_ethernet(0xaf6, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) 185.262988ms ago: executing program 6 (id=6823): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 161.177199ms ago: executing program 6 (id=6824): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000300)='[#$@/\x00') io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x1a1081, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x0, 0x2, 0xffdffffe, 0x0, 0x40, 0x2, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x39, 0x71430, 0x0, 0x4, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c3c000000000000000000000000449e6c5fcb02045c000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) close(r3) write$UHID_CREATE2(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a55500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff0100000004000000f4ffffffffff0000"], 0x118) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x932c, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r7, r10, 0x0, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000f55aceee00000c000000050000efbd5cbad554cb12fed0ddf33087da000400000000000013000000000000303000"], 0x0, 0x29, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) syz_usb_disconnect(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r11 = socket(0x1e, 0x4, 0x0) r12 = socket(0x1e, 0x2, 0x0) r13 = dup3(r12, r11, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x5, 0x1, 0x0, 0x1, 0x2, 0x4}, 0x20) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, 0x0, 0x0) 78.302509ms ago: executing program 1 (id=6825): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) close(r0) 60.825359ms ago: executing program 1 (id=6826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x3, 0x4, 0x2, 0x4000, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x40) 0s ago: executing program 1 (id=6827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) lseek(r1, 0x3, 0x2) getdents(r1, 0x0, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xd, 0x17, 0x13c, &(0x7f0000000300)="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"}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) kernel console output (not intermixed with test programs): o access it [ 341.310389][T20344] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6095: Corrupt directory, running e2fsck is recommended [ 341.323523][T20344] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 341.331879][T20344] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6095: corrupted in-inode xattr: invalid ea_ino [ 341.346964][T20344] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6095: couldn't read orphan inode 15 (err -117) [ 341.362816][T20344] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6095: corrupted xattr entries [ 341.401891][T20351] loop9: detected capacity change from 0 to 512 [ 341.410330][T20351] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 341.421975][T20351] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 341.432136][T20351] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6098: Corrupt directory, running e2fsck is recommended [ 341.445316][T20351] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 341.454808][T20351] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6098: corrupted in-inode xattr: invalid ea_ino [ 341.468799][T20351] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6098: couldn't read orphan inode 15 (err -117) [ 341.663040][T20370] loop6: detected capacity change from 0 to 1024 [ 341.669917][T20370] EXT4-fs: Ignoring removed nobh option [ 341.675725][T20370] EXT4-fs: Ignoring removed bh option [ 341.760420][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6106'. [ 341.769375][T20370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6106'. [ 341.778393][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6106'. [ 342.795673][T20425] loop9: detected capacity change from 0 to 512 [ 342.804511][T20425] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 342.816182][T20425] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 342.826425][T20425] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6129: Corrupt directory, running e2fsck is recommended [ 342.841939][T20425] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 342.850709][T20425] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6129: corrupted in-inode xattr: invalid ea_ino [ 342.865756][T20425] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6129: couldn't read orphan inode 15 (err -117) [ 342.881691][T20425] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6129: corrupted xattr entries [ 342.905099][ T30] kauditd_printk_skb: 513 callbacks suppressed [ 342.905114][ T30] audit: type=1400 audit(1741928637.893:28129): avc: denied { bind } for pid=20433 comm="syz.0.6133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 342.930898][ T30] audit: type=1400 audit(1741928637.893:28130): avc: denied { name_bind } for pid=20433 comm="syz.0.6133" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 342.952898][ T30] audit: type=1400 audit(1741928637.893:28131): avc: denied { node_bind } for pid=20433 comm="syz.0.6133" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 343.043130][T20444] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 343.050818][T20444] audit: out of memory in audit_log_start [ 343.056621][ T30] audit: type=1400 audit(1741928638.024:28132): avc: denied { read } for pid=20443 comm="syz.6.6137" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 343.079916][ T30] audit: type=1400 audit(1741928638.024:28133): avc: denied { open } for pid=20443 comm="syz.6.6137" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 343.154948][ T30] audit: type=1326 audit(1741928638.117:28134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.1.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae6b0d169 code=0x7ffc0000 [ 343.158297][T20457] loop6: detected capacity change from 0 to 512 [ 343.186648][ T30] audit: type=1326 audit(1741928638.117:28135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.1.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae6b0d169 code=0x7ffc0000 [ 343.213912][ T30] audit: type=1326 audit(1741928638.155:28136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.1.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8ae6b0d169 code=0x7ffc0000 [ 343.216118][T20453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.239776][T20457] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 343.254875][T20453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.278942][T20457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 343.286934][T20457] System zones: 1-12 [ 343.292223][T20457] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6142: corrupted in-inode xattr: e_value size too large [ 343.306565][T20457] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6142: couldn't read orphan inode 15 (err -117) [ 343.492828][T20470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.501391][T20470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.878818][T20474] loop1: detected capacity change from 0 to 512 [ 343.888360][T20474] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.001871][T20485] IPVS: set_ctl: invalid protocol: 50 172.30.1.10:20002 [ 344.102863][T20488] loop1: detected capacity change from 0 to 512 [ 344.109677][T20488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.151603][T20488] EXT4-fs (loop1): 1 truncate cleaned up [ 344.217118][T20497] loop2: detected capacity change from 0 to 512 [ 344.237176][T20497] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.253285][T20497] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.6156: corrupted inode contents [ 344.261081][T20504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.266735][T20497] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.6156: mark_inode_dirty error [ 344.273808][T20504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.285708][T20497] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.6156: corrupted inode contents [ 344.308694][T20505] syz.0.6158: attempt to access beyond end of device [ 344.308694][T20505] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 344.331111][T20497] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.6156: mark_inode_dirty error [ 344.354198][T20497] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.6156: mark inode dirty (error -117) [ 344.368326][T20497] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 344.441301][T20510] loop2: detected capacity change from 0 to 1024 [ 344.448228][T20510] EXT4-fs: Ignoring removed nobh option [ 344.453935][T20510] EXT4-fs: Ignoring removed bh option [ 344.538148][T20514] loop2: detected capacity change from 0 to 1024 [ 344.545004][T20514] EXT4-fs: Ignoring removed nobh option [ 344.550750][T20514] EXT4-fs: Ignoring removed bh option [ 344.645021][T20518] loop2: detected capacity change from 0 to 512 [ 344.658171][T20518] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.728782][T20554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.737553][T20554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.985656][T20583] FAULT_INJECTION: forcing a failure. [ 345.985656][T20583] name failslab, interval 1, probability 0, space 0, times 0 [ 345.998425][T20583] CPU: 0 UID: 0 PID: 20583 Comm: syz.1.6190 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 345.998460][T20583] Tainted: [W]=WARN [ 345.998469][T20583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.998484][T20583] Call Trace: [ 345.998492][T20583] [ 345.998502][T20583] dump_stack_lvl+0xf2/0x150 [ 345.998534][T20583] dump_stack+0x15/0x1a [ 345.998592][T20583] should_fail_ex+0x24a/0x260 [ 345.998630][T20583] should_failslab+0x8f/0xb0 [ 345.998668][T20583] kmem_cache_alloc_noprof+0x52/0x320 [ 345.998690][T20583] ? getname_flags+0x81/0x3b0 [ 345.998796][T20583] getname_flags+0x81/0x3b0 [ 345.998839][T20583] getname+0x17/0x20 [ 345.998859][T20583] path_removexattrat+0xf0/0x4b0 [ 345.998931][T20583] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.998977][T20583] __x64_sys_removexattr+0x38/0x50 [ 345.999001][T20583] x64_sys_call+0x3ea/0x2dc0 [ 345.999064][T20583] do_syscall_64+0xc9/0x1c0 [ 345.999102][T20583] ? clear_bhb_loop+0x55/0xb0 [ 345.999210][T20583] ? clear_bhb_loop+0x55/0xb0 [ 345.999318][T20583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.999348][T20583] RIP: 0033:0x7f8ae6b0d169 [ 345.999443][T20583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.999465][T20583] RSP: 002b:00007f8ae5177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 345.999484][T20583] RAX: ffffffffffffffda RBX: 00007f8ae6d25fa0 RCX: 00007f8ae6b0d169 [ 345.999496][T20583] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000400000000040 [ 345.999515][T20583] RBP: 00007f8ae5177090 R08: 0000000000000000 R09: 0000000000000000 [ 345.999529][T20583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.999543][T20583] R13: 0000000000000000 R14: 00007f8ae6d25fa0 R15: 00007fffe576a8c8 [ 345.999568][T20583] [ 346.205602][T20586] loop6: detected capacity change from 0 to 512 [ 346.258969][T20586] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 346.270615][T20586] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 346.281141][T20586] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6191: Corrupt directory, running e2fsck is recommended [ 346.289145][T20593] loop1: detected capacity change from 0 to 2048 [ 346.296253][T20586] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 346.309057][T20586] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6191: corrupted in-inode xattr: invalid ea_ino [ 346.322741][T20586] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6191: couldn't read orphan inode 15 (err -117) [ 346.337828][T20586] EXT4-fs error (device loop6): ext4_xattr_set_entry:1668: inode #2: comm syz.6.6191: corrupted xattr entries [ 346.845850][T20629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.858648][T20629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.869650][T20630] syz.1.6207: attempt to access beyond end of device [ 346.869650][T20630] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 347.158745][T20646] loop1: detected capacity change from 0 to 512 [ 347.174443][T20647] loop9: detected capacity change from 0 to 2048 [ 347.193771][T20646] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 347.205358][T20646] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 347.215452][T20646] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.6214: Corrupt directory, running e2fsck is recommended [ 347.255883][T20646] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 347.333659][T20646] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.6214: corrupted in-inode xattr: invalid ea_ino [ 347.356058][T20655] loop9: detected capacity change from 0 to 512 [ 347.399908][T20655] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6219: corrupted in-inode xattr: invalid ea_ino [ 347.415440][T20646] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.6214: couldn't read orphan inode 15 (err -117) [ 347.425336][T20655] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6219: couldn't read orphan inode 15 (err -117) [ 347.663955][T20655] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.6219: invalid indirect mapped block 234881024 (level 0) [ 347.796413][T20642] EXT4-fs error (device loop1): ext4_xattr_set_entry:1668: inode #2: comm syz.1.6214: corrupted xattr entries [ 347.897198][T20664] loop2: detected capacity change from 0 to 512 [ 347.928033][T20664] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6221: corrupted in-inode xattr: invalid ea_ino [ 347.942924][T20664] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.6221: couldn't read orphan inode 15 (err -117) [ 347.965236][T20672] syz.9.6222: attempt to access beyond end of device [ 347.965236][T20672] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 348.005273][T20664] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.6221: invalid indirect mapped block 234881024 (level 0) [ 348.049008][T20678] loop1: detected capacity change from 0 to 512 [ 348.084221][T20678] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.165341][T20689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.185842][T20689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.333031][T20708] loop1: detected capacity change from 0 to 2048 [ 348.603242][ T30] kauditd_printk_skb: 730 callbacks suppressed [ 348.603260][ T30] audit: type=1400 audit(1741928643.225:28867): avc: denied { ioctl } for pid=20724 comm="syz.1.6245" path="socket:[76095]" dev="sockfs" ino=76095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 348.638120][ T30] audit: type=1400 audit(1741928643.253:28868): avc: denied { create } for pid=20724 comm="syz.1.6245" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.665358][ T30] audit: type=1400 audit(1741928643.253:28869): avc: denied { write } for pid=20724 comm="syz.1.6245" name="file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.687997][ T30] audit: type=1400 audit(1741928643.253:28870): avc: denied { open } for pid=20724 comm="syz.1.6245" path="/79/file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.710881][ T30] audit: type=1400 audit(1741928643.253:28871): avc: denied { ioctl } for pid=20724 comm="syz.1.6245" path="/79/file0" dev="tmpfs" ino=443 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.834188][ T30] audit: type=1400 audit(1741928643.430:28872): avc: denied { unlink } for pid=19489 comm="syz-executor" name="file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 348.943023][T20730] loop1: detected capacity change from 0 to 1024 [ 348.969306][T20730] EXT4-fs: inline encryption not supported [ 348.982965][T20730] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.066209][T20730] EXT4-fs error (device loop1): ext4_map_blocks:705: inode #3: block 1: comm syz.1.6246: lblock 1 mapped to illegal pblock 1 (length 1) [ 349.080446][T20730] Quota error (device loop1): write_blk: dquota write failed [ 349.088049][T20730] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 349.099375][T20730] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.6246: Failed to acquire dquot type 0 [ 349.113201][T20730] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.6246: Freeing blocks not in datazone - block = 0, count = 4096 [ 349.128247][T20730] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6246: Invalid inode bitmap blk 0 in block_group 0 [ 349.141703][T20730] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 349.151530][ T3691] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 349.166104][T20730] EXT4-fs (loop1): 1 orphan inode deleted [ 349.167892][ T3691] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 349.180432][ T3691] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:14: Failed to release dquot type 0 [ 349.184186][T20730] EXT4-fs mount: 98 callbacks suppressed [ 349.184205][T20730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.222366][ T30] audit: type=1400 audit(1741928643.805:28873): avc: denied { remount } for pid=20728 comm="syz.1.6246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 349.243620][T20730] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 349.312260][T20730] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.6246: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 349.348649][T20753] loop2: detected capacity change from 0 to 512 [ 349.349013][T19489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.368984][T20753] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6256: corrupted in-inode xattr: invalid ea_ino [ 349.386875][T20753] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.6256: couldn't read orphan inode 15 (err -117) [ 349.400221][T20753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.421812][T20753] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.6256: invalid indirect mapped block 234881024 (level 0) [ 349.528087][T20763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.571251][T16470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.582362][T20763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.642110][T20770] loop2: detected capacity change from 0 to 2048 [ 349.765857][T20776] syz.2.6263: attempt to access beyond end of device [ 349.765857][T20776] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 350.416972][T20793] loop9: detected capacity change from 0 to 512 [ 350.464754][T20793] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.484994][T20793] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.584518][T20804] netlink: 'syz.1.6273': attribute type 30 has an invalid length. [ 350.602443][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.735821][T20813] syz.9.6274: attempt to access beyond end of device [ 350.735821][T20813] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 350.752688][T20815] loop1: detected capacity change from 0 to 164 [ 350.777799][T20815] ISOFS: unable to read i-node block [ 350.783212][T20815] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 350.906804][T20826] loop6: detected capacity change from 0 to 512 [ 350.926348][T20826] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 350.937989][T20826] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 350.948127][T20826] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6281: Corrupt directory, running e2fsck is recommended [ 350.964879][T20826] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 350.986177][T20826] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6281: corrupted in-inode xattr: invalid ea_ino [ 351.027198][T20826] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6281: couldn't read orphan inode 15 (err -117) [ 351.082330][T20826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.103615][T20826] EXT4-fs error (device loop6): ext4_xattr_set_entry:1668: inode #2: comm syz.6.6281: corrupted xattr entries [ 351.171886][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.184750][T20840] loop9: detected capacity change from 0 to 512 [ 351.201692][T20840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.233128][T20840] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.414923][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.128354][T20882] FAULT_INJECTION: forcing a failure. [ 352.128354][T20882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.141582][T20882] CPU: 0 UID: 0 PID: 20882 Comm: syz.6.6300 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 352.141698][T20882] Tainted: [W]=WARN [ 352.141707][T20882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.141721][T20882] Call Trace: [ 352.141729][T20882] [ 352.141758][T20882] dump_stack_lvl+0xf2/0x150 [ 352.141792][T20882] dump_stack+0x15/0x1a [ 352.141817][T20882] should_fail_ex+0x24a/0x260 [ 352.141898][T20882] should_fail+0xb/0x10 [ 352.141924][T20882] should_fail_usercopy+0x1a/0x20 [ 352.142047][T20882] _copy_from_user+0x1c/0xa0 [ 352.142074][T20882] memdup_user+0x64/0xc0 [ 352.142161][T20882] strndup_user+0x68/0xa0 [ 352.142196][T20882] __se_sys_mount+0x4e/0x2d0 [ 352.142233][T20882] ? fput+0x1c4/0x200 [ 352.142255][T20882] ? ksys_write+0x176/0x1b0 [ 352.142354][T20882] __x64_sys_mount+0x67/0x80 [ 352.142415][T20882] x64_sys_call+0x2c84/0x2dc0 [ 352.142447][T20882] do_syscall_64+0xc9/0x1c0 [ 352.142499][T20882] ? clear_bhb_loop+0x55/0xb0 [ 352.142563][T20882] ? clear_bhb_loop+0x55/0xb0 [ 352.142596][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.142629][T20882] RIP: 0033:0x7ff5ee17d169 [ 352.142708][T20882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.142795][T20882] RSP: 002b:00007ff5ec7e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.142816][T20882] RAX: ffffffffffffffda RBX: 00007ff5ee395fa0 RCX: 00007ff5ee17d169 [ 352.142831][T20882] RDX: 0000400000000280 RSI: 0000400000000140 RDI: 0000000000000000 [ 352.142845][T20882] RBP: 00007ff5ec7e1090 R08: 00004000000002c0 R09: 0000000000000000 [ 352.142866][T20882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.142877][T20882] R13: 0000000000000000 R14: 00007ff5ee395fa0 R15: 00007ffd65dca548 [ 352.142910][T20882] [ 352.382515][T20888] loop6: detected capacity change from 0 to 512 [ 352.441183][T20888] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 352.452787][T20888] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 352.462995][T20888] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6303: Corrupt directory, running e2fsck is recommended [ 352.480501][T20896] loop2: detected capacity change from 0 to 2048 [ 352.482507][T20888] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 352.522885][T20888] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6303: corrupted in-inode xattr: invalid ea_ino [ 352.538217][T20888] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6303: couldn't read orphan inode 15 (err -117) [ 352.561607][T20888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.624395][T20907] FAULT_INJECTION: forcing a failure. [ 352.624395][T20907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.637529][T20907] CPU: 0 UID: 0 PID: 20907 Comm: syz.2.6309 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 352.637634][T20907] Tainted: [W]=WARN [ 352.637643][T20907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.637659][T20907] Call Trace: [ 352.637666][T20907] [ 352.637675][T20907] dump_stack_lvl+0xf2/0x150 [ 352.637725][T20907] dump_stack+0x15/0x1a [ 352.637752][T20907] should_fail_ex+0x24a/0x260 [ 352.637790][T20907] should_fail+0xb/0x10 [ 352.637823][T20907] should_fail_usercopy+0x1a/0x20 [ 352.637890][T20907] _copy_to_user+0x20/0xa0 [ 352.637940][T20907] simple_read_from_buffer+0xa0/0x110 [ 352.637976][T20907] proc_fail_nth_read+0xf9/0x140 [ 352.638014][T20907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.638047][T20907] vfs_read+0x19b/0x6f0 [ 352.638133][T20907] ? __rcu_read_unlock+0x4e/0x70 [ 352.638161][T20907] ? __fget_files+0x17c/0x1c0 [ 352.638205][T20907] ksys_read+0xe8/0x1b0 [ 352.638276][T20907] __x64_sys_read+0x42/0x50 [ 352.638302][T20907] x64_sys_call+0x2874/0x2dc0 [ 352.638329][T20907] do_syscall_64+0xc9/0x1c0 [ 352.638439][T20907] ? clear_bhb_loop+0x55/0xb0 [ 352.638467][T20907] ? clear_bhb_loop+0x55/0xb0 [ 352.638502][T20907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.638534][T20907] RIP: 0033:0x7f4ea7cabb7c [ 352.638549][T20907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 352.638568][T20907] RSP: 002b:00007f4ea6317030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.638639][T20907] RAX: ffffffffffffffda RBX: 00007f4ea7ec5fa0 RCX: 00007f4ea7cabb7c [ 352.638654][T20907] RDX: 000000000000000f RSI: 00007f4ea63170a0 RDI: 0000000000000003 [ 352.638666][T20907] RBP: 00007f4ea6317090 R08: 0000000000000000 R09: 0000000000000000 [ 352.638678][T20907] R10: 0000400000ffb000 R11: 0000000000000246 R12: 0000000000000001 [ 352.638691][T20907] R13: 0000000000000001 R14: 00007f4ea7ec5fa0 R15: 00007ffc47a2a7b8 [ 352.638714][T20907] [ 352.877730][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.063437][T20925] loop6: detected capacity change from 0 to 1024 [ 353.070656][T20925] EXT4-fs: Ignoring removed nobh option [ 353.076238][T20925] EXT4-fs: Ignoring removed bh option [ 353.179297][T20925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.533567][T20936] loop9: detected capacity change from 0 to 2048 [ 353.693362][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.820122][T20942] FAULT_INJECTION: forcing a failure. [ 353.820122][T20942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.833357][T20942] CPU: 0 UID: 0 PID: 20942 Comm: syz.9.6322 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 353.833386][T20942] Tainted: [W]=WARN [ 353.833470][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.833482][T20942] Call Trace: [ 353.833488][T20942] [ 353.833496][T20942] dump_stack_lvl+0xf2/0x150 [ 353.833525][T20942] dump_stack+0x15/0x1a [ 353.833544][T20942] should_fail_ex+0x24a/0x260 [ 353.833576][T20942] should_fail+0xb/0x10 [ 353.833607][T20942] should_fail_usercopy+0x1a/0x20 [ 353.833642][T20942] _copy_from_user+0x1c/0xa0 [ 353.833672][T20942] memdup_user+0x64/0xc0 [ 353.833700][T20942] strndup_user+0x68/0xa0 [ 353.833761][T20942] __se_sys_mount+0x4e/0x2d0 [ 353.833872][T20942] ? fput+0x1c4/0x200 [ 353.833893][T20942] ? ksys_write+0x176/0x1b0 [ 353.833966][T20942] __x64_sys_mount+0x67/0x80 [ 353.833998][T20942] x64_sys_call+0x2c84/0x2dc0 [ 353.834094][T20942] do_syscall_64+0xc9/0x1c0 [ 353.834126][T20942] ? clear_bhb_loop+0x55/0xb0 [ 353.834155][T20942] ? clear_bhb_loop+0x55/0xb0 [ 353.834185][T20942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.834240][T20942] RIP: 0033:0x7fc9e86ad169 [ 353.834254][T20942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.834270][T20942] RSP: 002b:00007fc9e6d11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 353.834289][T20942] RAX: ffffffffffffffda RBX: 00007fc9e88c5fa0 RCX: 00007fc9e86ad169 [ 353.834300][T20942] RDX: 0000400000000280 RSI: 0000400000000140 RDI: 0000000000000000 [ 353.834311][T20942] RBP: 00007fc9e6d11090 R08: 00004000000002c0 R09: 0000000000000000 [ 353.834321][T20942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.834333][T20942] R13: 0000000000000000 R14: 00007fc9e88c5fa0 R15: 00007ffc3a612918 [ 353.834436][T20942] [ 354.027723][T20944] 9pnet_fd: Insufficient options for proto=fd [ 354.051668][T20946] FAULT_INJECTION: forcing a failure. [ 354.051668][T20946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.064920][T20946] CPU: 0 UID: 0 PID: 20946 Comm: syz.1.6324 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 354.064955][T20946] Tainted: [W]=WARN [ 354.064964][T20946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 354.064977][T20946] Call Trace: [ 354.064984][T20946] [ 354.064992][T20946] dump_stack_lvl+0xf2/0x150 [ 354.065103][T20946] dump_stack+0x15/0x1a [ 354.065129][T20946] should_fail_ex+0x24a/0x260 [ 354.065166][T20946] should_fail+0xb/0x10 [ 354.065197][T20946] should_fail_usercopy+0x1a/0x20 [ 354.065273][T20946] _copy_to_user+0x20/0xa0 [ 354.065296][T20946] simple_read_from_buffer+0xa0/0x110 [ 354.065340][T20946] proc_fail_nth_read+0xf9/0x140 [ 354.065375][T20946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.065408][T20946] vfs_read+0x19b/0x6f0 [ 354.065445][T20946] ? __rcu_read_unlock+0x4e/0x70 [ 354.065469][T20946] ? __fget_files+0x17c/0x1c0 [ 354.065504][T20946] ksys_read+0xe8/0x1b0 [ 354.065541][T20946] __x64_sys_read+0x42/0x50 [ 354.065610][T20946] x64_sys_call+0x2874/0x2dc0 [ 354.065650][T20946] do_syscall_64+0xc9/0x1c0 [ 354.065683][T20946] ? clear_bhb_loop+0x55/0xb0 [ 354.065846][T20946] ? clear_bhb_loop+0x55/0xb0 [ 354.065875][T20946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.065906][T20946] RIP: 0033:0x7f8ae6b0bb7c [ 354.065924][T20946] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.065944][T20946] RSP: 002b:00007f8ae5177030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.065963][T20946] RAX: ffffffffffffffda RBX: 00007f8ae6d25fa0 RCX: 00007f8ae6b0bb7c [ 354.065978][T20946] RDX: 000000000000000f RSI: 00007f8ae51770a0 RDI: 0000000000000006 [ 354.066038][T20946] RBP: 00007f8ae5177090 R08: 0000000000000000 R09: 0000000000000000 [ 354.066052][T20946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.066064][T20946] R13: 0000000000000000 R14: 00007f8ae6d25fa0 R15: 00007fffe576a8c8 [ 354.066086][T20946] [ 354.318230][ T30] kauditd_printk_skb: 457 callbacks suppressed [ 354.318244][ T30] audit: type=1400 audit(1741928648.566:29331): avc: denied { create } for pid=20953 comm="syz.2.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 354.344579][ T30] audit: type=1400 audit(1741928648.566:29332): avc: denied { setopt } for pid=20953 comm="syz.2.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 354.387385][ T30] audit: type=1400 audit(1741928648.631:29333): avc: denied { create } for pid=20951 comm="syz.1.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 354.407404][ T30] audit: type=1400 audit(1741928648.631:29334): avc: denied { write } for pid=20951 comm="syz.1.6327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 354.429660][ T30] audit: type=1400 audit(1741928648.669:29335): avc: denied { setopt } for pid=20959 comm="syz.9.6331" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.466206][ T30] audit: type=1326 audit(1741928648.697:29336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20959 comm="syz.9.6331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9e86ad169 code=0x0 [ 354.569715][ T30] audit: type=1400 audit(1741928648.800:29337): avc: denied { audit_write } for pid=20959 comm="syz.9.6331" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 354.739194][ T30] audit: type=1107 audit(1741928648.818:29338): pid=20959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 355.110391][T20989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6338'. [ 355.165235][ T30] audit: type=1400 audit(1741928649.351:29339): avc: denied { ioctl } for pid=20990 comm="syz.6.6341" path="socket:[77427]" dev="sockfs" ino=77427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.425749][ T30] audit: type=1400 audit(1741928649.389:29340): avc: denied { create } for pid=20990 comm="syz.6.6341" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 355.835170][T21018] FAULT_INJECTION: forcing a failure. [ 355.835170][T21018] name failslab, interval 1, probability 0, space 0, times 0 [ 355.847963][T21018] CPU: 1 UID: 0 PID: 21018 Comm: syz.2.6350 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 355.848073][T21018] Tainted: [W]=WARN [ 355.848081][T21018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.848095][T21018] Call Trace: [ 355.848102][T21018] [ 355.848110][T21018] dump_stack_lvl+0xf2/0x150 [ 355.848205][T21018] dump_stack+0x15/0x1a [ 355.848226][T21018] should_fail_ex+0x24a/0x260 [ 355.848258][T21018] should_failslab+0x8f/0xb0 [ 355.848295][T21018] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 355.848327][T21018] ? sidtab_sid2str_get+0xb8/0x140 [ 355.848435][T21018] kmemdup_noprof+0x2b/0x70 [ 355.848465][T21018] sidtab_sid2str_get+0xb8/0x140 [ 355.848505][T21018] security_sid_to_context_core+0x1eb/0x2f0 [ 355.848557][T21018] security_sid_to_context+0x27/0x30 [ 355.848594][T21018] selinux_lsmprop_to_secctx+0x68/0xf0 [ 355.848636][T21018] security_lsmprop_to_secctx+0x40/0x80 [ 355.848659][T21018] audit_log_task_context+0x76/0x180 [ 355.848733][T21018] audit_log_task+0xf9/0x250 [ 355.848788][T21018] audit_seccomp+0x68/0x130 [ 355.848888][T21018] __seccomp_filter+0x6fa/0x1180 [ 355.848919][T21018] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 355.848956][T21018] ? vfs_write+0x644/0x920 [ 355.849042][T21018] __secure_computing+0x9f/0x1c0 [ 355.849130][T21018] syscall_trace_enter+0xd1/0x1f0 [ 355.849155][T21018] ? fpregs_assert_state_consistent+0x83/0xa0 [ 355.849182][T21018] do_syscall_64+0xaa/0x1c0 [ 355.849257][T21018] ? clear_bhb_loop+0x55/0xb0 [ 355.849290][T21018] ? clear_bhb_loop+0x55/0xb0 [ 355.849321][T21018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.849382][T21018] RIP: 0033:0x7f4ea7cad169 [ 355.849399][T21018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.849417][T21018] RSP: 002b:00007f4ea6317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 355.849436][T21018] RAX: ffffffffffffffda RBX: 00007f4ea7ec5fa0 RCX: 00007f4ea7cad169 [ 355.849451][T21018] RDX: 0000000000034000 RSI: 0000400000000500 RDI: 0000000000000003 [ 355.849467][T21018] RBP: 00007f4ea6317090 R08: 0000400000000140 R09: 000000000000001c [ 355.849482][T21018] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 355.849497][T21018] R13: 0000000000000000 R14: 00007f4ea7ec5fa0 R15: 00007ffc47a2a7b8 [ 355.849519][T21018] [ 356.246508][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6353'. [ 356.287970][T21025] loop9: detected capacity change from 0 to 512 [ 356.332275][T21025] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6352: corrupted in-inode xattr: invalid ea_ino [ 356.355347][T21025] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6352: couldn't read orphan inode 15 (err -117) [ 356.373839][T21025] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.436706][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.829620][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6361'. [ 356.840025][T21042] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 356.974901][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6365'. [ 357.006529][T21053] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.069834][T21053] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.134472][T21053] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.192749][T21053] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.276252][T21053] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.288231][T21053] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.302083][T21053] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.323511][T21053] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.381891][T21073] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6373'. [ 357.803763][T21087] loop9: detected capacity change from 0 to 512 [ 357.813433][T21087] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 358.021861][T21087] EXT4-fs (loop9): 1 truncate cleaned up [ 358.028990][T21087] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.552839][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.029337][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6384'. [ 359.051857][T21109] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.102093][T21109] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.121833][T21112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.130856][T21112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.176132][T21109] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.250871][T21109] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.342530][T21109] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.371448][T21109] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.392123][T21109] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.423163][T21109] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.484382][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6390'. [ 359.504783][T21123] netlink: 39 bytes leftover after parsing attributes in process `syz.2.6390'. [ 359.558804][T21120] hub 6-0:1.0: USB hub found [ 359.563661][T21120] hub 6-0:1.0: 8 ports detected [ 359.615980][T21127] loop9: detected capacity change from 0 to 512 [ 359.649229][T21127] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 359.671058][T21127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 359.679211][T21127] System zones: 1-12 [ 359.686810][T21127] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6392: corrupted in-inode xattr: e_value size too large [ 359.702099][ T30] kauditd_printk_skb: 254 callbacks suppressed [ 359.702115][ T30] audit: type=1326 audit(1741928653.159:29594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.732532][ T30] audit: type=1326 audit(1741928653.159:29595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.756290][ T30] audit: type=1326 audit(1741928653.159:29596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.779916][ T30] audit: type=1326 audit(1741928653.159:29597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.803594][ T30] audit: type=1326 audit(1741928653.159:29598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.827259][ T30] audit: type=1326 audit(1741928653.159:29599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.850930][ T30] audit: type=1326 audit(1741928653.159:29600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.874630][ T30] audit: type=1326 audit(1741928653.159:29601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.898409][ T30] audit: type=1326 audit(1741928653.159:29602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.922048][ T30] audit: type=1326 audit(1741928653.159:29603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz.0.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 359.974830][T21127] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6392: couldn't read orphan inode 15 (err -117) [ 360.016192][T21127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.058179][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.108046][T21153] loop9: detected capacity change from 0 to 512 [ 360.119959][T21153] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6404: corrupted in-inode xattr: invalid ea_ino [ 360.145061][T21153] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6404: couldn't read orphan inode 15 (err -117) [ 360.162030][T21161] loop2: detected capacity change from 0 to 1024 [ 360.175918][T21153] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.194821][T21161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.238502][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.267947][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 360.275742][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 360.283562][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.291336][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.299125][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.306801][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.314668][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.322417][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.330097][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.337760][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.345463][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.353214][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.361377][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.369088][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.376886][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.384590][ T10] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 360.394236][T16470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.403819][ T10] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 360.434525][T21170] loop9: detected capacity change from 0 to 512 [ 360.441777][T21170] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 360.452597][T21170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 360.463084][T21170] System zones: 1-12 [ 360.467326][T21170] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6410: corrupted in-inode xattr: e_value size too large [ 360.481931][T21170] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6410: couldn't read orphan inode 15 (err -117) [ 360.496490][T21170] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.523193][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.568112][T21177] netlink: 'syz.9.6412': attribute type 1 has an invalid length. [ 360.584950][T21177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.619914][T21177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.627190][T21177] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 360.640521][T21177] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 360.859766][T21186] FAULT_INJECTION: forcing a failure. [ 360.859766][T21186] name failslab, interval 1, probability 0, space 0, times 0 [ 360.872576][T21186] CPU: 1 UID: 0 PID: 21186 Comm: syz.9.6415 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 360.872611][T21186] Tainted: [W]=WARN [ 360.872618][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.872633][T21186] Call Trace: [ 360.872640][T21186] [ 360.872649][T21186] dump_stack_lvl+0xf2/0x150 [ 360.872733][T21186] dump_stack+0x15/0x1a [ 360.872824][T21186] should_fail_ex+0x24a/0x260 [ 360.872871][T21186] should_failslab+0x8f/0xb0 [ 360.872907][T21186] kmem_cache_alloc_noprof+0x52/0x320 [ 360.873007][T21186] ? audit_log_start+0x34c/0x6b0 [ 360.873040][T21186] audit_log_start+0x34c/0x6b0 [ 360.873172][T21186] audit_seccomp+0x4b/0x130 [ 360.873208][T21186] __seccomp_filter+0x6fa/0x1180 [ 360.873239][T21186] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 360.873297][T21186] ? vfs_write+0x644/0x920 [ 360.873336][T21186] __secure_computing+0x9f/0x1c0 [ 360.873363][T21186] syscall_trace_enter+0xd1/0x1f0 [ 360.873393][T21186] ? fpregs_assert_state_consistent+0x83/0xa0 [ 360.873416][T21186] do_syscall_64+0xaa/0x1c0 [ 360.873450][T21186] ? clear_bhb_loop+0x55/0xb0 [ 360.873476][T21186] ? clear_bhb_loop+0x55/0xb0 [ 360.873556][T21186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.873588][T21186] RIP: 0033:0x7fc9e86ad169 [ 360.873606][T21186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.873624][T21186] RSP: 002b:00007fc9e6d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 360.873642][T21186] RAX: ffffffffffffffda RBX: 00007fc9e88c5fa0 RCX: 00007fc9e86ad169 [ 360.873705][T21186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 360.873719][T21186] RBP: 00007fc9e6d11090 R08: 0000000000000000 R09: 0000000000000000 [ 360.873733][T21186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.873749][T21186] R13: 0000000000000000 R14: 00007fc9e88c5fa0 R15: 00007ffc3a612918 [ 360.873767][T21186] [ 361.139101][T21196] loop6: detected capacity change from 0 to 512 [ 361.162287][T21196] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6418: corrupted in-inode xattr: invalid ea_ino [ 361.187398][T21196] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6418: couldn't read orphan inode 15 (err -117) [ 361.202210][T21204] netlink: 168 bytes leftover after parsing attributes in process `syz.9.6422'. [ 361.247775][T21196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.281426][T21196] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6418: invalid indirect mapped block 234881024 (level 0) [ 361.378876][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.531091][T21227] syz.9.6427: attempt to access beyond end of device [ 361.531091][T21227] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 361.776222][T21233] loop9: detected capacity change from 0 to 512 [ 361.827171][T21233] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6433: corrupted in-inode xattr: invalid ea_ino [ 361.842119][T21233] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6433: couldn't read orphan inode 15 (err -117) [ 361.854641][T21233] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.880394][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.937010][T21238] loop6: detected capacity change from 0 to 512 [ 361.944082][T21238] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 361.970347][T21238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 361.982047][T21238] System zones: 1-12 [ 361.989625][T21238] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6434: corrupted in-inode xattr: e_value size too large [ 362.012154][T21243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.021837][T21243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.030136][T21238] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6434: couldn't read orphan inode 15 (err -117) [ 362.043850][T21238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.087008][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.108569][T21293] syz.2.6454: attempt to access beyond end of device [ 363.108569][T21293] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 363.238912][T21296] loop9: detected capacity change from 0 to 512 [ 363.258353][T21296] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 363.269958][T21296] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 363.280265][T21296] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6457: Corrupt directory, running e2fsck is recommended [ 363.293847][T21296] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 363.303676][T21296] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6457: corrupted in-inode xattr: invalid ea_ino [ 363.317427][T21296] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6457: couldn't read orphan inode 15 (err -117) [ 363.331282][T21296] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.376074][T21296] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6457: corrupted xattr entries [ 363.394074][T21308] loop2: detected capacity change from 0 to 512 [ 363.405909][T21308] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 363.417470][T21308] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 363.427655][T21308] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.6461: Corrupt directory, running e2fsck is recommended [ 363.451794][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.452131][T21308] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 363.469505][T21308] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6461: corrupted in-inode xattr: invalid ea_ino [ 363.484757][T21308] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.6461: couldn't read orphan inode 15 (err -117) [ 363.497395][T21308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.546995][T21306] EXT4-fs error (device loop2): ext4_xattr_set_entry:1668: inode #2: comm syz.2.6461: corrupted xattr entries [ 363.594740][T16470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.608617][T21313] FAULT_INJECTION: forcing a failure. [ 363.608617][T21313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.621761][T21313] CPU: 1 UID: 0 PID: 21313 Comm: syz.9.6463 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 363.621831][T21313] Tainted: [W]=WARN [ 363.621843][T21313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.621855][T21313] Call Trace: [ 363.621861][T21313] [ 363.621867][T21313] dump_stack_lvl+0xf2/0x150 [ 363.621970][T21313] dump_stack+0x15/0x1a [ 363.621991][T21313] should_fail_ex+0x24a/0x260 [ 363.622021][T21313] should_fail+0xb/0x10 [ 363.622045][T21313] should_fail_usercopy+0x1a/0x20 [ 363.622112][T21313] _copy_to_user+0x20/0xa0 [ 363.622137][T21313] copy_siginfo_to_user+0x24/0xb0 [ 363.622166][T21313] x64_setup_rt_frame+0x2b4/0x590 [ 363.622215][T21313] arch_do_signal_or_restart+0x287/0x4b0 [ 363.622250][T21313] syscall_exit_to_user_mode+0x62/0x120 [ 363.622298][T21313] do_syscall_64+0xd6/0x1c0 [ 363.622342][T21313] ? clear_bhb_loop+0x55/0xb0 [ 363.622376][T21313] ? clear_bhb_loop+0x55/0xb0 [ 363.622428][T21313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.622461][T21313] RIP: 0033:0x7fc9e86ad167 [ 363.622488][T21313] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 363.622510][T21313] RSP: 002b:00007fc9e6d11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 363.622538][T21313] RAX: 0000000000000013 RBX: 00007fc9e88c5fa0 RCX: 00007fc9e86ad169 [ 363.622558][T21313] RDX: 0000000000000001 RSI: 0000400000000000 RDI: 0000000000000003 [ 363.622657][T21313] RBP: 00007fc9e6d11090 R08: 0000000000000000 R09: 0000000000000000 [ 363.622671][T21313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.622685][T21313] R13: 0000000000000000 R14: 00007fc9e88c5fa0 R15: 00007ffc3a612918 [ 363.622706][T21313] [ 363.832693][T21328] loop2: detected capacity change from 0 to 2048 [ 364.092575][T21347] FAULT_INJECTION: forcing a failure. [ 364.092575][T21347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.105720][T21347] CPU: 1 UID: 0 PID: 21347 Comm: syz.2.6479 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 364.105757][T21347] Tainted: [W]=WARN [ 364.105763][T21347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.105848][T21347] Call Trace: [ 364.105854][T21347] [ 364.105861][T21347] dump_stack_lvl+0xf2/0x150 [ 364.105889][T21347] dump_stack+0x15/0x1a [ 364.105913][T21347] should_fail_ex+0x24a/0x260 [ 364.105946][T21347] should_fail+0xb/0x10 [ 364.106022][T21347] should_fail_usercopy+0x1a/0x20 [ 364.106093][T21347] _copy_from_iter+0xd5/0xd00 [ 364.106125][T21347] ? kmalloc_reserve+0x16e/0x190 [ 364.106148][T21347] ? __build_skb_around+0x196/0x1f0 [ 364.106230][T21347] ? __alloc_skb+0x21f/0x310 [ 364.106250][T21347] ? __virt_addr_valid+0x1ed/0x250 [ 364.106323][T21347] ? __check_object_size+0x364/0x520 [ 364.106345][T21347] netlink_sendmsg+0x460/0x6e0 [ 364.106378][T21347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.106432][T21347] __sock_sendmsg+0x140/0x180 [ 364.106462][T21347] ____sys_sendmsg+0x326/0x4b0 [ 364.106492][T21347] __sys_sendmsg+0x19d/0x230 [ 364.106563][T21347] __x64_sys_sendmsg+0x46/0x50 [ 364.106586][T21347] x64_sys_call+0x2734/0x2dc0 [ 364.106685][T21347] do_syscall_64+0xc9/0x1c0 [ 364.106713][T21347] ? clear_bhb_loop+0x55/0xb0 [ 364.106807][T21347] ? clear_bhb_loop+0x55/0xb0 [ 364.106836][T21347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.106859][T21347] RIP: 0033:0x7f4ea7cad169 [ 364.106873][T21347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.106890][T21347] RSP: 002b:00007f4ea6317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.106906][T21347] RAX: ffffffffffffffda RBX: 00007f4ea7ec5fa0 RCX: 00007f4ea7cad169 [ 364.106979][T21347] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 364.106991][T21347] RBP: 00007f4ea6317090 R08: 0000000000000000 R09: 0000000000000000 [ 364.107004][T21347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.107017][T21347] R13: 0000000000000000 R14: 00007f4ea7ec5fa0 R15: 00007ffc47a2a7b8 [ 364.107036][T21347] [ 364.515589][T21368] loop2: detected capacity change from 0 to 512 [ 364.523700][T21368] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 364.551622][T21368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 364.559580][T21368] System zones: 1-12 [ 364.602010][T21368] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6486: corrupted in-inode xattr: e_value size too large [ 364.675970][T21368] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.6486: couldn't read orphan inode 15 (err -117) [ 364.724643][T21368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.778493][T16470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.804214][T21382] loop6: detected capacity change from 0 to 512 [ 364.843482][T21382] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 364.855105][T21382] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 364.865219][T21382] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6491: Corrupt directory, running e2fsck is recommended [ 364.887264][T21387] syz.9.6490: attempt to access beyond end of device [ 364.887264][T21387] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 364.925674][T21382] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 364.934097][T21382] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6491: corrupted in-inode xattr: invalid ea_ino [ 364.961119][T21382] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6491: couldn't read orphan inode 15 (err -117) [ 364.982266][T21382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.035051][T21382] EXT4-fs error (device loop6): ext4_xattr_set_entry:1668: inode #2: comm syz.6.6491: corrupted xattr entries [ 365.085523][T21399] loop2: detected capacity change from 0 to 512 [ 365.104820][T21399] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6497: corrupted in-inode xattr: invalid ea_ino [ 365.133846][T21399] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.6497: couldn't read orphan inode 15 (err -117) [ 365.163609][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.170412][T21399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.197216][ T30] kauditd_printk_skb: 415 callbacks suppressed [ 365.197230][ T30] audit: type=1326 audit(1741928658.294:30017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21398 comm="syz.2.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7cad169 code=0x7ffc0000 [ 365.249067][T21399] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.6497: invalid indirect mapped block 234881024 (level 0) [ 365.295175][ T30] audit: type=1326 audit(1741928658.341:30018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21398 comm="syz.2.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7cad169 code=0x7ffc0000 [ 365.318905][ T30] audit: type=1326 audit(1741928658.341:30019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21398 comm="syz.2.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4ea7cad169 code=0x7ffc0000 [ 365.342535][ T30] audit: type=1400 audit(1741928658.341:30020): avc: denied { write } for pid=21398 comm="syz.2.6497" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 365.364837][ T30] audit: type=1400 audit(1741928658.341:30021): avc: denied { add_name } for pid=21398 comm="syz.2.6497" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 365.385785][ T30] audit: type=1400 audit(1741928658.341:30022): avc: denied { create } for pid=21398 comm="syz.2.6497" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 365.406244][ T30] audit: type=1400 audit(1741928658.341:30023): avc: denied { write } for pid=21398 comm="syz.2.6497" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.428641][ T30] audit: type=1400 audit(1741928658.341:30024): avc: denied { open } for pid=21398 comm="syz.2.6497" path="/362/file0/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.452470][ T30] audit: type=1326 audit(1741928658.387:30025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee17d169 code=0x7ffc0000 [ 365.476073][ T30] audit: type=1326 audit(1741928658.387:30026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee17d169 code=0x7ffc0000 [ 365.506558][T16470] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 365.546018][T16470] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 365.558820][T16470] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 365.690033][T18647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.826971][T21419] xt_hashlimit: max too large, truncated to 1048576 [ 365.935517][T21425] loop9: detected capacity change from 0 to 512 [ 365.943044][T21425] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 365.954448][T21428] syz.0.6505: attempt to access beyond end of device [ 365.954448][T21428] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 365.985106][T21425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 366.027586][T21425] System zones: 1-12 [ 366.039914][T21425] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6508: corrupted in-inode xattr: e_value size too large [ 366.063215][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6510'. [ 366.095250][T21434] ip6gretap0: entered promiscuous mode [ 366.113556][T21425] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6508: couldn't read orphan inode 15 (err -117) [ 366.138034][T21434] ip6gretap0: left promiscuous mode [ 366.191601][ T153] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.238060][T21425] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.265656][ T153] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.282156][T21448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6515'. [ 366.319678][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.371798][ T153] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.468865][T21462] 9pnet_fd: Insufficient options for proto=fd [ 366.493913][ T153] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.636580][T21444] chnl_net:caif_netlink_parms(): no params data found [ 366.649806][ T153] bridge_slave_1: left allmulticast mode [ 366.655549][ T153] bridge_slave_1: left promiscuous mode [ 366.661334][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.670462][ T153] bridge_slave_0: left allmulticast mode [ 366.676112][ T153] bridge_slave_0: left promiscuous mode [ 366.681824][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.693505][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6517'. [ 366.788088][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.798347][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.808111][ T153] bond0 (unregistering): Released all slaves [ 366.963471][ T153] hsr_slave_0: left promiscuous mode [ 366.998083][ T153] hsr_slave_1: left promiscuous mode [ 367.009448][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.016906][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.070965][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.078462][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.089494][ T153] veth1_macvtap: left promiscuous mode [ 367.095015][ T153] veth0_macvtap: left promiscuous mode [ 367.101190][ T153] veth1_vlan: left promiscuous mode [ 367.107769][ T153] veth0_vlan: left promiscuous mode [ 367.198741][ T153] team0 (unregistering): Port device team_slave_1 removed [ 367.212613][ T153] team0 (unregistering): Port device team_slave_0 removed [ 367.400777][T21444] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.407945][T21444] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.527376][T21444] bridge_slave_0: entered allmulticast mode [ 367.574277][T21444] bridge_slave_0: entered promiscuous mode [ 367.609914][T21501] loop6: detected capacity change from 0 to 512 [ 367.617657][T21444] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.624887][T21444] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.635762][T21501] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 367.644733][T21444] bridge_slave_1: entered allmulticast mode [ 367.651576][T21444] bridge_slave_1: entered promiscuous mode [ 367.661794][T21501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 367.669792][T21501] System zones: 1-12 [ 367.678804][T21501] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6526: corrupted in-inode xattr: e_value size too large [ 367.694380][T21501] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6526: couldn't read orphan inode 15 (err -117) [ 367.714038][T21501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.727087][T21444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.739804][T21444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.761892][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.775528][T21444] team0: Port device team_slave_0 added [ 367.786703][T21444] team0: Port device team_slave_1 added [ 367.808522][T21444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.815563][T21444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.841617][T21444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.853139][T21444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.860136][T21444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.886068][T21444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.926799][T21444] hsr_slave_0: entered promiscuous mode [ 367.933074][T21444] hsr_slave_1: entered promiscuous mode [ 368.065388][T21531] loop9: detected capacity change from 0 to 512 [ 368.085320][T21531] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 368.096941][T21531] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 368.107188][T21531] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6538: Corrupt directory, running e2fsck is recommended [ 368.120574][T21531] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 368.129026][T21531] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6538: corrupted in-inode xattr: invalid ea_ino [ 368.142939][T21531] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6538: couldn't read orphan inode 15 (err -117) [ 368.156796][T21531] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.170884][T21531] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6538: corrupted xattr entries [ 368.201287][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6541'. [ 368.211704][T21538] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.224021][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.273871][T21538] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.339836][T21538] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.370250][T21444] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 368.379721][T21444] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 368.392421][T21444] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 368.404860][T21444] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 368.489273][T21538] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.576281][T21567] loop9: detected capacity change from 0 to 512 [ 368.602452][T21567] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 368.614049][T21567] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 368.624141][T21567] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6551: Corrupt directory, running e2fsck is recommended [ 368.638235][T21567] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 368.646642][T21567] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6551: corrupted in-inode xattr: invalid ea_ino [ 368.661482][T21567] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6551: couldn't read orphan inode 15 (err -117) [ 368.673938][T21567] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.689000][T21564] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6551: corrupted xattr entries [ 368.774056][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.802055][T21538] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.816165][T21538] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.831308][T21538] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.892997][T21538] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.909397][T21444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.928384][T21444] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.938891][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.946070][ T9269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.976101][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.983253][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.021134][T21444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.183312][T21444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.289349][T21605] syz.1.6561: attempt to access beyond end of device [ 369.289349][T21605] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 369.357723][T21444] veth0_vlan: entered promiscuous mode [ 369.431909][T21444] veth1_vlan: entered promiscuous mode [ 369.454435][T21444] veth0_macvtap: entered promiscuous mode [ 369.464437][T21444] veth1_macvtap: entered promiscuous mode [ 369.476397][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.486950][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.496809][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.507415][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.517358][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.527837][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.537689][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.548136][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.558960][T21444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.609174][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.619703][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.629559][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.639977][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.649811][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.660301][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.670202][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.680709][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.691408][T21444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.701600][T21444] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.710458][T21444] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.719207][T21444] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.728263][T21444] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.742932][T21621] 9pnet_fd: Insufficient options for proto=fd [ 369.806573][T21630] program syz.0.6569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.812373][T21629] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6568'. [ 369.836166][T21629] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.862214][T21632] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 369.868861][T21632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 369.876319][T21632] vhci_hcd vhci_hcd.0: Device attached [ 369.887616][T21632] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.901096][T21629] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.053390][T21654] loop9: detected capacity change from 0 to 2048 [ 370.066613][T21654] EXT4-fs: Ignoring removed orlov option [ 370.072513][T21654] EXT4-fs: Ignoring removed bh option [ 370.077951][T21654] EXT4-fs: Ignoring removed bh option [ 370.078569][T18442] vhci_hcd: vhci_device speed not set [ 370.112285][T21654] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 370.122584][T21654] System zones: 0-4 [ 370.141763][T21654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.154171][T21654] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.164908][T18442] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 370.434209][T21666] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6579: bg 0: block 345: padding at end of block bitmap is not set [ 370.461938][T21666] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 370.474683][T21666] EXT4-fs (loop9): This should not happen!! Data will be lost [ 370.474683][T21666] [ 370.534175][ T51] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 370.546878][ T51] EXT4-fs (loop9): This should not happen!! Data will be lost [ 370.546878][ T51] [ 370.569646][T21678] Dead loop on virtual device ip6_vti0, fix it urgently! [ 370.576985][T21678] Dead loop on virtual device ip6_vti0, fix it urgently! [ 370.584249][T21678] Dead loop on virtual device ip6_vti0, fix it urgently! [ 370.591417][T21678] Dead loop on virtual device ip6_vti0, fix it urgently! [ 370.598634][T21678] Dead loop on virtual device ip6_vti0, fix it urgently! [ 370.605835][T21678] Dead loop on virtual device ip6_vti0, fix it urgently! [ 370.624611][ T30] kauditd_printk_skb: 389 callbacks suppressed [ 370.624685][ T30] audit: type=1326 audit(1741928663.373:30416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 370.654622][ T30] audit: type=1326 audit(1741928663.373:30417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 370.678351][ T30] audit: type=1326 audit(1741928663.373:30418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 370.702009][ T30] audit: type=1326 audit(1741928663.373:30419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 370.725762][ T30] audit: type=1326 audit(1741928663.373:30420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 370.752622][ T51] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 370.765562][ T51] EXT4-fs (loop9): This should not happen!! Data will be lost [ 370.765562][ T51] [ 370.775279][ T51] EXT4-fs (loop9): Total free blocks count 0 [ 370.781361][ T51] EXT4-fs (loop9): Free/Dirty block details [ 370.787358][ T51] EXT4-fs (loop9): free_blocks=0 [ 370.837379][ T30] audit: type=1326 audit(1741928663.382:30421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c67d2d169 code=0x7ffc0000 [ 370.880404][ T30] audit: type=1326 audit(1741928663.607:30422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21686 comm="syz.9.6589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e86ad169 code=0x7ffc0000 [ 370.904088][ T30] audit: type=1326 audit(1741928663.607:30423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21686 comm="syz.9.6589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e86ad169 code=0x7ffc0000 [ 370.969625][ T30] audit: type=1326 audit(1741928663.635:30424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21686 comm="syz.9.6589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9e86ad169 code=0x7ffc0000 [ 370.993342][ T30] audit: type=1326 audit(1741928663.635:30425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21686 comm="syz.9.6589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e86ad169 code=0x7ffc0000 [ 371.043685][T21691] loop6: detected capacity change from 0 to 512 [ 371.086611][T21633] vhci_hcd: connection reset by peer [ 371.092212][ T9266] vhci_hcd: stop threads [ 371.096555][ T9266] vhci_hcd: release socket [ 371.100988][ T9266] vhci_hcd: disconnect device [ 371.119224][T21696] loop9: detected capacity change from 0 to 512 [ 371.127566][T21691] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 371.139186][T21691] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 371.149302][T21691] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6594: Corrupt directory, running e2fsck is recommended [ 371.167500][T21629] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.187734][T21696] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 371.199346][T21696] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 371.209499][T21696] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6596: Corrupt directory, running e2fsck is recommended [ 371.227082][T21691] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 371.235739][T21696] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 371.245690][T21691] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6594: corrupted in-inode xattr: invalid ea_ino [ 371.259223][T21696] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6596: corrupted in-inode xattr: invalid ea_ino [ 371.274196][T21696] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6596: couldn't read orphan inode 15 (err -117) [ 371.289962][T21691] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6594: couldn't read orphan inode 15 (err -117) [ 371.303599][T21696] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.320430][T21691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.334853][T21696] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6596: corrupted xattr entries [ 371.349460][T21688] EXT4-fs error (device loop6): ext4_xattr_set_entry:1668: inode #2: comm syz.6.6594: corrupted xattr entries [ 371.374563][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.422013][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.443496][T21705] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6600'. [ 371.468513][T21705] ip6gretap0: entered promiscuous mode [ 371.475600][T21705] ip6gretap0: left promiscuous mode [ 371.578558][T21719] loop9: detected capacity change from 0 to 512 [ 371.590503][T21719] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6606: corrupted in-inode xattr: invalid ea_ino [ 371.619842][T21719] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6606: couldn't read orphan inode 15 (err -117) [ 371.634216][T21719] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.648971][T21719] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.6606: invalid indirect mapped block 234881024 (level 0) [ 371.698588][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.724293][T21728] FAULT_INJECTION: forcing a failure. [ 371.724293][T21728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.737452][T21728] CPU: 0 UID: 0 PID: 21728 Comm: syz.1.6611 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 371.737484][T21728] Tainted: [W]=WARN [ 371.737491][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 371.737506][T21728] Call Trace: [ 371.737512][T21728] [ 371.737519][T21728] dump_stack_lvl+0xf2/0x150 [ 371.737577][T21728] dump_stack+0x15/0x1a [ 371.737601][T21728] should_fail_ex+0x24a/0x260 [ 371.737630][T21728] should_fail+0xb/0x10 [ 371.737692][T21728] should_fail_usercopy+0x1a/0x20 [ 371.737806][T21728] strncpy_from_user+0x25/0x210 [ 371.737826][T21728] ? __kmalloc_cache_noprof+0x186/0x320 [ 371.737878][T21728] __se_sys_memfd_create+0x218/0x5a0 [ 371.737908][T21728] __x64_sys_memfd_create+0x31/0x40 [ 371.737936][T21728] x64_sys_call+0x2d4c/0x2dc0 [ 371.737966][T21728] do_syscall_64+0xc9/0x1c0 [ 371.738050][T21728] ? clear_bhb_loop+0x55/0xb0 [ 371.738080][T21728] ? clear_bhb_loop+0x55/0xb0 [ 371.738109][T21728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.738136][T21728] RIP: 0033:0x7f8ae6b0d169 [ 371.738225][T21728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.738260][T21728] RSP: 002b:00007f8ae5176e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 371.738281][T21728] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f8ae6b0d169 [ 371.738295][T21728] RDX: 00007f8ae5176ef0 RSI: 0000000000000000 RDI: 00007f8ae6b8ec3c [ 371.738309][T21728] RBP: 0000400000000600 R08: 00007f8ae5176bb7 R09: 00007f8ae5176e40 [ 371.738322][T21728] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000040 [ 371.738335][T21728] R13: 00007f8ae5176ef0 R14: 00007f8ae5176eb0 R15: 00004000000002c0 [ 371.738359][T21728] [ 372.050546][T21726] loop6: detected capacity change from 0 to 164 [ 372.443291][T21755] FAULT_INJECTION: forcing a failure. [ 372.443291][T21755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.456407][T21755] CPU: 0 UID: 0 PID: 21755 Comm: syz.6.6620 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 372.456438][T21755] Tainted: [W]=WARN [ 372.456444][T21755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 372.456511][T21755] Call Trace: [ 372.456517][T21755] [ 372.456524][T21755] dump_stack_lvl+0xf2/0x150 [ 372.456570][T21755] dump_stack+0x15/0x1a [ 372.456639][T21755] should_fail_ex+0x24a/0x260 [ 372.456671][T21755] should_fail+0xb/0x10 [ 372.456694][T21755] should_fail_usercopy+0x1a/0x20 [ 372.456722][T21755] _copy_from_iter+0xd5/0xd00 [ 372.456755][T21755] ? kmalloc_reserve+0x16e/0x190 [ 372.456776][T21755] ? __build_skb_around+0x196/0x1f0 [ 372.456798][T21755] ? __alloc_skb+0x21f/0x310 [ 372.456840][T21755] ? __virt_addr_valid+0x1ed/0x250 [ 372.456862][T21755] ? __check_object_size+0x364/0x520 [ 372.456893][T21755] netlink_sendmsg+0x460/0x6e0 [ 372.456945][T21755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.456977][T21755] __sock_sendmsg+0x140/0x180 [ 372.457009][T21755] ____sys_sendmsg+0x326/0x4b0 [ 372.457040][T21755] __sys_sendmsg+0x19d/0x230 [ 372.457133][T21755] __x64_sys_sendmsg+0x46/0x50 [ 372.457157][T21755] x64_sys_call+0x2734/0x2dc0 [ 372.457183][T21755] do_syscall_64+0xc9/0x1c0 [ 372.457242][T21755] ? clear_bhb_loop+0x55/0xb0 [ 372.457270][T21755] ? clear_bhb_loop+0x55/0xb0 [ 372.457298][T21755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.457391][T21755] RIP: 0033:0x7ff5ee17d169 [ 372.457415][T21755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.457434][T21755] RSP: 002b:00007ff5ec7e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.457500][T21755] RAX: ffffffffffffffda RBX: 00007ff5ee395fa0 RCX: 00007ff5ee17d169 [ 372.457533][T21755] RDX: 0000000000000000 RSI: 0000400000007940 RDI: 0000000000000006 [ 372.457604][T21755] RBP: 00007ff5ec7e1090 R08: 0000000000000000 R09: 0000000000000000 [ 372.457617][T21755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.457662][T21755] R13: 0000000000000000 R14: 00007ff5ee395fa0 R15: 00007ffd65dca548 [ 372.457682][T21755] [ 372.690931][T21757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6622'. [ 372.793561][T21768] syz.6.6623: attempt to access beyond end of device [ 372.793561][T21768] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 372.809450][T21770] loop9: detected capacity change from 0 to 512 [ 372.817602][T21770] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 372.829193][T21770] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 372.839366][T21770] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6628: Corrupt directory, running e2fsck is recommended [ 372.854111][T21770] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 372.862664][T21770] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6628: corrupted in-inode xattr: invalid ea_ino [ 372.877268][T21770] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6628: couldn't read orphan inode 15 (err -117) [ 372.889877][T21770] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.906634][T21770] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6628: corrupted xattr entries [ 372.951964][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.086760][T21629] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.191596][T21793] syz.9.6635: attempt to access beyond end of device [ 373.191596][T21793] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 373.483033][T21802] syz.9.6639: attempt to access beyond end of device [ 373.483033][T21802] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 373.628545][T21808] loop9: detected capacity change from 0 to 512 [ 373.658485][T21808] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 373.670127][T21808] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 373.680272][T21808] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6643: Corrupt directory, running e2fsck is recommended [ 373.696671][T21808] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 373.717637][T21808] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6643: corrupted in-inode xattr: invalid ea_ino [ 373.731414][T21808] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6643: couldn't read orphan inode 15 (err -117) [ 373.744396][T21808] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.758871][T21808] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6643: corrupted xattr entries [ 373.762252][T21815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6645'. [ 373.779724][T21815] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6645'. [ 373.789176][T21815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6645'. [ 373.798262][T21815] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6645'. [ 373.807408][T21815] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6645'. [ 373.824310][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.094288][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6651'. [ 374.124519][T21825] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.215930][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6652'. [ 374.224854][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6652'. [ 374.275421][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6652'. [ 374.357043][T21825] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.433461][T21825] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.503849][T21629] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.517865][T21629] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.531849][T21825] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.548235][T21629] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.562238][T21629] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.609478][T21825] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.647482][T21825] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.665947][T21825] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.707259][T21825] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.837770][T21860] FAULT_INJECTION: forcing a failure. [ 374.837770][T21860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.851009][T21860] CPU: 0 UID: 0 PID: 21860 Comm: syz.0.6660 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 374.851039][T21860] Tainted: [W]=WARN [ 374.851045][T21860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 374.851083][T21860] Call Trace: [ 374.851090][T21860] [ 374.851099][T21860] dump_stack_lvl+0xf2/0x150 [ 374.851130][T21860] dump_stack+0x15/0x1a [ 374.851154][T21860] should_fail_ex+0x24a/0x260 [ 374.851186][T21860] should_fail+0xb/0x10 [ 374.851239][T21860] should_fail_usercopy+0x1a/0x20 [ 374.851272][T21860] _copy_from_user+0x1c/0xa0 [ 374.851293][T21860] memdup_user+0x64/0xc0 [ 374.851324][T21860] strndup_user+0x68/0xa0 [ 374.851375][T21860] __se_sys_mount+0x4e/0x2d0 [ 374.851408][T21860] ? fput+0x1c4/0x200 [ 374.851430][T21860] ? ksys_write+0x176/0x1b0 [ 374.851456][T21860] __x64_sys_mount+0x67/0x80 [ 374.851486][T21860] x64_sys_call+0x2c84/0x2dc0 [ 374.851548][T21860] do_syscall_64+0xc9/0x1c0 [ 374.851629][T21860] ? clear_bhb_loop+0x55/0xb0 [ 374.851655][T21860] ? clear_bhb_loop+0x55/0xb0 [ 374.851755][T21860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.851780][T21860] RIP: 0033:0x7f2c67d2d169 [ 374.851794][T21860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.851821][T21860] RSP: 002b:00007f2c66397038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 374.851837][T21860] RAX: ffffffffffffffda RBX: 00007f2c67f45fa0 RCX: 00007f2c67d2d169 [ 374.851848][T21860] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 374.851917][T21860] RBP: 00007f2c66397090 R08: 0000400000000400 R09: 0000000000000000 [ 374.851931][T21860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.851945][T21860] R13: 0000000000000000 R14: 00007f2c67f45fa0 R15: 00007ffe083c2868 [ 374.851964][T21860] [ 375.144490][T21866] ip6gretap0: entered promiscuous mode [ 375.162345][T21866] ip6gretap0: left promiscuous mode [ 375.345629][T21879] loop9: detected capacity change from 0 to 1024 [ 375.388481][T21879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.595279][T18442] usb 3-1: enqueue for inactive port 0 [ 375.608219][T18442] usb 3-1: enqueue for inactive port 0 [ 375.712479][T18442] vhci_hcd: vhci_device speed not set [ 375.719799][T21900] bridge0: entered promiscuous mode [ 375.726999][T21900] bridge0: port 3(macvtap1) entered blocking state [ 375.733599][T21900] bridge0: port 3(macvtap1) entered disabled state [ 375.741257][T21900] macvtap1: entered allmulticast mode [ 375.746843][T21900] bridge0: entered allmulticast mode [ 375.752933][T21900] macvtap1: left allmulticast mode [ 375.758157][T21900] bridge0: left allmulticast mode [ 375.763779][T21900] bridge0: left promiscuous mode [ 375.789134][T21905] syz.0.6677: attempt to access beyond end of device [ 375.789134][T21905] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 375.981471][ T30] kauditd_printk_skb: 650 callbacks suppressed [ 375.981549][ T30] audit: type=1326 audit(1741928668.387:31074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2e6e6e4127 code=0x7ffc0000 [ 376.011440][ T30] audit: type=1326 audit(1741928668.387:31075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6e689359 code=0x7ffc0000 [ 376.035050][ T30] audit: type=1326 audit(1741928668.387:31076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 376.059112][ T30] audit: type=1326 audit(1741928668.415:31077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2e6e6e4127 code=0x7ffc0000 [ 376.082712][ T30] audit: type=1326 audit(1741928668.415:31078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6e689359 code=0x7ffc0000 [ 376.106316][ T30] audit: type=1326 audit(1741928668.415:31079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 376.129927][ T30] audit: type=1326 audit(1741928668.415:31080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2e6e6e4127 code=0x7ffc0000 [ 376.153477][ T30] audit: type=1326 audit(1741928668.415:31081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e6e689359 code=0x7ffc0000 [ 376.177052][ T30] audit: type=1326 audit(1741928668.415:31082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 376.200710][ T30] audit: type=1326 audit(1741928668.415:31083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.8.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2e6e6e4127 code=0x7ffc0000 [ 376.285826][T16637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.357416][T21924] loop9: detected capacity change from 0 to 1024 [ 376.364310][T21924] EXT4-fs: Ignoring removed orlov option [ 376.370485][T21924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.432629][T21929] FAULT_INJECTION: forcing a failure. [ 376.432629][T21929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.446049][T21929] CPU: 1 UID: 0 PID: 21929 Comm: syz.1.6688 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 376.446103][T21929] Tainted: [W]=WARN [ 376.446112][T21929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 376.446128][T21929] Call Trace: [ 376.446136][T21929] [ 376.446145][T21929] dump_stack_lvl+0xf2/0x150 [ 376.446206][T21929] dump_stack+0x15/0x1a [ 376.446231][T21929] should_fail_ex+0x24a/0x260 [ 376.446264][T21929] should_fail_alloc_page+0xfd/0x110 [ 376.446358][T21929] __alloc_frozen_pages_noprof+0x109/0x340 [ 376.446411][T21929] alloc_pages_mpol+0xb4/0x260 [ 376.446435][T21929] alloc_pages_noprof+0xe8/0x130 [ 376.446458][T21929] __pmd_alloc+0x4b/0x430 [ 376.446483][T21929] handle_mm_fault+0x1a77/0x2ac0 [ 376.446517][T21929] exc_page_fault+0x296/0x650 [ 376.446584][T21929] ? info_print_prefix+0x162/0x1a0 [ 376.446611][T21929] asm_exc_page_fault+0x26/0x30 [ 376.446695][T21929] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 376.446720][T21929] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 376.446738][T21929] RSP: 0018:ffffc90002a67ce8 EFLAGS: 00050206 [ 376.446818][T21929] RAX: ffff8881016b4c88 RBX: 0000400000001997 RCX: 0000000000000057 [ 376.446834][T21929] RDX: 0000000000000000 RSI: ffff88811b138800 RDI: 0000400000001940 [ 376.446846][T21929] RBP: 0000000000000057 R08: 0000000000000000 R09: 0000000000000000 [ 376.446858][T21929] R10: 000188811b138800 R11: 000188811b138856 R12: 0000000000000057 [ 376.446871][T21929] R13: 00007ffffffff000 R14: 0000400000001940 R15: ffff88811b138800 [ 376.446890][T21929] _copy_to_user+0x7c/0xa0 [ 376.446911][T21929] syslog_print+0x455/0x540 [ 376.446980][T21929] do_syslog+0x3a1/0x7f0 [ 376.447020][T21929] ? __fget_files+0x17c/0x1c0 [ 376.447064][T21929] ? ksys_write+0x176/0x1b0 [ 376.447138][T21929] __x64_sys_syslog+0x43/0x50 [ 376.447179][T21929] x64_sys_call+0x29be/0x2dc0 [ 376.447211][T21929] do_syscall_64+0xc9/0x1c0 [ 376.447244][T21929] ? clear_bhb_loop+0x55/0xb0 [ 376.447311][T21929] ? clear_bhb_loop+0x55/0xb0 [ 376.447340][T21929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.447368][T21929] RIP: 0033:0x7f8ae6b0d169 [ 376.447381][T21929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.447400][T21929] RSP: 002b:00007f8ae5177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 376.447493][T21929] RAX: ffffffffffffffda RBX: 00007f8ae6d25fa0 RCX: 00007f8ae6b0d169 [ 376.447507][T21929] RDX: 0000000000000057 RSI: 0000400000001940 RDI: 0000000000000002 [ 376.447520][T21929] RBP: 00007f8ae5177090 R08: 0000000000000000 R09: 0000000000000000 [ 376.447532][T21929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.447557][T21929] R13: 0000000000000001 R14: 00007f8ae6d25fa0 R15: 00007fffe576a8c8 [ 376.447578][T21929] [ 376.757792][T21924] EXT4-fs (loop9): shut down requested (2) [ 376.766737][T21924] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 376.786933][T21924] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 377.266342][T21942] ALSA: seq fatal error: cannot create timer (-19) [ 377.630120][T21959] program syz.8.6697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.718636][T21959] loop8: detected capacity change from 0 to 256 [ 377.812691][T21959] FAT-fs (loop8): Directory bread(block 64) failed [ 377.858560][T21959] FAT-fs (loop8): Directory bread(block 65) failed [ 377.914410][T21959] FAT-fs (loop8): Directory bread(block 66) failed [ 377.962010][T21959] FAT-fs (loop8): Directory bread(block 67) failed [ 377.973787][T21959] FAT-fs (loop8): Directory bread(block 68) failed [ 377.981694][T21959] FAT-fs (loop8): Directory bread(block 69) failed [ 378.004882][T21959] FAT-fs (loop8): Directory bread(block 70) failed [ 378.012134][T21959] FAT-fs (loop8): Directory bread(block 71) failed [ 378.018869][T21959] FAT-fs (loop8): Directory bread(block 72) failed [ 378.026344][T21959] FAT-fs (loop8): Directory bread(block 73) failed [ 378.281807][T21982] __nla_validate_parse: 14 callbacks suppressed [ 378.281826][T21982] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6704'. [ 378.359217][T21991] syz.9.6706: attempt to access beyond end of device [ 378.359217][T21991] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 378.390961][T21995] program syz.1.6710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.589223][T22010] program syz.1.6717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.809375][T22020] syz.1.6721: attempt to access beyond end of device [ 378.809375][T22020] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 378.874163][T22026] program syz.1.6724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.960708][T22028] 9pnet: Could not find request transport: fd0x0000000000000004 [ 378.996944][T22031] bridge0: port 3(syz_tun) entered blocking state [ 379.003699][T22031] bridge0: port 3(syz_tun) entered disabled state [ 379.010421][T22031] syz_tun: entered allmulticast mode [ 379.016442][T22031] syz_tun: entered promiscuous mode [ 379.021949][T22031] bridge0: port 3(syz_tun) entered blocking state [ 379.028414][T22031] bridge0: port 3(syz_tun) entered forwarding state [ 379.095821][T22039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6730'. [ 379.107833][T22039] ip6gretap0: entered promiscuous mode [ 379.114648][T22039] ip6gretap0: left promiscuous mode [ 379.254116][T22052] 9pnet: Could not find request transport: fd0x0000000000000004 [ 379.257249][T22055] program syz.8.6736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.276914][T22055] loop8: detected capacity change from 0 to 256 [ 379.292528][T22055] FAT-fs (loop8): Directory bread(block 64) failed [ 379.299422][T22055] FAT-fs (loop8): Directory bread(block 65) failed [ 379.303570][T22057] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 379.322145][T22055] FAT-fs (loop8): Directory bread(block 66) failed [ 379.329004][T22055] FAT-fs (loop8): Directory bread(block 67) failed [ 379.336026][T22055] FAT-fs (loop8): Directory bread(block 68) failed [ 379.342886][T22055] FAT-fs (loop8): Directory bread(block 69) failed [ 379.349850][T22055] FAT-fs (loop8): Directory bread(block 70) failed [ 379.356456][T22055] FAT-fs (loop8): Directory bread(block 71) failed [ 379.363203][T22055] FAT-fs (loop8): Directory bread(block 72) failed [ 379.369792][T22055] FAT-fs (loop8): Directory bread(block 73) failed [ 379.442515][T22067] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6743'. [ 379.464858][T22067] ip6gretap0: entered promiscuous mode [ 379.471983][T22067] ip6gretap0: left promiscuous mode [ 379.561391][T22078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6747'. [ 379.584050][T22079] loop8: detected capacity change from 0 to 512 [ 379.592183][T22079] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 379.603882][T22079] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 379.613993][T22079] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.6748: Corrupt directory, running e2fsck is recommended [ 379.636080][T22079] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 379.648947][T22078] ip6gretap0: entered promiscuous mode [ 379.656425][T22078] ip6gretap0: left promiscuous mode [ 379.714362][T22079] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.6748: corrupted in-inode xattr: invalid ea_ino [ 379.740853][T22086] 9pnet: Could not find request transport: fd0x0000000000000004 [ 379.768189][T22079] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.6748: couldn't read orphan inode 15 (err -117) [ 379.800865][T22079] EXT4-fs error (device loop8): ext4_xattr_set_entry:1668: inode #2: comm syz.8.6748: corrupted xattr entries [ 379.876741][T22093] netlink: 'syz.9.6752': attribute type 3 has an invalid length. [ 379.949619][T22103] FAULT_INJECTION: forcing a failure. [ 379.949619][T22103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.962832][T22103] CPU: 1 UID: 0 PID: 22103 Comm: syz.9.6757 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 379.962956][T22103] Tainted: [W]=WARN [ 379.962962][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.962973][T22103] Call Trace: [ 379.962979][T22103] [ 379.962987][T22103] dump_stack_lvl+0xf2/0x150 [ 379.963019][T22103] dump_stack+0x15/0x1a [ 379.963041][T22103] should_fail_ex+0x24a/0x260 [ 379.963088][T22103] should_fail+0xb/0x10 [ 379.963141][T22103] should_fail_usercopy+0x1a/0x20 [ 379.963184][T22103] _copy_from_iter+0xd5/0xd00 [ 379.963289][T22103] ? kmalloc_reserve+0x16e/0x190 [ 379.963314][T22103] ? __build_skb_around+0x196/0x1f0 [ 379.963340][T22103] ? __alloc_skb+0x21f/0x310 [ 379.963364][T22103] ? __virt_addr_valid+0x1ed/0x250 [ 379.963395][T22103] ? __check_object_size+0x364/0x520 [ 379.963441][T22103] netlink_sendmsg+0x460/0x6e0 [ 379.963529][T22103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.963603][T22103] __sock_sendmsg+0x140/0x180 [ 379.963644][T22103] ____sys_sendmsg+0x326/0x4b0 [ 379.963678][T22103] __sys_sendmsg+0x19d/0x230 [ 379.963748][T22103] __x64_sys_sendmsg+0x46/0x50 [ 379.963780][T22103] x64_sys_call+0x2734/0x2dc0 [ 379.963884][T22103] do_syscall_64+0xc9/0x1c0 [ 379.963971][T22103] ? clear_bhb_loop+0x55/0xb0 [ 379.964125][T22103] ? clear_bhb_loop+0x55/0xb0 [ 379.964164][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.964190][T22103] RIP: 0033:0x7fc9e86ad169 [ 379.964205][T22103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.964264][T22103] RSP: 002b:00007fc9e6d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.964293][T22103] RAX: ffffffffffffffda RBX: 00007fc9e88c5fa0 RCX: 00007fc9e86ad169 [ 379.964304][T22103] RDX: 0000000000000000 RSI: 0000400000007940 RDI: 0000000000000003 [ 379.964315][T22103] RBP: 00007fc9e6d11090 R08: 0000000000000000 R09: 0000000000000000 [ 379.964329][T22103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.964342][T22103] R13: 0000000000000000 R14: 00007fc9e88c5fa0 R15: 00007ffc3a612918 [ 379.964363][T22103] [ 380.315352][T22114] loop9: detected capacity change from 0 to 512 [ 380.329645][T22114] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 380.341231][T22114] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 380.351406][T22114] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6761: Corrupt directory, running e2fsck is recommended [ 380.365465][T22114] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 380.377631][T22114] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6761: corrupted in-inode xattr: invalid ea_ino [ 380.391257][T22114] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6761: couldn't read orphan inode 15 (err -117) [ 380.409570][T22114] EXT4-fs error (device loop9): ext4_xattr_set_entry:1668: inode #2: comm syz.9.6761: corrupted xattr entries [ 380.505661][T22125] SELinux: ebitmap: truncated map [ 380.512719][T22125] SELinux: failed to load policy [ 380.547812][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6766'. [ 380.835008][T22161] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6781'. [ 380.847334][T22161] team0: entered promiscuous mode [ 380.852459][T22161] team_slave_0: entered promiscuous mode [ 380.858216][T22161] team_slave_1: entered promiscuous mode [ 380.865098][T22161] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 380.898984][T22161] team0: left promiscuous mode [ 380.903803][T22161] team_slave_0: left promiscuous mode [ 380.909373][T22161] team_slave_1: left promiscuous mode [ 380.974228][T22167] FAULT_INJECTION: forcing a failure. [ 380.974228][T22167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.987576][T22167] CPU: 0 UID: 0 PID: 22167 Comm: syz.0.6784 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 380.987609][T22167] Tainted: [W]=WARN [ 380.987666][T22167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.987679][T22167] Call Trace: [ 380.987685][T22167] [ 380.987692][T22167] dump_stack_lvl+0xf2/0x150 [ 380.987723][T22167] dump_stack+0x15/0x1a [ 380.987773][T22167] should_fail_ex+0x24a/0x260 [ 380.987887][T22167] should_fail+0xb/0x10 [ 380.987912][T22167] should_fail_usercopy+0x1a/0x20 [ 380.987971][T22167] _copy_from_user+0x1c/0xa0 [ 380.987989][T22167] copy_msghdr_from_user+0x54/0x2a0 [ 380.988020][T22167] ? __fget_files+0x17c/0x1c0 [ 380.988086][T22167] __sys_sendmsg+0x13e/0x230 [ 380.988125][T22167] __x64_sys_sendmsg+0x46/0x50 [ 380.988149][T22167] x64_sys_call+0x2734/0x2dc0 [ 380.988196][T22167] do_syscall_64+0xc9/0x1c0 [ 380.988224][T22167] ? clear_bhb_loop+0x55/0xb0 [ 380.988309][T22167] ? clear_bhb_loop+0x55/0xb0 [ 380.988335][T22167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.988360][T22167] RIP: 0033:0x7f2c67d2d169 [ 380.988376][T22167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.988412][T22167] RSP: 002b:00007f2c66397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.988431][T22167] RAX: ffffffffffffffda RBX: 00007f2c67f45fa0 RCX: 00007f2c67d2d169 [ 380.988443][T22167] RDX: 000000000000c010 RSI: 00004000000002c0 RDI: 000000000000000f [ 380.988478][T22167] RBP: 00007f2c66397090 R08: 0000000000000000 R09: 0000000000000000 [ 380.988490][T22167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.988501][T22167] R13: 0000000000000000 R14: 00007f2c67f45fa0 R15: 00007ffe083c2868 [ 380.988519][T22167] [ 381.327000][T22181] loop6: detected capacity change from 0 to 512 [ 381.338623][T22181] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 381.350197][T22181] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 381.360313][T22181] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6791: Corrupt directory, running e2fsck is recommended [ 381.401293][T22181] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 381.481382][T22181] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.6791: corrupted in-inode xattr: invalid ea_ino [ 381.502954][T22181] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6791: couldn't read orphan inode 15 (err -117) [ 381.521988][T22181] EXT4-fs mount: 6 callbacks suppressed [ 381.522015][T22181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.562304][T22181] EXT4-fs error (device loop6): ext4_xattr_set_entry:1668: inode #2: comm syz.6.6791: corrupted xattr entries [ 381.598639][T19246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.617298][T22188] FAULT_INJECTION: forcing a failure. [ 381.617298][T22188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.618225][ T30] kauditd_printk_skb: 731 callbacks suppressed [ 381.618244][ T30] audit: type=1400 audit(1741928673.653:31815): avc: denied { create } for pid=22187 comm="syz.8.6794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 381.630511][T22188] CPU: 0 UID: 0 PID: 22188 Comm: syz.8.6794 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 381.630547][T22188] Tainted: [W]=WARN [ 381.630558][T22188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.630574][T22188] Call Trace: [ 381.630583][T22188] [ 381.630592][T22188] dump_stack_lvl+0xf2/0x150 [ 381.630631][T22188] dump_stack+0x15/0x1a [ 381.630660][T22188] should_fail_ex+0x24a/0x260 [ 381.630701][T22188] should_fail+0xb/0x10 [ 381.630776][T22188] should_fail_usercopy+0x1a/0x20 [ 381.630817][T22188] _copy_from_user+0x1c/0xa0 [ 381.630854][T22188] copy_msghdr_from_user+0x54/0x2a0 [ 381.630896][T22188] ? __fget_files+0x17c/0x1c0 [ 381.631002][T22188] __sys_sendmsg+0x13e/0x230 [ 381.631119][T22188] __x64_sys_sendmsg+0x46/0x50 [ 381.631152][T22188] x64_sys_call+0x2734/0x2dc0 [ 381.631185][T22188] do_syscall_64+0xc9/0x1c0 [ 381.631224][T22188] ? clear_bhb_loop+0x55/0xb0 [ 381.631316][T22188] ? clear_bhb_loop+0x55/0xb0 [ 381.631365][T22188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.631399][T22188] RIP: 0033:0x7f2e6e6ed169 [ 381.631418][T22188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.631440][T22188] RSP: 002b:00007f2e6cd57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.631463][T22188] RAX: ffffffffffffffda RBX: 00007f2e6e905fa0 RCX: 00007f2e6e6ed169 [ 381.631548][T22188] RDX: 0000000000008014 RSI: 0000400000000080 RDI: 0000000000000003 [ 381.631563][T22188] RBP: 00007f2e6cd57090 R08: 0000000000000000 R09: 0000000000000000 [ 381.631578][T22188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.631593][T22188] R13: 0000000000000000 R14: 00007f2e6e905fa0 R15: 00007ffe0805bf68 [ 381.631616][T22188] [ 381.860817][ T30] audit: type=1326 audit(1741928673.887:31816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 381.884498][ T30] audit: type=1326 audit(1741928673.887:31817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 381.908291][ T30] audit: type=1326 audit(1741928673.887:31818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 381.931978][ T30] audit: type=1326 audit(1741928673.887:31819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 382.009219][ T30] audit: type=1326 audit(1741928673.887:31820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 382.033083][ T30] audit: type=1326 audit(1741928673.887:31821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 382.056752][ T30] audit: type=1326 audit(1741928673.887:31822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 382.080431][ T30] audit: type=1326 audit(1741928673.887:31823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 382.104048][ T30] audit: type=1326 audit(1741928673.887:31824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.8.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e6ed169 code=0x7ffc0000 [ 382.202725][T22206] FAULT_INJECTION: forcing a failure. [ 382.202725][T22206] name failslab, interval 1, probability 0, space 0, times 0 [ 382.215654][T22206] CPU: 0 UID: 0 PID: 22206 Comm: syz.1.6802 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 382.215688][T22206] Tainted: [W]=WARN [ 382.215695][T22206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 382.215709][T22206] Call Trace: [ 382.215716][T22206] [ 382.215724][T22206] dump_stack_lvl+0xf2/0x150 [ 382.215757][T22206] dump_stack+0x15/0x1a [ 382.215781][T22206] should_fail_ex+0x24a/0x260 [ 382.215868][T22206] should_failslab+0x8f/0xb0 [ 382.215972][T22206] kmem_cache_alloc_noprof+0x52/0x320 [ 382.215997][T22206] ? audit_log_start+0x34c/0x6b0 [ 382.216035][T22206] audit_log_start+0x34c/0x6b0 [ 382.216076][T22206] audit_seccomp+0x4b/0x130 [ 382.216154][T22206] __seccomp_filter+0x6fa/0x1180 [ 382.216180][T22206] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 382.216290][T22206] ? vfs_write+0x644/0x920 [ 382.216394][T22206] ? putname+0xcf/0xf0 [ 382.216417][T22206] __secure_computing+0x9f/0x1c0 [ 382.216438][T22206] syscall_trace_enter+0xd1/0x1f0 [ 382.216463][T22206] ? fpregs_assert_state_consistent+0x83/0xa0 [ 382.216500][T22206] do_syscall_64+0xaa/0x1c0 [ 382.216532][T22206] ? clear_bhb_loop+0x55/0xb0 [ 382.216633][T22206] ? clear_bhb_loop+0x55/0xb0 [ 382.216700][T22206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.216729][T22206] RIP: 0033:0x7f8ae6b0d169 [ 382.216746][T22206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.216820][T22206] RSP: 002b:00007f8ae5177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 382.216840][T22206] RAX: ffffffffffffffda RBX: 00007f8ae6d25fa0 RCX: 00007f8ae6b0d169 [ 382.216851][T22206] RDX: 0000000000240000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 382.216862][T22206] RBP: 00007f8ae5177090 R08: 0000000000000000 R09: 0000000000000000 [ 382.216872][T22206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.216883][T22206] R13: 0000000000000000 R14: 00007f8ae6d25fa0 R15: 00007fffe576a8c8 [ 382.216900][T22206] [ 382.475184][T22212] loop6: detected capacity change from 0 to 2048 [ 382.540524][T22222] syz.0.6807: attempt to access beyond end of device [ 382.540524][T22222] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 382.672088][T22233] loop8: detected capacity change from 0 to 8192 [ 382.681336][T22239] syz.0.6813: attempt to access beyond end of device [ 382.681336][T22239] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 382.755487][T22247] loop8: detected capacity change from 0 to 1024 [ 382.771166][T22247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.799895][T22247] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm +}[@: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 382.855263][T22256] syz.1.6822: attempt to access beyond end of device [ 382.855263][T22256] md28: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 383.100837][T22247] ================================================================== [ 383.109064][T22247] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 383.116239][T22247] [ 383.118575][T22247] write to 0xffff88812905d024 of 4 bytes by task 22257 on cpu 0: [ 383.126311][T22247] xas_set_mark+0x131/0x150 [ 383.130853][T22247] __folio_start_writeback+0x1e8/0x430 [ 383.136342][T22247] ext4_bio_write_folio+0x591/0x9d0 [ 383.141562][T22247] mpage_process_page_bufs+0x486/0x5d0 [ 383.147068][T22247] mpage_prepare_extent_to_map+0x788/0xb80 [ 383.152899][T22247] ext4_do_writepages+0xa20/0x2130 [ 383.158049][T22247] ext4_writepages+0x159/0x2e0 [ 383.162837][T22247] do_writepages+0x1d8/0x480 [ 383.167444][T22247] file_write_and_wait_range+0x168/0x2f0 [ 383.173115][T22247] generic_buffers_fsync_noflush+0x46/0x120 [ 383.179045][T22247] ext4_sync_file+0x1ff/0x6c0 [ 383.183770][T22247] vfs_fsync_range+0x116/0x130 [ 383.188582][T22247] ext4_buffered_write_iter+0x358/0x3c0 [ 383.194168][T22247] ext4_file_write_iter+0x383/0xf20 [ 383.199392][T22247] iter_file_splice_write+0x5f1/0x980 [ 383.204788][T22247] direct_splice_actor+0x160/0x2c0 [ 383.209923][T22247] splice_direct_to_actor+0x302/0x670 [ 383.215324][T22247] do_splice_direct+0xd7/0x150 [ 383.220115][T22247] do_sendfile+0x398/0x660 [ 383.224556][T22247] __x64_sys_sendfile64+0x110/0x150 [ 383.229798][T22247] x64_sys_call+0xfbd/0x2dc0 [ 383.234441][T22247] do_syscall_64+0xc9/0x1c0 [ 383.238974][T22247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.244882][T22247] [ 383.247217][T22247] read to 0xffff88812905d024 of 4 bytes by task 22247 on cpu 1: [ 383.254868][T22247] xas_find_marked+0x608/0x650 [ 383.259675][T22247] find_get_entry+0x54/0x390 [ 383.264277][T22247] filemap_get_folios_tag+0x9e/0x210 [ 383.269577][T22247] mpage_prepare_extent_to_map+0x329/0xb80 [ 383.275407][T22247] ext4_do_writepages+0x6ea/0x2130 [ 383.280547][T22247] ext4_writepages+0x159/0x2e0 [ 383.285332][T22247] do_writepages+0x1d8/0x480 [ 383.289938][T22247] file_write_and_wait_range+0x168/0x2f0 [ 383.295590][T22247] generic_buffers_fsync_noflush+0x46/0x120 [ 383.301501][T22247] ext4_sync_file+0x1ff/0x6c0 [ 383.306200][T22247] vfs_fsync_range+0x116/0x130 [ 383.310992][T22247] ext4_buffered_write_iter+0x358/0x3c0 [ 383.316552][T22247] ext4_file_write_iter+0x383/0xf20 [ 383.321766][T22247] iter_file_splice_write+0x5f1/0x980 [ 383.327149][T22247] direct_splice_actor+0x160/0x2c0 [ 383.332291][T22247] splice_direct_to_actor+0x302/0x670 [ 383.337674][T22247] do_splice_direct+0xd7/0x150 [ 383.342447][T22247] do_sendfile+0x398/0x660 [ 383.346863][T22247] __x64_sys_sendfile64+0x110/0x150 [ 383.352088][T22247] x64_sys_call+0xfbd/0x2dc0 [ 383.356687][T22247] do_syscall_64+0xc9/0x1c0 [ 383.361203][T22247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.367099][T22247] [ 383.369420][T22247] value changed: 0x0a000021 -> 0x00000021 [ 383.375180][T22247] [ 383.377498][T22247] Reported by Kernel Concurrency Sanitizer on: [ 383.383644][T22247] CPU: 1 UID: 0 PID: 22247 Comm: +}[@ Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 383.395368][T22247] Tainted: [W]=WARN [ 383.399167][T22247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 383.409219][T22247] ================================================================== [ 383.737682][T21444] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.425643][ T5682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.435552][ T5682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.445050][ T5682] bond0 (unregistering): Released all slaves [ 386.478980][ T5682] tipc: Disabling bearer [ 386.483949][ T5682] tipc: Left network mode [ 386.489331][ T5682] IPVS: stopping master sync thread 12058 ... [ 386.497034][ T5682] hsr_slave_0: left promiscuous mode [ 386.502803][ T5682] hsr_slave_1: left promiscuous mode [ 386.509589][ T5682] veth1_macvtap: left promiscuous mode [ 386.515246][ T5682] veth0_macvtap: left promiscuous mode [ 386.520792][ T5682] veth1_vlan: left promiscuous mode [ 386.526065][ T5682] veth0_vlan: left promiscuous mode [ 386.868196][ T5682] IPVS: stop unused estimator thread 0...