last executing test programs: 6m6.551972231s ago: executing program 2 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 6m6.523716971s ago: executing program 2 (id=2226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 6m6.506842181s ago: executing program 2 (id=2227): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xc, 0x6, 0x47, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, 0x7800, 0x7800, 0x3, 0x1}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x60, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x44880) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000080)={[{@max_dir_size_kb}, {@stripe={'stripe', 0x3d, 0x8}}, {@grpid}, {@errors_remount}, {@nouid32}, {@block_validity}, {@minixdf}, {@errors_continue}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1, './file0/file0\x00'}, 0x6e) fcntl$dupfd(r8, 0x406, r8) clock_gettime(0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/192) 6m6.001655271s ago: executing program 2 (id=2229): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xfffffffffffffef8, 0x0, 0x0) ptrace(0x10, r3) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000030900004400000000100400f16d3683d30d534ae44b96a5512c8ad62e83c141a1315f4ab90fec7f983c0e5129606ec9dc2979f7f8c993f68ecafc55ab1af66cfd6083127b4e113f83455641455c82accf6462b04c74f27ea2c6a1d6e6e800e1d75bda8cb7d2767495a52662f50edaa832e435c3ce855a500cea79af3ea03611c465ec1c6925af236f5ff26af0168837c6def4039ca9d323db2f7258f7382dffb2d7cb9e13ad7b8e3c9edd756304b7c4ed84909447f756c67eabdc52d3235c0ee0813ccb7695ad061e7df1337ecd3f6483b4e55ee2142d92d0d80c7e5981038bfc9bdbbc01d08e757aed78e9eef2c668836266a76d2e4c002a4cf7ad0a25142f846b5168d33426e6bd9ba2694a27917beb404489a1aa7d46cd7d1a9dd85546d2c68b", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cc, 0x6) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace$getregs(0xc, r3, 0x10000, &(0x7f0000000000)=""/72) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6m5.890939831s ago: executing program 2 (id=2233): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000406000140000100000900010073797a300000000009"], 0x9c}}, 0x0) 6m5.326588011s ago: executing program 2 (id=2242): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x60}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x8000000000002}, 0x18) unshare(0x20040400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 6m5.301543151s ago: executing program 32 (id=2242): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x60}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x8000000000002}, 0x18) unshare(0x20040400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 3m36.723228854s ago: executing program 3 (id=4795): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaabaaaaa4910075ad2b986dd604dd70800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYBLOB="4faece3b3ced1414ee75862510c88246683df99a51f3a24ee26d74bc5e10", @ANYRES16=r0, @ANYRES32=r0], 0x0) mlockall(0x3) io_setup(0x5, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) sendfile(0xffffffffffffffff, r2, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0xfffc, 0x5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@deltaction={0x180, 0x31, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d90284e}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2f40}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6acc}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x180}}, 0xc0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x4, 0xff16, &(0x7f0000000180)) 3m35.999894174s ago: executing program 3 (id=4803): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e20, 0x5, 0x4e20, 0x9, 0x0, 0x30, 0x20}, {0x1, 0x6f, 0x2a9380000000000, 0x4, 0x1000, 0x200, 0xffffffff, 0x5}, {0xc5, 0x993, 0x6, 0x9}, 0x2, 0x6e6bbf, 0x2, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x3c}, 0x8, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x3, 0x0, 0x0, 0x10001, 0x3, 0xa00}}, 0xe8) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', &(0x7f0000000580), 0x220000, &(0x7f0000000680)={'trans=virtio,', {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@mmap}, {@access_uid={'access', 0x3d, r3}}, {@cache_loose}, {@cache_readahead}, {@aname={'aname', 0x3d, 'kfree\x00'}}, {@mmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '{#\xec[#%]&'}}, {@pcr={'pcr', 0x3d, 0x1c}}, {@context={'context', 0x3d, 'staff_u'}}, {@dont_hash}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x32, 0x66, 0x34, 0x37, 0x33, 0x30, 0x64], 0x2d, [0x35, 0x34, 0x38, 0x30], 0x2d, [0x63, 0x31, 0x62, 0x38], 0x2d, [0x33, 0x66, 0x31, 0x36], 0x2d, [0x35, 0x37, 0x61, 0x66, 0x62, 0x31, 0x64, 0x35]}}}, {@pcr={'pcr', 0x3d, 0x22}}, {@measure}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}]}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f00000004c0)={0x0, 0x3000000, 0x8, 0x15, 0x100, &(0x7f00000000c0)="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"}) 3m35.823430904s ago: executing program 3 (id=4809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) creat(&(0x7f0000000600)='./file0\x00', 0xca) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[], 0x15) (async) r9 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="04000000098d92cfc271ea0ccd4000"/27, @ANYRESHEX=r9, @ANYBLOB=',k']) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r12, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) 3m35.823182824s ago: executing program 3 (id=4810): r0 = syz_io_uring_setup(0x5c24, &(0x7f0000000680)={0x0, 0x0, 0x13290, 0x2}, &(0x7f0000000440)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000001140101", @ANYRES16=r1, @ANYRES32=r3], 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') pread64(r4, &(0x7f0000000200)=""/162, 0xa2, 0xae) syz_mount_image$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x2051014, 0x0, 0x2, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x3, 0x48a, [0x0, 0x4000000007c0, 0x400000000aec, 0x400000000c1a], 0x0, &(0x7f0000000000), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/1162]}, 0x502) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000) 3m35.819941764s ago: executing program 3 (id=4811): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) 3m35.801705554s ago: executing program 3 (id=4812): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r3, r3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r9, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0xfffa, 0x3, 0x49, 0x3}}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021241300001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000f8120380300000802c000180250001"], 0x13a8}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) fdatasync(r12) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m20.733925958s ago: executing program 33 (id=4812): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r3, r3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r9, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0xfffa, 0x3, 0x49, 0x3}}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021241300001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000f8120380300000802c000180250001"], 0x13a8}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) fdatasync(r12) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m56.179455836s ago: executing program 0 (id=5401): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fadvise64(0xffffffffffffffff, 0x3, 0x3, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) pipe2(&(0x7f0000000040), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002cf7d64a764ee6892500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='sched_switch\x00', r7}, 0x18) timerfd_create(0x2, 0x80800) 2m55.779153705s ago: executing program 0 (id=5406): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x2}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f"], 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1300000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000002000000000000000000000000000000000000000000e9afd43e792e8a0922a123013dae821dbc39033e2f3390518aeccc7d0a5e246de714c9dcb285f044afdce0cd2a2dabbbe478c6f2d2362eef2cb8de8b6cc0beeb135f59d6e64ef90add8e3680cb46df43be118830fd819de81f84f720b1be380a28d3c2e2811b313b74b44eb9eea6bceda30b848ec63cf69a3475c330546cbb5ca0b61edf45c9e487943844434136a852e808bdbafb9c8be1de63e5a9f475e2223861bbafee1f13bd14832330e67261dd4b953c2f13705813"], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x700, 0x7, 0x7, 0x10001, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x14, 0x24, 0x0, 0x3, [0xb, 0x5, 0x8, 0x7]}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@loopback, r3}, 0x14) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) times(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900d0ea8d8464000004000000060000eefe0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 2m55.711577415s ago: executing program 0 (id=5407): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x835f, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x10fffff, 0xffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000480)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x65, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x16, 0x0, @opaque="6ed59706af52fb8b88a82dc567ae"}}}}}}, 0x3c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="000095980000180100002020702500000000002020207b1af8feffffff00bfa100010000000007010000f0ffffffb702000005000000b70300bfaa0000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendfile(r1, r0, 0x0, 0x80) 2m55.071183614s ago: executing program 0 (id=5415): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_pts(0xffffffffffffffff, 0x10000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000040)=0x51e, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4}}}, 0x90) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x9) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = creat(&(0x7f0000001740)='./bus\x00', 0xa1) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000180)='./bus/file0\x00', 0x2041c3, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX=r4, @ANYRES8, @ANYRES32, @ANYBLOB="7f89788aa6aeed4380045dfd981401487441e95942697f07d43f26c6939fd0c05d1c0191c8c886c8eec946698d86462be47c85def89e902882cfb71d2443ad37af11b83006d68399a270b1fa8b7288fc31a93d8b4314e5"], 0x3, 0x1207, &(0x7f0000002dc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x3, {0xa, 0x4e24, 0xba0, @empty, 0x100}}}, 0x38) 2m54.660842814s ago: executing program 0 (id=5417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25040000005be94b3c4c1181a09edc57995b39653907394e9e9b06914e2e9ee245"], 0x14}}, 0x0) 2m54.447509893s ago: executing program 0 (id=5420): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0xff05, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x300, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/cpu_byteorder', 0x2a040, 0xc1) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000003000000000000000900000048740100", @ANYRES32=r5, @ANYBLOB="3600000000000000000000000030800000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0100000004000000040000000500"/24, @ANYRES32=r7, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0xf) r10 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r10, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\t\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x0) 2m54.445243394s ago: executing program 34 (id=5420): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0xff05, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x300, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/cpu_byteorder', 0x2a040, 0xc1) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000003000000000000000900000048740100", @ANYRES32=r5, @ANYBLOB="3600000000000000000000000030800000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0100000004000000040000000500"/24, @ANYRES32=r7, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0xf) r10 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r10, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\t\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x0) 2m43.549119559s ago: executing program 6 (id=5577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000020000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m43.502843448s ago: executing program 6 (id=5579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x3, 0x5, 0x0, 0x20000008, 0x4, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}}, 0x10000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_open_procfs(0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000000201030000000000000000000000000706001240000400000c000d0708000200ac141439080015"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0) 2m43.323551878s ago: executing program 6 (id=5580): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(r3, &(0x7f0000000080)=@random={'os2.', ':][\x00'}, &(0x7f0000000100)='sys_enter\x00', 0xa, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) sendfile(r0, r2, &(0x7f0000000140)=0x2, 0xc064) tkill(r1, 0x13) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) 2m43.267333388s ago: executing program 6 (id=5582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x107842, 0x14f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103842, 0x0) pwritev2(r2, &(0x7f0000000200)=[{&(0x7f0000000600)="a7", 0x1}], 0x1, 0x800008, 0xe1c5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000004280)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000045c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',vfdno=', @ANYRESHEX=r6, @ANYBLOB=',k']) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r7, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r10 = openat(r1, &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x60) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f00000001c0)={[0x3]}, &(0x7f00000002c0), 0x8) syz_clone(0xa000000, &(0x7f0000000300)="6843e558e6c574f493981f5de9dffeb2453495437692ee4ad20b460d4d059e0696336606e5d45e30cd7bdb0a2c3aa0e919bfe559d7a8fd75e7500135b2ef6f59d57a9ab58fed27cfee5fff2f8abd0bf24eca8b5576ea08d1e371b59e7561bfdc92b7902d9545ffe582ae74ca8f7453ddd613bb57cea5684a17eb4e9bd03e4481bf6a6d82f8b36aa8e180560e39d177a4e161a361d32d7a1b5602bf6f5f1ea57ba78880322b287ec4de0f92d7c64357648d07814492e5fb296870cb814d49", 0xbe, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000400)="0cd5cebb7a195b3071b9fd0f62c888") syz_clone3(&(0x7f0000000640)={0x101005100, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x834}, &(0x7f0000000500)=""/49, 0x31, &(0x7f0000000540)=""/147, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r6}}, 0x58) gettid() 2m43.047197678s ago: executing program 6 (id=5586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25040000005be94b3c4c1181a09edc57995b39653907394e9e9b06914e2e9ee245"], 0x14}}, 0x0) 2m42.477186577s ago: executing program 6 (id=5598): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1af800000400000000000000001000009700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x4}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x163002, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)=0x100) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x3) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0134de0555a3f900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r8) 2m42.447646907s ago: executing program 35 (id=5598): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1af800000400000000000000001000009700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x4}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x163002, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)=0x100) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x3) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0134de0555a3f900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r8) 1m8.224319285s ago: executing program 4 (id=6979): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xfffffd04) move_pages(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/11], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES8=r2, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) (async, rerun: 32) r4 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 64) r5 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) (rerun: 64) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r5}) (async, rerun: 64) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/8, 0x8}, {0x0}], 0x2, 0x8, 0xffffff10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b70300000d00000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) (async, rerun: 64) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$selinux_user(r8, &(0x7f0000000680)=ANY=[@ANYBLOB="73797374656d4f753a6f626a656376512df8e9bb57723a617574685f63616368655f7420db51"], 0x27) (async) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) (async) socket$netlink(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) (async, rerun: 32) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x0, @multicast}}, 0x1e) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x58, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x2, @private1, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e20, 0x2, @local, 0x3}]}, &(0x7f0000000000)=0x10) 1m8.147489846s ago: executing program 4 (id=6982): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x2, 0x30000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (fail_nth: 5) 1m7.187256814s ago: executing program 4 (id=6991): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd27, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) 1m7.099296684s ago: executing program 4 (id=6995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0xd, 0x4, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x625a, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) socket$inet(0x2, 0x80001, 0x84) socket(0x2, 0x80805, 0x0) socket(0x10, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000004c0)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r5) socket(0x10, 0x80002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m6.995400874s ago: executing program 4 (id=7000): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000c, &(0x7f0000000040), 0xde, 0x529, &(0x7f00000008c0)="$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") (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004880)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xd}, &(0x7f0000000200)=0x8) mknod$loop(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) 1m6.871088374s ago: executing program 4 (id=7007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket(0x23, 0x5, 0x0) syz_io_uring_setup(0x74d, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000001780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045"], 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r2, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) close(r4) 51.835117303s ago: executing program 36 (id=7007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket(0x23, 0x5, 0x0) syz_io_uring_setup(0x74d, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000001780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045"], 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r2, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) close(r4) 3.897133065s ago: executing program 5 (id=8118): r0 = syz_open_procfs(0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x78}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.818389436s ago: executing program 5 (id=8121): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000"], 0x30}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000200)) 3.715383586s ago: executing program 5 (id=8125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/159}, 0x6e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483f0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 3.655620625s ago: executing program 5 (id=8127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r1) 2.241121774s ago: executing program 9 (id=8155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x6c, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}, [@NL80211_PMSR_ATTR_PEERS={0x4c, 0xe, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004080}, 0x884) 2.237634113s ago: executing program 9 (id=8156): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 2.216441083s ago: executing program 9 (id=8157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x4000, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000500)={0x800080, 0x810000, 0x40dd1, 0x0, 0xfc, 0x55b}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_pidfd_open(0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0xc3fe17b16d231f05) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000d00)=ANY=[], 0xfe, 0xa27, &(0x7f0000000e80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.625772292s ago: executing program 8 (id=8167): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') fremovexattr(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) preadv2(r8, &(0x7f0000000000)=[{&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000a80)=""/239, 0xef}, {&(0x7f0000000b80)=""/148, 0x94}], 0x4, 0x0, 0x8, 0x11) 1.475339252s ago: executing program 1 (id=8170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, 0x0, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd8d}], 0x1}, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r2) listen(r1, 0x8) r5 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x9}, &(0x7f00000001c0)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x803}, 0x18) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], &(0x7f0000000500), 0x0, 0x2}}, 0x40) 1.448262002s ago: executing program 1 (id=8171): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000001c0)=0x7, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "b886f965c68f016f87fe669985ad7d60f605fb259b7e6b2035bcb8c338"}, 0x28) 1.419339562s ago: executing program 1 (id=8172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000defc07f1611d87e65a5be34d322d5845c4934d7737dbb6f69094cc5313b1b405f982142de405213a561e69fd6da6f988ffe3465200efc7ec68a44837c3017749c436e11bebe0cab7f42ea74b4a02aae582fa7ad500ab6dfa7320b3c449cf5d74a8728efa5be4febec5bbcf85147092e2918f327d3721cdaea4e0a3992a1d5afd6c9afe0130d39fd4f12e68ffccabcba51c6628b097ab170212a1d670574afe751b655949400cf5f4601a24c2964b63b13b000000000000001fe436a6d7efbb5990f21df2157a92cc12532c15", @ANYBLOB="da116ca4a7d55f23bff5104b087dffcb1318769ab32231b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) memfd_secret(0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000e27f00000194cabfc3ced997d36f767e2c885f800900000000000000cafa6ab9096cb728caf2720000419f2170ba162978a9", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r4, &(0x7f0000000740)="900000001c001f4d154a813393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d72e5a15c50866c6d55d08f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x90, 0x3000c080, 0x0, 0x0) rt_sigaction(0x33, &(0x7f0000000500)={&(0x7f0000000300)="65f30f53c72e653e66f30f2d3cfcc4821199cb660fecb21b920000660fd1dec4c2393fcff346a7c46155e83a66660f3808eaf2da33", 0x8000002, &(0x7f00000004c0)="66440fd7ecc4a27d239200000000c4227d79a4550000000066450f11cb660f000af3450fbd0a662645d9eac42279597ce50466400ff38100000081f3ad", {[0xf]}}, &(0x7f00000005c0)={&(0x7f0000000540)="c421fc5ba700000100660ff1e943dd72510f01fcc482d93daeec00000026d9fac421fa7f08d7670fc636a5430f18cf", 0x0, &(0x7f0000000580)="c4c17e2c6c3c00c46385699f00800000000ff10df62600000fff20c4e26139e3c4e2394604c036640f73f6dcdc70000f1883c900000026d9f4"}, 0x8, &(0x7f0000000640)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) writev(r9, &(0x7f0000000a40), 0x10000000000001a2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}, @IFLA_MTU={0x8, 0x3}]}, 0x38}}, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x8, 0x0, 0xe38, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x9}) 1.355428812s ago: executing program 9 (id=8173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000600)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000000)={'bond0\x00', 0x1}) 1.314298252s ago: executing program 9 (id=8174): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x472241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000003c0)="062e2c76ed5da2233b09b336", 0xc}, {&(0x7f0000000600)="465f55f13ff65dbe9141b6b000ab9d8f555218671d276354b40b72686ea54d0c58da19e99df0b67ad2374073e90cf58b20cdb34cc5c4048e3b401540abb30185b7195f872c5ff8a9188ff78fb1eb7bf89702f17d4b3191086b67c8f3dff317994d9d4a127e4fbb7605749f1c3d04c6e505c40ad948f89ef72a1b3f83c6bc6044aa47fc0b34d2a96a2711b1ea8c78c5f82275484a1365659b20b10ad7964e4cee798bffd485cfa2fc06a92cd7532e680b", 0xb0}, {&(0x7f00000006c0)="b8f7dc280391c1e8206424a45eba6508fa5577b403dd5a356f4167a55ddfde8270580d668b65bc6118cf1ced0e4b1cea2a5e6a16daac73530d75367aad2ddb6bb17e3dbb3fe9abb509f4c50e3faa872521a8f76ed802824a0751fe062d8d9b803431b1bf40144829a73efb4aa2aa17a70f7dc7a3f8707aa45660baadbfeffd4fd13cfed4609849735768516b7a7e51a25b291828114e60f0777164df749b09d6bc56e3c0791666402f1ab9fcc4e680a6afd6eb42ddcdeea8031b09b9b49ae9978a9db6", 0xc3}], 0x3, 0x8000, 0x100) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_submit(0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) setgid(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48, 0x4040004}, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) 740.510081ms ago: executing program 8 (id=8179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}, [@NL80211_PMSR_ATTR_PEERS={0x14, 0xe, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004080}, 0x884) 686.422571ms ago: executing program 8 (id=8181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 547.548301ms ago: executing program 8 (id=8182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x200040, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x312}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x440000) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 547.081891ms ago: executing program 1 (id=8183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000600)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000000)={'bond0\x00', 0x1}) 481.899951ms ago: executing program 8 (id=8185): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@errors_continue}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x58f, &(0x7f0000000cc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfffffffffdfffffd}, 0x18) mount(0x0, &(0x7f0000000280)='.\x00', 0x0, 0xa02c, 0x0) 424.128061ms ago: executing program 9 (id=8186): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x3, 'none\x00', 0x20}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[], 0xfffffecf) 423.254291ms ago: executing program 7 (id=8187): syz_pidfd_open(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000132ae57f60014001a80100005800c"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=0xffffffffffffffff], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x300, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\t\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 351.369301ms ago: executing program 1 (id=8188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @multicast2}, "09eeb315b0e18750"}}}}}, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0xfffffffffffffffc, 0x0, 0x0) timer_create(0xfffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f0000000100)='./file0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x290}}, 0x4048010) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0213000005000000000000000000000003"], 0x28}}, 0x0) 167.646681ms ago: executing program 7 (id=8189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 106.28655ms ago: executing program 5 (id=8130): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000001ec0)="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", 0xffc, r1) 91.075601ms ago: executing program 7 (id=8190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}, [@NL80211_PMSR_ATTR_PEERS={0x14, 0xe, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004080}, 0x884) 70.70187ms ago: executing program 7 (id=8191): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8) 31.43654ms ago: executing program 7 (id=8192): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0xd, 0x4, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x625a, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) socket$inet(0x2, 0x80001, 0x84) socket(0x2, 0x80805, 0x0) socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 30.70979ms ago: executing program 8 (id=8193): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x9da, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10000, 0x0, 0x285}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x12, 0x610, 0x148, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "092233fed8bc5dedf3f4d6e243e594b232ebf904fcd38feb4712a47f9497"}}, {{@ipv6={@mcast1, @mcast2, [], [0x0, 0xff], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'wg0\x00', {0xc3d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x80000) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/130, 0x82}, {&(0x7f0000000700)=""/224, 0xe0}], 0x5) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000280)={0x2000000}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000003000000ffffffff04000000001000", @ANYRES32, @ANYBLOB="06000000fd0000000000254e39eefdfab2322000", @ANYRES32, @ANYRES32, @ANYBLOB="0300000002000000050000000f00"/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000d40)={&(0x7f0000000b40)=""/220, 0xdc, 0x0, &(0x7f0000000c40)=""/211, 0xd3}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000005000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.12995ms ago: executing program 7 (id=8194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x200040, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x440000) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 554.06µs ago: executing program 5 (id=8195): close(0xffffffffffffffff) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0xd, 0x4, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x625a, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) socket(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) socket$inet(0x2, 0x80001, 0x84) socket(0x2, 0x80805, 0x0) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 0s ago: executing program 1 (id=8196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000850000006d000000181100000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x6c016c9a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") kernel console output (not intermixed with test programs): f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.107723][T26809] RSP: 002b:00007f476ef51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 460.107741][T26809] RAX: ffffffffffffffda RBX: 00007f4770b05fa0 RCX: 00007f47708ed169 [ 460.107754][T26809] RDX: 0000000000000ec1 RSI: 0000400000000100 RDI: 0000000000000005 [ 460.107788][T26809] RBP: 00007f476ef51090 R08: 0000000000000000 R09: 9e5e111c47e3504f [ 460.107803][T26809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.107818][T26809] R13: 0000000000000000 R14: 00007f4770b05fa0 R15: 00007fff71acb6f8 [ 460.107843][T26809] [ 460.382110][T26797] loop5: detected capacity change from 0 to 512 [ 460.393432][T26797] EXT4-fs: Ignoring removed bh option [ 460.437559][T26820] netlink: 'syz.9.7401': attribute type 4 has an invalid length. [ 460.445438][T26820] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.7401'. [ 460.461966][T26797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 460.487649][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.515142][T26797] EXT4-fs (loop5): 1 truncate cleaned up [ 460.541643][T26797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.571068][T26827] loop9: detected capacity change from 0 to 512 [ 460.599975][T26827] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.617682][T26797] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7395'. [ 460.698766][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.779557][T26840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7408'. [ 460.823561][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.019053][T26861] loop5: detected capacity change from 0 to 1024 [ 461.064565][T26861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.082893][T26872] loop9: detected capacity change from 0 to 512 [ 461.153628][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.307273][T26880] pim6reg1: entered promiscuous mode [ 461.312781][T26880] pim6reg1: entered allmulticast mode [ 461.326577][T26882] loop5: detected capacity change from 0 to 1024 [ 461.343969][T26882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.388388][T26882] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 461.532488][T26896] program syz.9.7428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.546528][T26898] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7429'. [ 461.648016][T26904] loop9: detected capacity change from 0 to 1024 [ 461.681644][ T3376] IPVS: starting estimator thread 0... [ 461.707893][T26911] ªªªªªª: renamed from vlan0 (while UP) [ 461.770995][T26909] IPVS: using max 2352 ests per chain, 117600 per kthread [ 461.873419][T26904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.948671][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.985816][T26919] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 462.068218][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7439'. [ 462.099676][T26921] veth19: entered promiscuous mode [ 462.104925][T26921] veth19: entered allmulticast mode [ 462.479824][T26943] loop8: detected capacity change from 0 to 512 [ 462.522533][T26943] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.7445: corrupted in-inode xattr: invalid ea_ino [ 462.552439][T26943] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.7445: couldn't read orphan inode 15 (err -117) [ 462.566996][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.623367][T26943] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.712298][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.824537][T26947] netfs: Couldn't get user pages (rc=-14) [ 462.845008][T26966] pim6reg1: entered promiscuous mode [ 462.850393][T26966] pim6reg1: entered allmulticast mode [ 462.882158][T26970] loop9: detected capacity change from 0 to 128 [ 463.040815][T26983] loop8: detected capacity change from 0 to 512 [ 463.058673][T26983] EXT4-fs: Ignoring removed bh option [ 463.078997][T26983] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 463.100888][T26988] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.144342][T26983] EXT4-fs (loop8): 1 truncate cleaned up [ 463.154191][T26988] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.193643][T26994] netlink: 'syz.5.7460': attribute type 10 has an invalid length. [ 463.202989][T26994] __nla_validate_parse: 1 callbacks suppressed [ 463.203006][T26994] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7460'. [ 463.229989][T26983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.251990][T26994] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.261884][T26994] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.270095][T26994] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.279873][T26994] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.336644][T26994] team0: Port device geneve1 added [ 463.343258][T26988] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.386771][T26983] netlink: 9 bytes leftover after parsing attributes in process `syz.8.7451'. [ 463.399534][T26988] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.455134][T27009] usb usb9: usbfs: process 27009 (syz.5.7465) did not claim interface 13 before use [ 463.522562][T26988] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.563337][T27015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7467'. [ 463.572373][T27015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7467'. [ 463.573765][T26988] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.744074][T26988] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.784545][T27015] veth39: entered promiscuous mode [ 463.789917][T27015] veth39: entered allmulticast mode [ 463.827136][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.837565][T26988] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.854563][T27056] pim6reg1: entered promiscuous mode [ 463.859943][T27056] pim6reg1: entered allmulticast mode [ 463.887862][T27068] loop8: detected capacity change from 0 to 512 [ 463.912939][T27068] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.7473: corrupted in-inode xattr: invalid ea_ino [ 463.932277][T27068] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.7473: couldn't read orphan inode 15 (err -117) [ 463.962608][T27068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.113096][T27091] SELinux: policydb string ÿÿÿÿ does not match my string SE Linux [ 464.151516][T27091] SELinux: failed to load policy [ 464.181896][T27094] program syz.1.7483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.489439][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 464.489455][ T29] audit: type=1400 audit(2000000443.287:31397): avc: denied { listen } for pid=27114 comm="syz.7.7491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.515990][ T29] audit: type=1400 audit(2000000443.317:31398): avc: denied { accept } for pid=27114 comm="syz.7.7491" lport=55758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.546137][T27095] loop5: detected capacity change from 0 to 512 [ 464.553241][T27095] EXT4-fs: Ignoring removed bh option [ 464.559894][T27095] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 464.601802][T27095] EXT4-fs (loop5): 1 truncate cleaned up [ 464.635812][ T29] audit: type=1400 audit(2000000443.427:31399): avc: denied { create } for pid=27121 comm="syz.9.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 464.656017][ T29] audit: type=1400 audit(2000000443.427:31400): avc: denied { getopt } for pid=27121 comm="syz.9.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 464.681651][T27120] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7482'. [ 464.774362][T27141] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7495'. [ 464.810550][ T29] audit: type=1326 audit(2000000443.477:31401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27092 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec09d169 code=0x7ffc0000 [ 464.834380][ T29] audit: type=1326 audit(2000000443.477:31402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27092 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79ec09d169 code=0x7ffc0000 [ 464.858144][ T29] audit: type=1326 audit(2000000443.477:31403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27092 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec09d169 code=0x7ffc0000 [ 464.881839][ T29] audit: type=1326 audit(2000000443.477:31404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27092 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79ec09d169 code=0x7ffc0000 [ 464.905575][ T29] audit: type=1326 audit(2000000443.477:31405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27092 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec09d169 code=0x7ffc0000 [ 464.929194][ T29] audit: type=1326 audit(2000000443.477:31406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27092 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79ec09d169 code=0x7ffc0000 [ 465.114958][T27186] SELinux: /selinux/user (27186) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 465.376703][T27207] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7506'. [ 465.386978][T27208] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7506'. [ 465.474593][T27206] netlink: 'syz.9.7506': attribute type 1 has an invalid length. [ 465.482868][T27126] kexec: Could not allocate control_code_buffer [ 465.501747][T27208] netlink: 'syz.9.7506': attribute type 1 has an invalid length. [ 465.605082][T27217] loop8: detected capacity change from 0 to 256 [ 465.612135][T27217] msdos: Bad value for 'tz' [ 465.663217][T27222] program syz.9.7511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.724706][T27219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7505'. [ 465.794073][T27204] loop5: detected capacity change from 0 to 32768 [ 465.840138][T27231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.851989][T27204] loop5: p1 p2 p3 < p5 p6 > [ 465.856740][T27204] loop5: p1 size 242222080 extends beyond EOD, truncated [ 465.865332][T27204] loop5: p2 start 4294967295 is beyond EOD, truncated [ 465.881378][T27231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.099054][T27241] netlink: 9 bytes leftover after parsing attributes in process `syz.7.7512'. [ 466.486388][T27304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.502543][T27304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.576730][T27304] loop5: detected capacity change from 0 to 256 [ 466.765489][T27343] netlink: 'syz.7.7528': attribute type 1 has an invalid length. [ 466.768039][T27341] loop9: detected capacity change from 0 to 8192 [ 466.811849][T27345] xt_NFQUEUE: number of total queues is 0 [ 467.032408][T27357] veth9: entered promiscuous mode [ 467.037507][T27357] veth9: entered allmulticast mode [ 467.482002][T27364] loop5: detected capacity change from 0 to 512 [ 467.503911][T27364] EXT4-fs: Ignoring removed bh option [ 467.525140][T27364] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 467.566177][T27364] EXT4-fs (loop5): 1 truncate cleaned up [ 468.424995][T27463] loop8: detected capacity change from 0 to 512 [ 468.481975][T27463] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.7552: corrupted in-inode xattr: invalid ea_ino [ 468.588590][T27463] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.7552: couldn't read orphan inode 15 (err -117) [ 468.622843][T27475] __nla_validate_parse: 5 callbacks suppressed [ 468.622866][T27475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7557'. [ 468.639427][T27475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7557'. [ 468.713075][T27475] veth41: entered promiscuous mode [ 468.718300][T27475] veth41: entered allmulticast mode [ 468.969630][T27480] loop8: detected capacity change from 0 to 512 [ 468.978176][T27480] EXT4-fs: Ignoring removed bh option [ 468.984107][T27480] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 468.997555][T27480] EXT4-fs (loop8): 1 truncate cleaned up [ 469.059928][T27488] netlink: 9 bytes leftover after parsing attributes in process `syz.8.7559'. [ 469.439645][T27532] loop9: detected capacity change from 0 to 8192 [ 469.504475][ T29] kauditd_printk_skb: 2576 callbacks suppressed [ 469.504493][ T29] audit: type=1400 audit(2000000448.307:33983): avc: denied { write } for pid=27536 comm="syz.1.7567" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 469.672034][ T29] audit: type=1400 audit(2000000448.307:33984): avc: denied { ioctl } for pid=27536 comm="syz.1.7567" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 469.699358][ T29] audit: type=1326 audit(2000000448.307:33985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.7567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 469.723339][ T29] audit: type=1326 audit(2000000448.307:33986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.7567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 469.748449][ T29] audit: type=1326 audit(2000000448.307:33987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.7567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 469.773815][ T29] audit: type=1326 audit(2000000448.307:33988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.7567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 469.798896][ T29] audit: type=1326 audit(2000000448.307:33989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.7567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 469.824185][ T29] audit: type=1326 audit(2000000448.307:33990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.7567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 469.849432][ T29] audit: type=1326 audit(2000000448.307:33991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.7567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 469.875025][ T29] audit: type=1326 audit(2000000448.317:33992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.7567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 469.914581][T27572] FAULT_INJECTION: forcing a failure. [ 469.914581][T27572] name failslab, interval 1, probability 0, space 0, times 0 [ 469.927310][T27572] CPU: 1 UID: 0 PID: 27572 Comm: syz.1.7571 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 469.927422][T27572] Tainted: [W]=WARN [ 469.927429][T27572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.927482][T27572] Call Trace: [ 469.927491][T27572] [ 469.927501][T27572] dump_stack_lvl+0xf2/0x150 [ 469.927557][T27572] dump_stack+0x15/0x1a [ 469.927584][T27572] should_fail_ex+0x24a/0x260 [ 469.927623][T27572] should_failslab+0x8f/0xb0 [ 469.927711][T27572] kmem_cache_alloc_noprof+0x52/0x320 [ 469.927732][T27572] ? skb_clone+0x154/0x1f0 [ 469.927760][T27572] skb_clone+0x154/0x1f0 [ 469.927792][T27572] dev_queue_xmit_nit+0x14b/0x680 [ 469.927915][T27572] ? __rcu_read_unlock+0x4e/0x70 [ 469.928009][T27572] dev_hard_start_xmit+0xcc/0x3f0 [ 469.928112][T27572] ? validate_xmit_skb+0x645/0x830 [ 469.928137][T27572] __dev_queue_xmit+0x100a/0x2090 [ 469.928168][T27572] ? __dev_queue_xmit+0x186/0x2090 [ 469.928263][T27572] __netlink_deliver_tap+0x3be/0x4f0 [ 469.928377][T27572] netlink_unicast+0x64a/0x670 [ 469.928424][T27572] netlink_sendmsg+0x5cc/0x6e0 [ 469.928468][T27572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.928504][T27572] __sock_sendmsg+0x140/0x180 [ 469.928540][T27572] ____sys_sendmsg+0x326/0x4b0 [ 469.928596][T27572] __sys_sendmsg+0x19d/0x230 [ 469.928644][T27572] __x64_sys_sendmsg+0x46/0x50 [ 469.928668][T27572] x64_sys_call+0x2734/0x2dc0 [ 469.928699][T27572] do_syscall_64+0xc9/0x1c0 [ 469.928737][T27572] ? clear_bhb_loop+0x55/0xb0 [ 469.928821][T27572] ? clear_bhb_loop+0x55/0xb0 [ 469.928855][T27572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.928888][T27572] RIP: 0033:0x7fd1fde0d169 [ 469.928970][T27572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.928990][T27572] RSP: 002b:00007fd1fc471038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.929008][T27572] RAX: ffffffffffffffda RBX: 00007fd1fe025fa0 RCX: 00007fd1fde0d169 [ 469.929022][T27572] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000006 [ 469.929037][T27572] RBP: 00007fd1fc471090 R08: 0000000000000000 R09: 0000000000000000 [ 469.929096][T27572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.929111][T27572] R13: 0000000000000000 R14: 00007fd1fe025fa0 R15: 00007ffd74c734f8 [ 469.929134][T27572] [ 470.165871][T27575] loop5: detected capacity change from 0 to 1024 [ 470.181155][T27575] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.196191][T27575] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 470.225185][T27575] EXT4-fs (loop5): orphan cleanup on readonly fs [ 470.262361][T27575] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 470.292118][T27575] EXT4-fs (loop5): Remounting filesystem read-only [ 470.313639][T27583] FAULT_INJECTION: forcing a failure. [ 470.313639][T27583] name failslab, interval 1, probability 0, space 0, times 0 [ 470.327733][T27583] CPU: 1 UID: 0 PID: 27583 Comm: syz.9.7575 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 470.327792][T27583] Tainted: [W]=WARN [ 470.327873][T27583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.327885][T27583] Call Trace: [ 470.327892][T27583] [ 470.327900][T27583] dump_stack_lvl+0xf2/0x150 [ 470.327928][T27583] dump_stack+0x15/0x1a [ 470.327949][T27583] should_fail_ex+0x24a/0x260 [ 470.327979][T27583] should_failslab+0x8f/0xb0 [ 470.328087][T27583] kmem_cache_alloc_node_noprof+0x59/0x320 [ 470.328110][T27583] ? set_task_ioprio+0x16a/0x260 [ 470.328135][T27583] set_task_ioprio+0x16a/0x260 [ 470.328159][T27583] __se_sys_ioprio_set+0x422/0x580 [ 470.328201][T27583] __x64_sys_ioprio_set+0x43/0x50 [ 470.328247][T27583] x64_sys_call+0x26e4/0x2dc0 [ 470.328273][T27583] do_syscall_64+0xc9/0x1c0 [ 470.328304][T27583] ? clear_bhb_loop+0x55/0xb0 [ 470.328332][T27583] ? clear_bhb_loop+0x55/0xb0 [ 470.328391][T27583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.328418][T27583] RIP: 0033:0x7f47708ed169 [ 470.328432][T27583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.328449][T27583] RSP: 002b:00007f476ef51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 470.328467][T27583] RAX: ffffffffffffffda RBX: 00007f4770b05fa0 RCX: 00007f47708ed169 [ 470.328479][T27583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 470.328521][T27583] RBP: 00007f476ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 470.328532][T27583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.328544][T27583] R13: 0000000000000000 R14: 00007f4770b05fa0 R15: 00007fff71acb6f8 [ 470.328563][T27583] [ 470.390528][T27575] EXT4-fs (loop5): 1 orphan inode deleted [ 470.538421][T27575] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 470.556568][T27596] program syz.1.7579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.608051][T27574] loop5: detected capacity change from 0 to 512 [ 470.626481][T27602] loop8: detected capacity change from 0 to 1024 [ 470.629314][T27574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.647446][T27602] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.660137][T27601] loop9: detected capacity change from 0 to 1024 [ 470.672473][T27602] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 470.689428][T27601] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 470.703571][T27574] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.7570: invalid block [ 470.717187][T27574] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7570: invalid indirect mapped block 4294967295 (level 1) [ 470.733526][T27602] EXT4-fs (loop8): orphan cleanup on readonly fs [ 470.762369][T27602] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 470.776084][T27602] EXT4-fs (loop8): Remounting filesystem read-only [ 470.784379][T27574] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7570: invalid indirect mapped block 4294967295 (level 1) [ 470.803612][T27602] EXT4-fs (loop8): 1 orphan inode deleted [ 470.809812][T27602] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 470.818236][T27574] EXT4-fs (loop5): 2 truncates cleaned up [ 470.842140][T27574] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7570: bg 0: block 5: invalid block bitmap [ 470.924216][T27597] loop8: detected capacity change from 0 to 512 [ 470.934606][T27597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.954895][T27597] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.7580: invalid block [ 470.986165][T27597] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.7580: invalid indirect mapped block 4294967295 (level 1) [ 471.040233][T27614] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7583'. [ 471.059491][T27597] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.7580: invalid indirect mapped block 4294967295 (level 1) [ 471.133596][T27597] EXT4-fs (loop8): 2 truncates cleaned up [ 471.141243][T27625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7588'. [ 471.173837][T27597] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.7580: bg 0: block 5: invalid block bitmap [ 471.215298][T27635] loop5: detected capacity change from 0 to 512 [ 471.254338][T27635] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.7589: corrupted in-inode xattr: invalid ea_ino [ 471.268549][T27635] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.7589: couldn't read orphan inode 15 (err -117) [ 471.489866][T27654] pim6reg1: entered promiscuous mode [ 471.495391][T27654] pim6reg1: entered allmulticast mode [ 471.662693][T27698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=27698 comm=syz.7.7596 [ 471.676827][T27698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=27698 comm=syz.7.7596 [ 471.973650][T27716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7605'. [ 472.172404][T27728] loop5: detected capacity change from 0 to 512 [ 472.222651][T27728] EXT4-fs (loop5): orphan cleanup on readonly fs [ 472.293014][T27734] program syz.1.7611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.313326][T27728] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7607: bg 0: block 248: padding at end of block bitmap is not set [ 472.393485][T27728] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.7607: Failed to acquire dquot type 1 [ 472.422577][T27728] EXT4-fs (loop5): 1 truncate cleaned up [ 472.488610][T27741] FAULT_INJECTION: forcing a failure. [ 472.488610][T27741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.503181][T27741] CPU: 1 UID: 0 PID: 27741 Comm: syz.1.7615 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 472.503215][T27741] Tainted: [W]=WARN [ 472.503223][T27741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.503238][T27741] Call Trace: [ 472.503247][T27741] [ 472.503323][T27741] dump_stack_lvl+0xf2/0x150 [ 472.503357][T27741] dump_stack+0x15/0x1a [ 472.503382][T27741] should_fail_ex+0x24a/0x260 [ 472.503417][T27741] should_fail+0xb/0x10 [ 472.503490][T27741] should_fail_usercopy+0x1a/0x20 [ 472.503574][T27741] _copy_from_user+0x1c/0xa0 [ 472.503597][T27741] copy_msghdr_from_user+0x54/0x2a0 [ 472.503657][T27741] ? __fget_files+0x17c/0x1c0 [ 472.503700][T27741] __sys_sendmsg+0x13e/0x230 [ 472.503749][T27741] __x64_sys_sendmsg+0x46/0x50 [ 472.503779][T27741] x64_sys_call+0x2734/0x2dc0 [ 472.503854][T27741] do_syscall_64+0xc9/0x1c0 [ 472.503892][T27741] ? clear_bhb_loop+0x55/0xb0 [ 472.503927][T27741] ? clear_bhb_loop+0x55/0xb0 [ 472.504047][T27741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.504074][T27741] RIP: 0033:0x7fd1fde0d169 [ 472.504090][T27741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.504108][T27741] RSP: 002b:00007fd1fc471038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.504130][T27741] RAX: ffffffffffffffda RBX: 00007fd1fe025fa0 RCX: 00007fd1fde0d169 [ 472.504144][T27741] RDX: 0000000000000000 RSI: 0000400000000380 RDI: 0000000000000003 [ 472.504218][T27741] RBP: 00007fd1fc471090 R08: 0000000000000000 R09: 0000000000000000 [ 472.504229][T27741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.504242][T27741] R13: 0000000000000000 R14: 00007fd1fe025fa0 R15: 00007ffd74c734f8 [ 472.504323][T27741] [ 472.725336][T22292] IPVS: starting estimator thread 0... [ 472.821630][T27752] IPVS: using max 2208 ests per chain, 110400 per kthread [ 472.868302][T27761] : renamed from bond0 (while UP) [ 472.910440][T27766] FAULT_INJECTION: forcing a failure. [ 472.910440][T27766] name failslab, interval 1, probability 0, space 0, times 0 [ 472.923158][T27766] CPU: 0 UID: 0 PID: 27766 Comm: syz.8.7625 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 472.923252][T27766] Tainted: [W]=WARN [ 472.923261][T27766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.923375][T27766] Call Trace: [ 472.923382][T27766] [ 472.923390][T27766] dump_stack_lvl+0xf2/0x150 [ 472.923421][T27766] dump_stack+0x15/0x1a [ 472.923447][T27766] should_fail_ex+0x24a/0x260 [ 472.923527][T27766] should_failslab+0x8f/0xb0 [ 472.923581][T27766] kmem_cache_alloc_node_noprof+0x59/0x320 [ 472.923613][T27766] ? __alloc_skb+0x10b/0x310 [ 472.923640][T27766] __alloc_skb+0x10b/0x310 [ 472.923667][T27766] rtmsg_ifinfo_build_skb+0x63/0x1b0 [ 472.923772][T27766] rtmsg_ifinfo+0x6b/0x100 [ 472.923797][T27766] __dev_notify_flags+0x75/0x1a0 [ 472.923853][T27766] dev_change_flags+0xab/0xd0 [ 472.923897][T27766] do_setlink+0x7a1/0x2370 [ 472.923933][T27766] ? selinux_capable+0x1f2/0x260 [ 472.923960][T27766] ? security_capable+0x81/0x90 [ 472.924042][T27766] ? ns_capable+0x7d/0xb0 [ 472.924070][T27766] ? netlink_ns_capable+0x88/0xa0 [ 472.924108][T27766] rtnl_setlink+0x2f9/0x430 [ 472.924164][T27766] ? security_capable+0x81/0x90 [ 472.924218][T27766] ? ns_capable+0x7d/0xb0 [ 472.924244][T27766] ? __pfx_rtnl_setlink+0x10/0x10 [ 472.924278][T27766] rtnetlink_rcv_msg+0x651/0x710 [ 472.924373][T27766] ? ref_tracker_free+0x3a5/0x410 [ 472.924408][T27766] ? __dev_queue_xmit+0x186/0x2090 [ 472.924441][T27766] netlink_rcv_skb+0x12c/0x230 [ 472.924545][T27766] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.924595][T27766] rtnetlink_rcv+0x1c/0x30 [ 472.924619][T27766] netlink_unicast+0x599/0x670 [ 472.924656][T27766] netlink_sendmsg+0x5cc/0x6e0 [ 472.924727][T27766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.924838][T27766] __sock_sendmsg+0x140/0x180 [ 472.924878][T27766] sock_write_iter+0x15e/0x1a0 [ 472.924922][T27766] do_iter_readv_writev+0x403/0x4b0 [ 472.925039][T27766] vfs_writev+0x2d9/0x880 [ 472.925102][T27766] do_writev+0xf4/0x220 [ 472.925125][T27766] __x64_sys_writev+0x45/0x50 [ 472.925161][T27766] x64_sys_call+0x1fab/0x2dc0 [ 472.925194][T27766] do_syscall_64+0xc9/0x1c0 [ 472.925231][T27766] ? clear_bhb_loop+0x55/0xb0 [ 472.925260][T27766] ? clear_bhb_loop+0x55/0xb0 [ 472.925294][T27766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.925386][T27766] RIP: 0033:0x7fcf09a8d169 [ 472.925405][T27766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.925427][T27766] RSP: 002b:00007fcf080f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 472.925451][T27766] RAX: ffffffffffffffda RBX: 00007fcf09ca5fa0 RCX: 00007fcf09a8d169 [ 472.925467][T27766] RDX: 0000000000000001 RSI: 00004000000003c0 RDI: 0000000000000006 [ 472.925479][T27766] RBP: 00007fcf080f1090 R08: 0000000000000000 R09: 0000000000000000 [ 472.925491][T27766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.925503][T27766] R13: 0000000000000000 R14: 00007fcf09ca5fa0 R15: 00007fff13166708 [ 472.925549][T27766] [ 473.557999][T27803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7627'. [ 473.568616][T27803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7627'. [ 473.839064][T27827] FAULT_INJECTION: forcing a failure. [ 473.839064][T27827] name failslab, interval 1, probability 0, space 0, times 0 [ 473.853257][T27827] CPU: 1 UID: 0 PID: 27827 Comm: syz.5.7644 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 473.853297][T27827] Tainted: [W]=WARN [ 473.853307][T27827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 473.853323][T27827] Call Trace: [ 473.853332][T27827] [ 473.853343][T27827] dump_stack_lvl+0xf2/0x150 [ 473.853379][T27827] dump_stack+0x15/0x1a [ 473.853467][T27827] should_fail_ex+0x24a/0x260 [ 473.853505][T27827] should_failslab+0x8f/0xb0 [ 473.853543][T27827] kmem_cache_alloc_node_noprof+0x59/0x320 [ 473.853576][T27827] ? __alloc_skb+0x10b/0x310 [ 473.853603][T27827] __alloc_skb+0x10b/0x310 [ 473.853630][T27827] netlink_alloc_large_skb+0xad/0xe0 [ 473.853667][T27827] netlink_sendmsg+0x3b4/0x6e0 [ 473.853780][T27827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.853921][T27827] __sock_sendmsg+0x140/0x180 [ 473.853962][T27827] ____sys_sendmsg+0x326/0x4b0 [ 473.854040][T27827] __sys_sendmsg+0x19d/0x230 [ 473.854134][T27827] __x64_sys_sendmsg+0x46/0x50 [ 473.854159][T27827] x64_sys_call+0x2734/0x2dc0 [ 473.854188][T27827] do_syscall_64+0xc9/0x1c0 [ 473.854226][T27827] ? clear_bhb_loop+0x55/0xb0 [ 473.854259][T27827] ? clear_bhb_loop+0x55/0xb0 [ 473.854293][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.854398][T27827] RIP: 0033:0x7f79ec09d169 [ 473.854417][T27827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.854439][T27827] RSP: 002b:00007f79ea707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.854462][T27827] RAX: ffffffffffffffda RBX: 00007f79ec2b5fa0 RCX: 00007f79ec09d169 [ 473.854477][T27827] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 473.854492][T27827] RBP: 00007f79ea707090 R08: 0000000000000000 R09: 0000000000000000 [ 473.854584][T27827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.854599][T27827] R13: 0000000000000000 R14: 00007f79ec2b5fa0 R15: 00007ffd20e6f7a8 [ 473.854623][T27827] [ 474.086005][T27829] loop9: detected capacity change from 0 to 1024 [ 474.093562][T27829] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 474.099779][T27827] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 474.104790][T27829] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 474.110455][T27827] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 474.112106][T27827] vhci_hcd vhci_hcd.0: Device attached [ 474.118666][T27829] EXT4-fs (loop9): orphan cleanup on readonly fs [ 474.140749][T27829] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 474.152576][T27829] EXT4-fs (loop9): Remounting filesystem read-only [ 474.159377][T27829] EXT4-fs (loop9): 1 orphan inode deleted [ 474.165993][T27829] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 474.180100][T27830] vhci_hcd: connection closed [ 474.181748][T14458] vhci_hcd: stop threads [ 474.190753][T14458] vhci_hcd: release socket [ 474.195249][T14458] vhci_hcd: disconnect device [ 474.231974][T27825] loop9: detected capacity change from 0 to 512 [ 474.246484][T27825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.279683][T27825] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.7636: invalid block [ 474.302176][T27825] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.7636: invalid indirect mapped block 4294967295 (level 1) [ 474.324280][T27834] netlink: 9 bytes leftover after parsing attributes in process `syz.7.7642'. [ 474.350052][T27843] binfmt_misc: register: failed to install interpreter file ./file2 [ 474.387228][T27825] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.7636: invalid indirect mapped block 4294967295 (level 1) [ 474.422484][T27825] EXT4-fs (loop9): 2 truncates cleaned up [ 474.445187][T27825] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.7636: bg 0: block 5: invalid block bitmap [ 474.966411][T27920] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7655'. [ 474.976969][T27920] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7655'. [ 475.008850][T27920] veth11: entered promiscuous mode [ 475.014177][T27920] veth11: entered allmulticast mode [ 475.137273][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 475.137290][ T29] audit: type=1400 audit(2000000453.937:34296): avc: denied { write } for pid=27928 comm="syz.1.7659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 475.175905][T27931] loop9: detected capacity change from 0 to 1024 [ 475.251728][T27931] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 475.602506][T27968] netlink: 'syz.5.7668': attribute type 10 has an invalid length. [ 475.611892][T27968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7668'. [ 475.643256][T27968] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.653229][T27968] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.663160][T27968] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.672956][T27968] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.732322][ T29] audit: type=1400 audit(2000000454.537:34297): avc: denied { execute } for pid=27971 comm="syz.1.7671" path=2F6D656D66643A6C16A4AF8952406D07FF9B232A1BF226650E847A2CB261F3116C5BDB4D612490862071B2BB5C6AB002DED32024A794E1549F2E33202864656C6574656429 dev="tmpfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 475.807249][T27978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.831635][T27978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.858257][T27978] loop5: detected capacity change from 0 to 256 [ 476.005105][T27993] 9pnet_fd: Insufficient options for proto=fd [ 476.066150][T28001] netlink: 'syz.1.7682': attribute type 16 has an invalid length. [ 476.167259][T28009] netlink: 'syz.9.7683': attribute type 10 has an invalid length. [ 476.176644][T28009] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7683'. [ 476.206177][T28009] team0: Port device geneve1 added [ 476.223793][ T29] audit: type=1326 audit(2000000455.017:34298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.1.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 476.249043][ T29] audit: type=1326 audit(2000000455.017:34299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.1.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 476.274074][ T29] audit: type=1326 audit(2000000455.017:34300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.1.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 476.299294][ T29] audit: type=1326 audit(2000000455.017:34301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.1.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 476.324511][ T29] audit: type=1326 audit(2000000455.017:34302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.1.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 476.349432][ T29] audit: type=1326 audit(2000000455.017:34303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.1.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 476.373862][ T29] audit: type=1326 audit(2000000455.017:34304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.1.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 476.397625][ T29] audit: type=1326 audit(2000000455.017:34305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.1.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 476.442789][T28014] loop9: detected capacity change from 0 to 512 [ 476.474655][T28014] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 476.494013][T28014] FAULT_INJECTION: forcing a failure. [ 476.494013][T28014] name failslab, interval 1, probability 0, space 0, times 0 [ 476.508460][T28014] CPU: 1 UID: 0 PID: 28014 Comm: syz.9.7685 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 476.508549][T28014] Tainted: [W]=WARN [ 476.508559][T28014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 476.508575][T28014] Call Trace: [ 476.508584][T28014] [ 476.508594][T28014] dump_stack_lvl+0xf2/0x150 [ 476.508630][T28014] dump_stack+0x15/0x1a [ 476.508735][T28014] should_fail_ex+0x24a/0x260 [ 476.508793][T28014] should_failslab+0x8f/0xb0 [ 476.508863][T28014] __kmalloc_noprof+0xab/0x3f0 [ 476.508889][T28014] ? ext4_find_extent+0x172/0x7c0 [ 476.508920][T28014] ext4_find_extent+0x172/0x7c0 [ 476.508984][T28014] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 476.509020][T28014] ? rb_insert_color+0x6a/0x290 [ 476.509059][T28014] ext4_ext_map_blocks+0x11f/0x35c0 [ 476.509104][T28014] ? _raw_write_unlock+0xd/0x30 [ 476.509142][T28014] ? ext4_es_insert_extent+0x1b24/0x1c60 [ 476.509204][T28014] ? ext4_es_lookup_extent+0x35b/0x520 [ 476.509258][T28014] ext4_map_blocks+0x5aa/0xd20 [ 476.509320][T28014] _ext4_get_block+0x104/0x370 [ 476.509420][T28014] ext4_get_block_unwritten+0x2c/0xb0 [ 476.509557][T28014] ext4_block_write_begin+0x34f/0x9c0 [ 476.509606][T28014] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 476.509677][T28014] ? ext4_inode_journal_mode+0xdf/0x1d0 [ 476.509708][T28014] ext4_write_begin+0x426/0xc30 [ 476.509742][T28014] ? fault_in_readable+0x9a/0x1b0 [ 476.509851][T28014] ? fault_in_readable+0xec/0x1b0 [ 476.509884][T28014] ext4_da_write_begin+0x1b6/0x540 [ 476.509920][T28014] generic_perform_write+0x1a8/0x4a0 [ 476.510026][T28014] ext4_buffered_write_iter+0x1ed/0x3c0 [ 476.510071][T28014] ext4_file_write_iter+0x383/0xf20 [ 476.510113][T28014] ? kstrtouint_from_user+0xb0/0xe0 [ 476.510153][T28014] ? avc_policy_seqno+0x15/0x20 [ 476.510247][T28014] ? selinux_file_permission+0x22a/0x360 [ 476.510283][T28014] vfs_write+0x77b/0x920 [ 476.510401][T28014] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 476.510445][T28014] ksys_write+0xe8/0x1b0 [ 476.510478][T28014] __x64_sys_write+0x42/0x50 [ 476.510507][T28014] x64_sys_call+0x287e/0x2dc0 [ 476.510542][T28014] do_syscall_64+0xc9/0x1c0 [ 476.510654][T28014] ? clear_bhb_loop+0x55/0xb0 [ 476.510754][T28014] ? clear_bhb_loop+0x55/0xb0 [ 476.510850][T28014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.510884][T28014] RIP: 0033:0x7f47708ed169 [ 476.510905][T28014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.510998][T28014] RSP: 002b:00007f476ef51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 476.511021][T28014] RAX: ffffffffffffffda RBX: 00007f4770b05fa0 RCX: 00007f47708ed169 [ 476.511038][T28014] RDX: 000000000208e24b RSI: 0000400000000380 RDI: 0000000000000005 [ 476.511053][T28014] RBP: 00007f476ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 476.511068][T28014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.511080][T28014] R13: 0000000000000000 R14: 00007f4770b05fa0 R15: 00007fff71acb6f8 [ 476.511103][T28014] [ 476.819446][T28017] loop8: detected capacity change from 0 to 1024 [ 476.853384][T28017] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 476.952639][T28034] loop9: detected capacity change from 0 to 1024 [ 476.974896][T28034] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 477.468071][T28053] loop8: detected capacity change from 0 to 2048 [ 477.573144][T28058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.598499][T28058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.624327][T28058] loop8: detected capacity change from 0 to 256 [ 477.772179][T28069] loop9: detected capacity change from 0 to 512 [ 477.779096][T28069] EXT4-fs: Ignoring removed bh option [ 477.786923][T28069] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 477.814118][T28069] EXT4-fs (loop9): 1 truncate cleaned up [ 477.887699][T28080] loop5: detected capacity change from 0 to 1024 [ 477.908877][T28069] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7700'. [ 478.006866][T28092] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 478.416478][T28132] netlink: 1156 bytes leftover after parsing attributes in process `syz.7.7718'. [ 478.665048][T28174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.677395][T28174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.693168][T28174] loop9: detected capacity change from 0 to 256 [ 478.733032][T28177] netlink: 'syz.7.7721': attribute type 10 has an invalid length. [ 478.742396][T28177] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7721'. [ 478.778047][T28177] team0: Port device geneve1 added [ 478.950369][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7728'. [ 478.959443][T28189] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7728'. [ 478.998587][T28189] veth37: entered promiscuous mode [ 479.003865][T28189] veth37: entered allmulticast mode [ 479.057042][T28180] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 479.082836][T28193] loop5: detected capacity change from 0 to 1024 [ 479.129121][T28193] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 479.172380][T28193] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 479.196213][T28193] EXT4-fs (loop5): orphan cleanup on readonly fs [ 479.237704][T28193] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 479.257058][T28193] EXT4-fs (loop5): Remounting filesystem read-only [ 479.276943][T28193] EXT4-fs (loop5): 1 orphan inode deleted [ 479.307841][T28193] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 479.325015][T28193] EXT4-fs unmount: 40 callbacks suppressed [ 479.325036][T28193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.352406][T28202] loop8: detected capacity change from 0 to 1024 [ 479.361113][T28206] 9pnet_fd: Insufficient options for proto=fd [ 479.406233][T28191] loop5: detected capacity change from 0 to 512 [ 479.422269][T28191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 479.454704][T28191] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.7729: invalid block [ 479.473190][T28191] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7729: invalid indirect mapped block 4294967295 (level 1) [ 479.502258][T28211] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7734'. [ 479.512709][T28211] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7734'. [ 479.515227][T28191] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7729: invalid indirect mapped block 4294967295 (level 1) [ 479.548254][T28191] EXT4-fs (loop5): 2 truncates cleaned up [ 479.558963][T28213] netlink: 'syz.8.7735': attribute type 10 has an invalid length. [ 479.567051][T28213] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7735'. [ 479.589506][T28191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.646867][T28213] team0: Port device geneve1 added [ 479.674445][T28191] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7729: bg 0: block 5: invalid block bitmap [ 479.754538][T28215] loop8: detected capacity change from 0 to 2048 [ 479.799863][T28219] xt_CT: No such helper "syz0" [ 479.812175][T28215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.835887][T28215] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.848613][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.046766][T28238] pim6reg1: entered promiscuous mode [ 480.052193][T28238] pim6reg1: entered allmulticast mode [ 480.068229][T28238] loop5: detected capacity change from 0 to 1764 [ 480.211209][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 480.211226][ T29] audit: type=1400 audit(2000000459.017:34720): avc: denied { unmount } for pid=19347 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 480.362161][T27840] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 480.463926][ T8480] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1243 with error 117 [ 480.476693][ T8480] EXT4-fs (loop8): This should not happen!! Data will be lost [ 480.476693][ T8480] [ 480.491567][ T29] audit: type=1326 audit(2000000459.297:34721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.515317][ T29] audit: type=1326 audit(2000000459.297:34722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.539125][ T29] audit: type=1326 audit(2000000459.297:34723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.548237][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7754'. [ 480.562877][ T29] audit: type=1326 audit(2000000459.297:34724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.562917][ T29] audit: type=1326 audit(2000000459.297:34725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.562975][ T29] audit: type=1326 audit(2000000459.297:34726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.563010][ T29] audit: type=1326 audit(2000000459.297:34727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.563077][ T29] audit: type=1326 audit(2000000459.297:34728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.563110][ T29] audit: type=1326 audit(2000000459.297:34729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28263 comm="syz.1.7755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 480.598906][T28268] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7752'. [ 480.904048][T28286] FAULT_INJECTION: forcing a failure. [ 480.904048][T28286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.907552][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.918648][T28286] CPU: 1 UID: 0 PID: 28286 Comm: syz.5.7759 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 480.918691][T28286] Tainted: [W]=WARN [ 480.918700][T28286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 480.918811][T28286] Call Trace: [ 480.918821][T28286] [ 480.918832][T28286] dump_stack_lvl+0xf2/0x150 [ 480.918867][T28286] dump_stack+0x15/0x1a [ 480.918895][T28286] should_fail_ex+0x24a/0x260 [ 480.918934][T28286] should_fail+0xb/0x10 [ 480.918968][T28286] should_fail_usercopy+0x1a/0x20 [ 480.919095][T28286] _copy_from_user+0x1c/0xa0 [ 480.919119][T28286] copy_msghdr_from_user+0x54/0x2a0 [ 480.919168][T28286] ? __fget_files+0x17c/0x1c0 [ 480.919214][T28286] __sys_sendmsg+0x13e/0x230 [ 480.919307][T28286] __x64_sys_sendmsg+0x46/0x50 [ 480.919362][T28286] x64_sys_call+0x2734/0x2dc0 [ 480.919416][T28286] do_syscall_64+0xc9/0x1c0 [ 480.919522][T28286] ? clear_bhb_loop+0x55/0xb0 [ 480.919573][T28286] ? clear_bhb_loop+0x55/0xb0 [ 480.919608][T28286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.919642][T28286] RIP: 0033:0x7f79ec09d169 [ 480.919663][T28286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.919732][T28286] RSP: 002b:00007f79ea707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.919756][T28286] RAX: ffffffffffffffda RBX: 00007f79ec2b5fa0 RCX: 00007f79ec09d169 [ 480.919772][T28286] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 480.919787][T28286] RBP: 00007f79ea707090 R08: 0000000000000000 R09: 0000000000000000 [ 480.919803][T28286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.919819][T28286] R13: 0000000000000000 R14: 00007f79ec2b5fa0 R15: 00007ffd20e6f7a8 [ 480.919850][T28286] [ 481.339924][T28296] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7765'. [ 481.350259][T28296] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7765'. [ 481.412019][T28296] veth39: entered promiscuous mode [ 481.417186][T28296] veth39: entered allmulticast mode [ 481.604620][T28315] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7771'. [ 481.716829][T28294] loop9: detected capacity change from 0 to 512 [ 481.740441][T28294] EXT4-fs: Ignoring removed bh option [ 481.758224][T28294] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 481.788682][T28294] EXT4-fs (loop9): 1 truncate cleaned up [ 481.806764][T28324] netlink: 'syz.8.7775': attribute type 10 has an invalid length. [ 481.808478][T28330] loop5: detected capacity change from 0 to 1024 [ 481.814773][T28324] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7775'. [ 481.820509][T28294] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.864303][T28330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.902033][T28319] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7763'. [ 481.973812][T28342] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 482.383762][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.525940][T28399] FAULT_INJECTION: forcing a failure. [ 482.525940][T28399] name failslab, interval 1, probability 0, space 0, times 0 [ 482.538712][T28399] CPU: 1 UID: 0 PID: 28399 Comm: +}[@ Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 482.538782][T28399] Tainted: [W]=WARN [ 482.538791][T28399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 482.538804][T28399] Call Trace: [ 482.538811][T28399] [ 482.538820][T28399] dump_stack_lvl+0xf2/0x150 [ 482.538849][T28399] dump_stack+0x15/0x1a [ 482.538873][T28399] should_fail_ex+0x24a/0x260 [ 482.538947][T28399] ? genl_start+0x11e/0x3a0 [ 482.538969][T28399] should_failslab+0x8f/0xb0 [ 482.539052][T28399] __kmalloc_cache_noprof+0x4e/0x320 [ 482.539083][T28399] genl_start+0x11e/0x3a0 [ 482.539114][T28399] __netlink_dump_start+0x32a/0x520 [ 482.539156][T28399] genl_rcv_msg+0x4ea/0x6d0 [ 482.539186][T28399] ? __pfx_ethnl_default_start+0x10/0x10 [ 482.539371][T28399] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 482.539409][T28399] ? __pfx_ethnl_default_done+0x10/0x10 [ 482.539522][T28399] ? __pfx_genl_start+0x10/0x10 [ 482.539560][T28399] ? __pfx_genl_dumpit+0x10/0x10 [ 482.539583][T28399] ? __pfx_genl_done+0x10/0x10 [ 482.539613][T28399] netlink_rcv_skb+0x12c/0x230 [ 482.539650][T28399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.539690][T28399] genl_rcv+0x28/0x40 [ 482.539714][T28399] netlink_unicast+0x599/0x670 [ 482.539747][T28399] netlink_sendmsg+0x5cc/0x6e0 [ 482.539787][T28399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.539881][T28399] __sock_sendmsg+0x140/0x180 [ 482.539919][T28399] ____sys_sendmsg+0x326/0x4b0 [ 482.539955][T28399] __sys_sendmsg+0x19d/0x230 [ 482.540084][T28399] __x64_sys_sendmsg+0x46/0x50 [ 482.540166][T28399] x64_sys_call+0x2734/0x2dc0 [ 482.540199][T28399] do_syscall_64+0xc9/0x1c0 [ 482.540268][T28399] ? clear_bhb_loop+0x55/0xb0 [ 482.540300][T28399] ? clear_bhb_loop+0x55/0xb0 [ 482.540395][T28399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.540499][T28399] RIP: 0033:0x7f47708ed169 [ 482.540518][T28399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.540540][T28399] RSP: 002b:00007f476ef51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.540562][T28399] RAX: ffffffffffffffda RBX: 00007f4770b05fa0 RCX: 00007f47708ed169 [ 482.540636][T28399] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: 0000000000000005 [ 482.540648][T28399] RBP: 00007f476ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 482.540660][T28399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.540674][T28399] R13: 0000000000000000 R14: 00007f4770b05fa0 R15: 00007fff71acb6f8 [ 482.540753][T28399] [ 482.811908][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.855574][T28412] lo: entered promiscuous mode [ 482.860464][T28412] lo: entered allmulticast mode [ 483.275937][T28447] loop5: detected capacity change from 0 to 512 [ 483.353385][T28447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 483.451558][T28447] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.573606][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 483.634090][T28475] bond0: entered promiscuous mode [ 483.639225][T28475] bond_slave_0: entered promiscuous mode [ 483.645031][T28475] bond_slave_1: entered promiscuous mode [ 483.753864][T28486] usb usb8: usbfs: process 28486 (syz.5.7804) did not claim interface 0 before use [ 483.831485][T28492] 9pnet_fd: Insufficient options for proto=fd [ 484.440837][T28547] loop9: detected capacity change from 0 to 1024 [ 484.512728][T28547] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.553687][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.607968][T28561] __nla_validate_parse: 4 callbacks suppressed [ 484.607987][T28561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7816'. [ 484.626041][T28561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7816'. [ 484.644919][T28566] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7815'. [ 484.661227][T28555] netlink: 9 bytes leftover after parsing attributes in process `syz.7.7810'. [ 484.694718][T28561] veth45: entered promiscuous mode [ 484.699932][T28561] veth45: entered allmulticast mode [ 484.824125][T28581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7818'. [ 484.845272][T28582] futex_wake_op: syz.5.7819 tries to shift op by -1; fix this program [ 485.013613][T28587] gretap0: left promiscuous mode [ 485.034256][T28587] netlink: 136 bytes leftover after parsing attributes in process `syz.8.7820'. [ 485.044906][T28587] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 485.327017][T28628] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7822'. [ 485.546584][ T3375] IPVS: starting estimator thread 0... [ 485.639668][T28654] xt_socket: unknown flags 0xc [ 485.648326][T28649] IPVS: using max 2304 ests per chain, 115200 per kthread [ 485.836839][T28667] loop5: detected capacity change from 0 to 1024 [ 485.863758][T28667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.945083][T28667] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 486.158771][T28680] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7839'. [ 486.188425][T28685] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7840'. [ 486.256222][T28656] netlink: 'syz.8.7830': attribute type 4 has an invalid length. [ 486.272651][T28691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.281779][T28691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.292439][T28656] netlink: 1196 bytes leftover after parsing attributes in process `syz.8.7830'. [ 486.454432][T28700] netlink: 'syz.9.7845': attribute type 10 has an invalid length. [ 486.466001][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 486.466019][ T29] audit: type=1326 audit(2000000465.267:35001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09a8d169 code=0x7ffc0000 [ 486.505805][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.520189][ T29] audit: type=1326 audit(2000000465.267:35002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fcf09a8d169 code=0x7ffc0000 [ 486.543913][ T29] audit: type=1326 audit(2000000465.267:35003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09a8d169 code=0x7ffc0000 [ 486.567647][ T29] audit: type=1326 audit(2000000465.267:35004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcf09a8d169 code=0x7ffc0000 [ 486.591376][ T29] audit: type=1326 audit(2000000465.277:35005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf09a8d1a3 code=0x7ffc0000 [ 486.614846][ T29] audit: type=1326 audit(2000000465.277:35006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf09a8d1a3 code=0x7ffc0000 [ 486.638375][ T29] audit: type=1326 audit(2000000465.277:35007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09a8d169 code=0x7ffc0000 [ 486.662025][ T29] audit: type=1326 audit(2000000465.277:35008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09a8d169 code=0x7ffc0000 [ 486.685733][ T29] audit: type=1326 audit(2000000465.277:35009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09a8d169 code=0x7ffc0000 [ 486.709336][ T29] audit: type=1326 audit(2000000465.277:35010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28655 comm="syz.8.7830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09a8d169 code=0x7ffc0000 [ 486.752093][T28704] FAULT_INJECTION: forcing a failure. [ 486.752093][T28704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.767616][T28704] CPU: 1 UID: 0 PID: 28704 Comm: syz.5.7847 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 486.767708][T28704] Tainted: [W]=WARN [ 486.767716][T28704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.767728][T28704] Call Trace: [ 486.767735][T28704] [ 486.767744][T28704] dump_stack_lvl+0xf2/0x150 [ 486.767827][T28704] dump_stack+0x15/0x1a [ 486.767860][T28704] should_fail_ex+0x24a/0x260 [ 486.767941][T28704] should_fail+0xb/0x10 [ 486.767976][T28704] should_fail_usercopy+0x1a/0x20 [ 486.768030][T28704] _copy_to_user+0x20/0xa0 [ 486.768055][T28704] simple_read_from_buffer+0xa0/0x110 [ 486.768124][T28704] proc_fail_nth_read+0xf9/0x140 [ 486.768171][T28704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.768200][T28704] vfs_read+0x19b/0x6f0 [ 486.768230][T28704] ? __rcu_read_unlock+0x4e/0x70 [ 486.768317][T28704] ? __fget_files+0x17c/0x1c0 [ 486.768363][T28704] ksys_read+0xe8/0x1b0 [ 486.768398][T28704] __x64_sys_read+0x42/0x50 [ 486.768430][T28704] x64_sys_call+0x2874/0x2dc0 [ 486.768507][T28704] do_syscall_64+0xc9/0x1c0 [ 486.768584][T28704] ? clear_bhb_loop+0x55/0xb0 [ 486.768858][T28704] ? clear_bhb_loop+0x55/0xb0 [ 486.768923][T28704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.768979][T28704] RIP: 0033:0x7f79ec09bb7c [ 486.769004][T28704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 486.769028][T28704] RSP: 002b:00007f79ea707030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.769051][T28704] RAX: ffffffffffffffda RBX: 00007f79ec2b5fa0 RCX: 00007f79ec09bb7c [ 486.769126][T28704] RDX: 000000000000000f RSI: 00007f79ea7070a0 RDI: 0000000000000004 [ 486.769142][T28704] RBP: 00007f79ea707090 R08: 0000000000000000 R09: 0000000000000000 [ 486.769155][T28704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.769167][T28704] R13: 0000000000000000 R14: 00007f79ec2b5fa0 R15: 00007ffd20e6f7a8 [ 486.769190][T28704] [ 487.070986][T28722] Cannot find del_set index 2 as target [ 487.242888][T28737] FAULT_INJECTION: forcing a failure. [ 487.242888][T28737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.257475][T28737] CPU: 1 UID: 0 PID: 28737 Comm: syz.8.7858 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 487.257513][T28737] Tainted: [W]=WARN [ 487.257522][T28737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.257538][T28737] Call Trace: [ 487.257627][T28737] [ 487.257639][T28737] dump_stack_lvl+0xf2/0x150 [ 487.257673][T28737] dump_stack+0x15/0x1a [ 487.257697][T28737] should_fail_ex+0x24a/0x260 [ 487.257743][T28737] should_fail+0xb/0x10 [ 487.257777][T28737] should_fail_usercopy+0x1a/0x20 [ 487.257817][T28737] _copy_to_user+0x20/0xa0 [ 487.257841][T28737] simple_read_from_buffer+0xa0/0x110 [ 487.257878][T28737] proc_fail_nth_read+0xf9/0x140 [ 487.257962][T28737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.258008][T28737] vfs_read+0x19b/0x6f0 [ 487.258040][T28737] ? rtnl_unlock+0xe/0x20 [ 487.258137][T28737] ? __rcu_read_unlock+0x4e/0x70 [ 487.258167][T28737] ? __fget_files+0x17c/0x1c0 [ 487.258276][T28737] ksys_read+0xe8/0x1b0 [ 487.258311][T28737] __x64_sys_read+0x42/0x50 [ 487.258344][T28737] x64_sys_call+0x2874/0x2dc0 [ 487.258378][T28737] do_syscall_64+0xc9/0x1c0 [ 487.258477][T28737] ? clear_bhb_loop+0x55/0xb0 [ 487.258513][T28737] ? clear_bhb_loop+0x55/0xb0 [ 487.258615][T28737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.258642][T28737] RIP: 0033:0x7fcf09a8bb7c [ 487.258719][T28737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 487.258774][T28737] RSP: 002b:00007fcf080f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.258793][T28737] RAX: ffffffffffffffda RBX: 00007fcf09ca5fa0 RCX: 00007fcf09a8bb7c [ 487.258806][T28737] RDX: 000000000000000f RSI: 00007fcf080f10a0 RDI: 0000000000000007 [ 487.258818][T28737] RBP: 00007fcf080f1090 R08: 0000000000000000 R09: 0000000000000000 [ 487.258830][T28737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.258845][T28737] R13: 0000000000000000 R14: 00007fcf09ca5fa0 R15: 00007fff13166708 [ 487.258870][T28737] [ 487.482795][T28742] loop9: detected capacity change from 0 to 1024 [ 487.548235][T28742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.614461][T28742] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 487.662823][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.717030][T28757] team0 (unregistering): Port device team_slave_0 removed [ 487.737950][T28757] team0 (unregistering): Port device team_slave_1 removed [ 487.938874][T28781] pim6reg1: entered promiscuous mode [ 487.944315][T28781] pim6reg1: entered allmulticast mode [ 487.972628][T28778] FAULT_INJECTION: forcing a failure. [ 487.972628][T28778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.987331][T28778] CPU: 1 UID: 0 PID: 28778 Comm: syz.9.7873 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 487.987362][T28778] Tainted: [W]=WARN [ 487.987369][T28778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.987383][T28778] Call Trace: [ 487.987391][T28778] [ 487.987400][T28778] dump_stack_lvl+0xf2/0x150 [ 487.987478][T28778] dump_stack+0x15/0x1a [ 487.987506][T28778] should_fail_ex+0x24a/0x260 [ 487.987544][T28778] should_fail_alloc_page+0xfd/0x110 [ 487.987584][T28778] __alloc_frozen_pages_noprof+0x109/0x340 [ 487.987631][T28778] alloc_pages_mpol+0xb4/0x260 [ 487.987660][T28778] vma_alloc_folio_noprof+0x1a0/0x310 [ 487.987701][T28778] do_wp_page+0x64b/0x2340 [ 487.987842][T28778] ? __rcu_read_lock+0x36/0x50 [ 487.987870][T28778] handle_mm_fault+0xc63/0x2ac0 [ 487.987982][T28778] exc_page_fault+0x296/0x650 [ 487.988020][T28778] asm_exc_page_fault+0x26/0x30 [ 487.988052][T28778] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 487.988082][T28778] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 487.988135][T28778] RSP: 0018:ffffc900030f39a0 EFLAGS: 00050206 [ 487.988151][T28778] RAX: ffff88810148ed88 RBX: 00004000000036c0 RCX: 00000000000006c0 [ 487.988164][T28778] RDX: 0000000000000000 RSI: ffff88812c703940 RDI: 0000400000004000 [ 487.988176][T28778] RBP: ffff88812c703000 R08: 0000000080000000 R09: 0000000000000000 [ 487.988190][T28778] R10: 000188812c703000 R11: 000188812c703fff R12: 0000000000001000 [ 487.988227][T28778] R13: 00007ffffffff000 R14: ffffc900030f3de0 R15: ffffc900030f3dd0 [ 487.988247][T28778] _copy_to_iter+0x141/0xd00 [ 487.988340][T28778] ? xfd_validate_state+0x46/0xf0 [ 487.988376][T28778] copy_page_to_iter+0x171/0x2b0 [ 487.988416][T28778] sk_msg_recvmsg+0x1e4/0x840 [ 487.988515][T28778] unix_bpf_recvmsg+0x2a1/0x770 [ 487.988554][T28778] ? __pfx_woken_wake_function+0x10/0x10 [ 487.988590][T28778] unix_dgram_recvmsg+0x67/0x90 [ 487.988655][T28778] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 487.988692][T28778] sock_recvmsg+0x13f/0x170 [ 487.988810][T28778] ____sys_recvmsg+0xf9/0x280 [ 487.988851][T28778] __sys_recvmsg+0x1c0/0x260 [ 487.988898][T28778] __x64_sys_recvmsg+0x46/0x50 [ 487.988950][T28778] x64_sys_call+0xc64/0x2dc0 [ 487.989008][T28778] do_syscall_64+0xc9/0x1c0 [ 487.989046][T28778] ? clear_bhb_loop+0x55/0xb0 [ 487.989110][T28778] ? clear_bhb_loop+0x55/0xb0 [ 487.989144][T28778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.989174][T28778] RIP: 0033:0x7f47708ed169 [ 487.989189][T28778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.989278][T28778] RSP: 002b:00007f476ef51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 487.989299][T28778] RAX: ffffffffffffffda RBX: 00007f4770b05fa0 RCX: 00007f47708ed169 [ 487.989314][T28778] RDX: 0000000000000000 RSI: 00004000000004c0 RDI: 0000000000000003 [ 487.989328][T28778] RBP: 00007f476ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 487.989342][T28778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.989356][T28778] R13: 0000000000000000 R14: 00007f4770b05fa0 R15: 00007fff71acb6f8 [ 487.989379][T28778] [ 488.431320][T28800] netlink: 'syz.5.7880': attribute type 10 has an invalid length. [ 488.514388][T28810] loop5: detected capacity change from 0 to 512 [ 488.576876][T28810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.611778][T28810] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.653486][T28803] loop9: detected capacity change from 0 to 8192 [ 488.807334][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.857682][T28824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.876463][T28824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.895091][T28824] loop5: detected capacity change from 0 to 256 [ 489.012936][T28833] veth15: entered promiscuous mode [ 489.018118][T28833] veth15: entered allmulticast mode [ 489.269690][T28840] netlink: 'syz.9.7898': attribute type 10 has an invalid length. [ 489.363612][T28842] netlink: 'syz.9.7900': attribute type 1 has an invalid length. [ 489.404222][T28842] x_tables: duplicate underflow at hook 2 [ 489.639178][T28867] netlink: 'syz.9.7906': attribute type 10 has an invalid length. [ 489.647226][T28867] __nla_validate_parse: 8 callbacks suppressed [ 489.647299][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7906'. [ 489.689904][T28868] loop5: detected capacity change from 0 to 512 [ 489.706805][T28870] FAULT_INJECTION: forcing a failure. [ 489.706805][T28870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 489.721676][T28870] CPU: 1 UID: 0 PID: 28870 Comm: syz.1.7909 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 489.721721][T28870] Tainted: [W]=WARN [ 489.721730][T28870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 489.721817][T28870] Call Trace: [ 489.721826][T28870] [ 489.721836][T28870] dump_stack_lvl+0xf2/0x150 [ 489.721871][T28870] dump_stack+0x15/0x1a [ 489.721899][T28870] should_fail_ex+0x24a/0x260 [ 489.721938][T28870] should_fail_alloc_page+0xfd/0x110 [ 489.722039][T28870] __alloc_frozen_pages_noprof+0x109/0x340 [ 489.722081][T28870] alloc_pages_mpol+0xb4/0x260 [ 489.722110][T28870] vma_alloc_folio_noprof+0x1a0/0x310 [ 489.722136][T28870] handle_mm_fault+0xdd7/0x2ac0 [ 489.722173][T28870] exc_page_fault+0x296/0x650 [ 489.722202][T28870] asm_exc_page_fault+0x26/0x30 [ 489.722232][T28870] RIP: 0010:filldir+0x1e4/0x400 [ 489.722323][T28870] Code: 82 a8 01 00 00 48 39 dd 0f 87 9f 01 00 00 0f 01 cb 0f ae e8 4d 89 67 08 48 8b 44 24 08 48 8b 4c 24 38 48 89 08 4c 8b 64 24 28 <66> 44 89 60 10 4d 63 fc 8b 4c 24 14 42 88 4c 38 ff 49 63 ed c6 44 [ 489.722344][T28870] RSP: 0018:ffffc90002d2fd78 EFLAGS: 00050287 [ 489.722409][T28870] RAX: 0000400000001ff0 RBX: 00007ffffffff000 RCX: 0000000000000468 [ 489.722422][T28870] RDX: 0000000000000745 RSI: 0000400000001fd8 RDI: 0000400000002018 [ 489.722490][T28870] RBP: 0000400000002018 R08: ffffffff818d0ba6 R09: 0000000000000000 [ 489.722503][T28870] R10: 0001ffffffffffff R11: 0001c90002d2feb8 R12: 0000000000000028 [ 489.722515][T28870] R13: 0000000000000012 R14: ffff888139233c38 R15: 0000400000001fd8 [ 489.722531][T28870] ? filldir+0x1b6/0x400 [ 489.722561][T28870] ? filldir+0x1b6/0x400 [ 489.722624][T28870] ? __pfx_filldir+0x10/0x10 [ 489.722658][T28870] offset_readdir+0x21f/0x2b0 [ 489.722687][T28870] iterate_dir+0x11d/0x310 [ 489.722753][T28870] __se_sys_getdents+0x87/0x1a0 [ 489.722851][T28870] ? __pfx_filldir+0x10/0x10 [ 489.722885][T28870] __x64_sys_getdents+0x43/0x50 [ 489.722917][T28870] x64_sys_call+0x2c16/0x2dc0 [ 489.722975][T28870] do_syscall_64+0xc9/0x1c0 [ 489.723007][T28870] ? clear_bhb_loop+0x55/0xb0 [ 489.723041][T28870] ? clear_bhb_loop+0x55/0xb0 [ 489.723148][T28870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.723254][T28870] RIP: 0033:0x7fd1fde0d169 [ 489.723272][T28870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.723291][T28870] RSP: 002b:00007fd1fc471038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 489.723311][T28870] RAX: ffffffffffffffda RBX: 00007fd1fe025fa0 RCX: 00007fd1fde0d169 [ 489.723325][T28870] RDX: 00000000000000b8 RSI: 0000400000001fc0 RDI: 0000000000000004 [ 489.723340][T28870] RBP: 00007fd1fc471090 R08: 0000000000000000 R09: 0000000000000000 [ 489.723408][T28870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.723422][T28870] R13: 0000000000000000 R14: 00007fd1fe025fa0 R15: 00007ffd74c734f8 [ 489.723443][T28870] [ 490.065278][T28875] loop9: detected capacity change from 0 to 1024 [ 490.072303][T28868] EXT4-fs (loop5): orphan cleanup on readonly fs [ 490.105009][T28868] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7908: bg 0: block 248: padding at end of block bitmap is not set [ 490.135487][T28868] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.7908: Failed to acquire dquot type 1 [ 490.164540][T28868] EXT4-fs (loop5): 1 truncate cleaned up [ 490.173187][T28875] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.186569][T28868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 490.202514][T28875] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 490.252891][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.354796][T28889] loop9: detected capacity change from 0 to 512 [ 490.378113][T28889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.412434][T28889] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.7916: invalid block [ 490.444588][T28889] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.7916: invalid indirect mapped block 4294967295 (level 1) [ 490.462080][T28889] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.7916: invalid indirect mapped block 4294967295 (level 1) [ 490.481718][T28889] EXT4-fs (loop9): 2 truncates cleaned up [ 490.488085][T28889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.502782][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.572687][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.681608][T28907] FAULT_INJECTION: forcing a failure. [ 490.681608][T28907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.694857][T28907] CPU: 0 UID: 0 PID: 28907 Comm: syz.8.7914 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 490.694896][T28907] Tainted: [W]=WARN [ 490.694905][T28907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 490.694921][T28907] Call Trace: [ 490.694930][T28907] [ 490.694939][T28907] dump_stack_lvl+0xf2/0x150 [ 490.694976][T28907] dump_stack+0x15/0x1a [ 490.695009][T28907] should_fail_ex+0x24a/0x260 [ 490.695047][T28907] should_fail+0xb/0x10 [ 490.695081][T28907] should_fail_usercopy+0x1a/0x20 [ 490.695116][T28907] _copy_from_user+0x1c/0xa0 [ 490.695208][T28907] get_timespec64+0x49/0x140 [ 490.695235][T28907] __se_sys_clock_nanosleep+0xfd/0x240 [ 490.695274][T28907] __x64_sys_clock_nanosleep+0x55/0x70 [ 490.695341][T28907] x64_sys_call+0x25b8/0x2dc0 [ 490.695368][T28907] do_syscall_64+0xc9/0x1c0 [ 490.695417][T28907] ? clear_bhb_loop+0x55/0xb0 [ 490.695450][T28907] ? clear_bhb_loop+0x55/0xb0 [ 490.695479][T28907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.695513][T28907] RIP: 0033:0x7fcf09a8d169 [ 490.695544][T28907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.695624][T28907] RSP: 002b:00007fcf080f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 490.695647][T28907] RAX: ffffffffffffffda RBX: 00007fcf09ca5fa0 RCX: 00007fcf09a8d169 [ 490.695662][T28907] RDX: 0000400000000340 RSI: 0000000000000000 RDI: 0000000000000009 [ 490.695677][T28907] RBP: 00007fcf080f1090 R08: 0000000000000000 R09: 0000000000000000 [ 490.695692][T28907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.695713][T28907] R13: 0000000000000000 R14: 00007fcf09ca5fa0 R15: 00007fff13166708 [ 490.695745][T28907] [ 490.923627][T28919] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7923'. [ 491.100446][T28943] loop9: detected capacity change from 0 to 512 [ 491.134523][T28943] EXT4-fs (loop9): orphan cleanup on readonly fs [ 491.154410][T28943] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7929: bg 0: block 248: padding at end of block bitmap is not set [ 491.206700][T28943] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.7929: Failed to acquire dquot type 1 [ 491.223461][T28954] netlink: 'syz.1.7931': attribute type 10 has an invalid length. [ 491.231393][T28954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7931'. [ 491.256598][T28957] loop5: detected capacity change from 0 to 512 [ 491.260912][T28943] EXT4-fs (loop9): 1 truncate cleaned up [ 491.266736][T28955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.283143][T28954] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 491.312725][T28943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.325779][T28955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.350200][T28957] EXT4-fs (loop5): orphan cleanup on readonly fs [ 491.358709][T28957] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7933: bg 0: block 248: padding at end of block bitmap is not set [ 491.379936][T28957] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.7933: Failed to acquire dquot type 1 [ 491.414932][T28957] EXT4-fs (loop5): 1 truncate cleaned up [ 491.425118][T28960] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 491.439359][T28957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.453413][T28960] SELinux: failed to load policy [ 491.488547][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7937'. [ 491.498908][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7937'. [ 491.524666][T28962] veth7: entered promiscuous mode [ 491.529773][T28962] veth7: entered allmulticast mode [ 491.880578][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 491.880596][ T29] audit: type=1326 audit(2000000470.687:35174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 491.882226][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.920935][ T29] audit: type=1326 audit(2000000470.717:35175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 491.921032][ T29] audit: type=1326 audit(2000000470.717:35176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 491.921065][ T29] audit: type=1326 audit(2000000470.717:35177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 491.997969][ T29] audit: type=1326 audit(2000000470.807:35178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 492.021674][ T29] audit: type=1326 audit(2000000470.807:35179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 492.045396][ T29] audit: type=1326 audit(2000000470.807:35180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 492.081142][ T29] audit: type=1326 audit(2000000470.877:35181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 492.104920][ T29] audit: type=1326 audit(2000000470.877:35182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 492.128887][ T29] audit: type=1326 audit(2000000470.877:35183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28965 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 492.154374][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.294557][T28991] bond0: entered promiscuous mode [ 492.299674][T28991] bond0: entered allmulticast mode [ 492.304338][T28995] netlink: 'syz.9.7946': attribute type 10 has an invalid length. [ 492.306696][T28991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.314086][T28995] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7946'. [ 492.338325][T28996] loop5: detected capacity change from 0 to 164 [ 492.347937][T28991] bond0 (unregistering): Released all slaves [ 492.411840][T29002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29002 comm=syz.7.7952 [ 492.551995][T29016] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7957'. [ 492.562523][T29016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7957'. [ 492.712841][T29027] netlink: 'syz.9.7962': attribute type 4 has an invalid length. [ 492.714231][T29025] netfs: Couldn't get user pages (rc=-14) [ 492.730659][T29027] netlink: 'syz.9.7962': attribute type 4 has an invalid length. [ 492.750769][T29027] netlink: 'syz.9.7962': attribute type 4 has an invalid length. [ 492.812065][T29032] netlink: 'syz.9.7964': attribute type 10 has an invalid length. [ 492.819960][T29032] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7964'. [ 492.937023][T29040] loop5: detected capacity change from 0 to 1024 [ 492.964059][T29040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.986564][T29040] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 493.013597][T29047] loop9: detected capacity change from 0 to 1024 [ 493.022663][T29047] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 493.033653][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.044421][T29047] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 493.053042][T29047] EXT4-fs (loop9): orphan cleanup on readonly fs [ 493.062397][T29047] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 493.076923][T29050] FAULT_INJECTION: forcing a failure. [ 493.076923][T29050] name failslab, interval 1, probability 0, space 0, times 0 [ 493.090418][T29047] EXT4-fs (loop9): Remounting filesystem read-only [ 493.090575][T29047] EXT4-fs (loop9): 1 orphan inode deleted [ 493.093487][T29047] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 493.097651][T29050] CPU: 1 UID: 0 PID: 29050 Comm: syz.5.7970 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 493.097689][T29050] Tainted: [W]=WARN [ 493.097696][T29050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.097709][T29050] Call Trace: [ 493.097716][T29050] [ 493.097748][T29050] dump_stack_lvl+0xf2/0x150 [ 493.097787][T29050] dump_stack+0x15/0x1a [ 493.097817][T29050] should_fail_ex+0x24a/0x260 [ 493.097880][T29050] should_failslab+0x8f/0xb0 [ 493.097922][T29050] kmem_cache_alloc_noprof+0x52/0x320 [ 493.098006][T29050] ? audit_log_start+0x34c/0x6b0 [ 493.098053][T29050] audit_log_start+0x34c/0x6b0 [ 493.098103][T29050] audit_seccomp+0x4b/0x130 [ 493.098160][T29050] __seccomp_filter+0x6fa/0x1180 [ 493.098258][T29050] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 493.098299][T29050] ? vfs_write+0x644/0x920 [ 493.098343][T29050] __secure_computing+0x9f/0x1c0 [ 493.098374][T29050] syscall_trace_enter+0xd1/0x1f0 [ 493.098483][T29050] ? fpregs_assert_state_consistent+0x83/0xa0 [ 493.098515][T29050] do_syscall_64+0xaa/0x1c0 [ 493.098557][T29050] ? clear_bhb_loop+0x55/0xb0 [ 493.098592][T29050] ? clear_bhb_loop+0x55/0xb0 [ 493.098640][T29050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.098728][T29050] RIP: 0033:0x7f79ec09d169 [ 493.098749][T29050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.098771][T29050] RSP: 002b:00007f79ea707038 EFLAGS: 00000246 ORIG_RAX: 000000000000003f [ 493.098795][T29050] RAX: ffffffffffffffda RBX: 00007f79ec2b5fa0 RCX: 00007f79ec09d169 [ 493.098811][T29050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000180 [ 493.098826][T29050] RBP: 00007f79ea707090 R08: 0000000000000000 R09: 0000000000000000 [ 493.098841][T29050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.098856][T29050] R13: 0000000000000000 R14: 00007f79ec2b5fa0 R15: 00007ffd20e6f7a8 [ 493.098936][T29050] [ 493.314680][T29047] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 493.322095][T29047] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.343312][T29047] loop9: detected capacity change from 0 to 512 [ 493.343876][T29054] @ÿ: renamed from bond_slave_0 [ 493.372650][T29047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 493.422434][T29047] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.7969: invalid block [ 493.454089][T29068] netlink: 'syz.1.7976': attribute type 10 has an invalid length. [ 493.461973][T29068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7976'. [ 493.474993][T29068] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 493.523448][T29047] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.7969: invalid indirect mapped block 4294967295 (level 1) [ 493.539258][T29047] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.7969: invalid indirect mapped block 4294967295 (level 1) [ 493.555382][T29047] EXT4-fs (loop9): 2 truncates cleaned up [ 493.568519][T29047] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.586102][T29071] bond0: entered promiscuous mode [ 493.592631][T29071] bond0: entered allmulticast mode [ 493.600521][T29071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.607911][T29047] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.7969: bg 0: block 5: invalid block bitmap [ 493.710359][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.789436][T29088] : renamed from bond0 [ 493.954150][T29098] netfs: Couldn't get user pages (rc=-14) [ 494.144642][T29116] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 494.249999][T29132] FAULT_INJECTION: forcing a failure. [ 494.249999][T29132] name failslab, interval 1, probability 0, space 0, times 0 [ 494.263232][T29132] CPU: 0 UID: 0 PID: 29132 Comm: syz.5.8004 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 494.263269][T29132] Tainted: [W]=WARN [ 494.263288][T29132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 494.263310][T29132] Call Trace: [ 494.263318][T29132] [ 494.263326][T29132] dump_stack_lvl+0xf2/0x150 [ 494.263355][T29132] dump_stack+0x15/0x1a [ 494.263379][T29132] should_fail_ex+0x24a/0x260 [ 494.263409][T29132] ? sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 494.263506][T29132] should_failslab+0x8f/0xb0 [ 494.263623][T29132] __kmalloc_cache_noprof+0x4e/0x320 [ 494.263653][T29132] sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 494.263774][T29132] sctp_association_new+0xe78/0x1280 [ 494.263807][T29132] sctp_connect_new_asoc+0x1b0/0x3b0 [ 494.263839][T29132] sctp_sendmsg+0xefb/0x18f0 [ 494.263943][T29132] ? __pfx_sctp_sendmsg+0x10/0x10 [ 494.263971][T29132] inet_sendmsg+0xc5/0xd0 [ 494.264006][T29132] __sock_sendmsg+0x102/0x180 [ 494.264083][T29132] __sys_sendto+0x1a8/0x230 [ 494.264125][T29132] __x64_sys_sendto+0x78/0x90 [ 494.264153][T29132] x64_sys_call+0x29fa/0x2dc0 [ 494.264185][T29132] do_syscall_64+0xc9/0x1c0 [ 494.264233][T29132] ? clear_bhb_loop+0x55/0xb0 [ 494.264261][T29132] ? clear_bhb_loop+0x55/0xb0 [ 494.264290][T29132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.264327][T29132] RIP: 0033:0x7f79ec09d169 [ 494.264346][T29132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.264440][T29132] RSP: 002b:00007f79ea707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 494.264463][T29132] RAX: ffffffffffffffda RBX: 00007f79ec2b5fa0 RCX: 00007f79ec09d169 [ 494.264479][T29132] RDX: 0000000000034000 RSI: 0000400000000500 RDI: 0000000000000006 [ 494.264494][T29132] RBP: 00007f79ea707090 R08: 0000400000000140 R09: 000000000000001c [ 494.264509][T29132] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 494.264524][T29132] R13: 0000000000000000 R14: 00007f79ec2b5fa0 R15: 00007ffd20e6f7a8 [ 494.264626][T29132] [ 494.299273][T29137] pim6reg1: entered promiscuous mode [ 494.507826][T29137] pim6reg1: entered allmulticast mode [ 494.621474][T29144] netfs: Couldn't get user pages (rc=-14) [ 494.641293][T29149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.680510][T29149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.684764][T29151] loop9: detected capacity change from 0 to 1024 [ 494.693939][T29149] loop8: detected capacity change from 0 to 256 [ 494.706857][T29153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.734723][T29151] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.736423][T29153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.778894][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.820937][T29171] __nla_validate_parse: 1 callbacks suppressed [ 494.820956][T29171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8015'. [ 494.836162][T29171] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8015'. [ 494.856016][T29171] veth41: entered promiscuous mode [ 494.862803][T29171] veth41: entered allmulticast mode [ 494.946992][T29181] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 494.953854][T29182] netlink: 'syz.5.8018': attribute type 10 has an invalid length. [ 494.964584][T29182] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8018'. [ 494.984763][T29184] loop9: detected capacity change from 0 to 512 [ 495.001725][T29184] EXT4-fs (loop9): orphan cleanup on readonly fs [ 495.020677][T29184] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8019: bg 0: block 248: padding at end of block bitmap is not set [ 495.053805][T29184] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.8019: Failed to acquire dquot type 1 [ 495.100794][T29184] EXT4-fs (loop9): 1 truncate cleaned up [ 495.113862][T29184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 495.129571][T29188] netfs: Couldn't get user pages (rc=-14) [ 495.265674][T29202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8027'. [ 495.274931][T29202] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8027'. [ 495.308311][T29202] veth29: entered promiscuous mode [ 495.313717][T29202] veth29: entered allmulticast mode [ 495.319351][T29199] loop5: detected capacity change from 0 to 1024 [ 495.350526][T29207] netlink: 'syz.7.8029': attribute type 10 has an invalid length. [ 495.358395][T29207] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8029'. [ 495.415638][T29199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.499745][T19347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.527774][T29222] pim6reg1: entered promiscuous mode [ 495.533309][T29222] pim6reg1: entered allmulticast mode [ 495.676924][T29234] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8033'. [ 495.698659][T29245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8041'. [ 495.708959][T29245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8041'. [ 495.761082][T29245] veth47: entered promiscuous mode [ 495.766310][T29245] veth47: entered allmulticast mode [ 495.785007][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.834788][T29251] netlink: 'syz.8.8042': attribute type 10 has an invalid length. [ 495.844042][T29251] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8042'. [ 496.127305][T29288] veth9: entered promiscuous mode [ 496.132457][T29288] veth9: entered allmulticast mode [ 496.161832][T29294] netlink: 'syz.5.8057': attribute type 10 has an invalid length. [ 496.202879][T29296] loop8: detected capacity change from 0 to 128 [ 496.274923][T29304] loop8: detected capacity change from 0 to 1024 [ 496.283917][T29304] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 496.328531][T29304] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 496.365444][T29304] EXT4-fs (loop8): orphan cleanup on readonly fs [ 496.374660][T29304] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 496.394962][T29291] loop9: detected capacity change from 0 to 512 [ 496.404679][T29304] EXT4-fs (loop8): Remounting filesystem read-only [ 496.414603][T29304] EXT4-fs (loop8): 1 orphan inode deleted [ 496.444508][T29304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 496.472496][T29291] EXT4-fs: Ignoring removed bh option [ 496.488648][T29291] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 496.503945][T29304] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 496.517289][T29304] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.548663][T29291] EXT4-fs (loop9): 1 truncate cleaned up [ 496.564381][T29291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.578318][T29304] loop8: detected capacity change from 0 to 512 [ 496.596250][T29304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 496.647601][T29304] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.8063: invalid block [ 496.692374][T29304] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8063: invalid indirect mapped block 4294967295 (level 1) [ 496.709226][T29304] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8063: invalid indirect mapped block 4294967295 (level 1) [ 496.736667][T29304] EXT4-fs (loop8): 2 truncates cleaned up [ 496.752320][T29304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.787533][T29304] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.8063: bg 0: block 5: invalid block bitmap [ 496.835466][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.122346][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 497.122365][ T29] audit: type=1400 audit(2000000475.927:35591): avc: denied { nlmsg_read } for pid=29359 comm="syz.1.8076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 497.158072][T29360] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 497.169875][T29360] SELinux: failed to load policy [ 497.176635][ T29] audit: type=1400 audit(2000000475.987:35592): avc: denied { mac_admin } for pid=29359 comm="syz.1.8076" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 497.201966][ T29] audit: type=1400 audit(2000000476.007:35593): avc: denied { relabelto } for pid=29359 comm="syz.1.8076" name=6D656D66643AC0873A2A18C16BA7875BA06F383449AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA65299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9 dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:console_device_t:s0" [ 497.241202][ T29] audit: type=1400 audit(2000000476.007:35594): avc: denied { associate } for pid=29359 comm="syz.1.8076" name=6D656D66643AC0873A2A18C16BA7875BA06F383449AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA65299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9 dev="tmpfs" ino=2199 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:console_device_t:s0" [ 497.281549][ T29] audit: type=1400 audit(2000000476.007:35595): avc: denied { read } for pid=29359 comm="syz.1.8076" path=2F6D656D66643AC0873A2A18C16BA7875BA06F383449AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA65299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9202864656C6574656429 dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:console_device_t:s0" [ 497.328383][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.339683][T29399] binfmt_misc: register: failed to install interpreter file ./file0 [ 497.358036][T29399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.365365][T29399] IPv6: NLM_F_CREATE should be set when creating new route [ 497.372612][T29399] IPv6: NLM_F_CREATE should be set when creating new route [ 497.385656][T29402] FAULT_INJECTION: forcing a failure. [ 497.385656][T29402] name failslab, interval 1, probability 0, space 0, times 0 [ 497.398386][T29402] CPU: 1 UID: 0 PID: 29402 Comm: syz.9.8079 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 497.398429][T29402] Tainted: [W]=WARN [ 497.398438][T29402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.398487][T29402] Call Trace: [ 497.398496][T29402] [ 497.398506][T29402] dump_stack_lvl+0xf2/0x150 [ 497.398542][T29402] dump_stack+0x15/0x1a [ 497.398569][T29402] should_fail_ex+0x24a/0x260 [ 497.398607][T29402] should_failslab+0x8f/0xb0 [ 497.398652][T29402] __kmalloc_noprof+0xab/0x3f0 [ 497.398678][T29402] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 497.398798][T29402] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 497.398831][T29402] ? ns_capable+0x7d/0xb0 [ 497.398857][T29402] genl_rcv_msg+0x475/0x6d0 [ 497.398883][T29402] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 497.398925][T29402] ? __pfx_nl80211_set_multicast_to_unicast+0x10/0x10 [ 497.399034][T29402] ? __pfx_nl80211_post_doit+0x10/0x10 [ 497.399073][T29402] ? __dev_queue_xmit+0xb6e/0x2090 [ 497.399105][T29402] ? ref_tracker_free+0x3a5/0x410 [ 497.399155][T29402] netlink_rcv_skb+0x12c/0x230 [ 497.399258][T29402] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.399297][T29402] genl_rcv+0x28/0x40 [ 497.399342][T29402] netlink_unicast+0x599/0x670 [ 497.399382][T29402] netlink_sendmsg+0x5cc/0x6e0 [ 497.399505][T29402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.399547][T29402] __sock_sendmsg+0x140/0x180 [ 497.399585][T29402] ____sys_sendmsg+0x326/0x4b0 [ 497.399695][T29402] __sys_sendmsg+0x19d/0x230 [ 497.399740][T29402] __x64_sys_sendmsg+0x46/0x50 [ 497.399830][T29402] x64_sys_call+0x2734/0x2dc0 [ 497.399862][T29402] do_syscall_64+0xc9/0x1c0 [ 497.399936][T29402] ? clear_bhb_loop+0x55/0xb0 [ 497.400012][T29402] ? clear_bhb_loop+0x55/0xb0 [ 497.400045][T29402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.400077][T29402] RIP: 0033:0x7f47708ed169 [ 497.400097][T29402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.400127][T29402] RSP: 002b:00007f476ef51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.400152][T29402] RAX: ffffffffffffffda RBX: 00007f4770b05fa0 RCX: 00007f47708ed169 [ 497.400182][T29402] RDX: 0000000000040000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 497.400266][T29402] RBP: 00007f476ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 497.400281][T29402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.400306][T29402] R13: 0000000000000000 R14: 00007f4770b05fa0 R15: 00007fff71acb6f8 [ 497.400332][T29402] [ 497.469149][T29406] vlan2: entered promiscuous mode [ 497.658165][T29406] veth0: entered promiscuous mode [ 497.670266][T29406] veth0: left promiscuous mode [ 497.814088][ T29] audit: type=1326 audit(2000000476.607:35596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29418 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 497.822474][T29428] loop9: detected capacity change from 0 to 256 [ 497.839183][ T29] audit: type=1326 audit(2000000476.607:35597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29418 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 497.869310][ T29] audit: type=1326 audit(2000000476.607:35598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29418 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 497.869779][T29428] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.894493][ T29] audit: type=1326 audit(2000000476.607:35599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29418 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 497.930022][ T29] audit: type=1326 audit(2000000476.607:35600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29418 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b418ad169 code=0x7ffc0000 [ 497.987530][T29431] loop8: detected capacity change from 0 to 1024 [ 498.011844][T29431] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 498.049539][T29431] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 498.075642][T29431] EXT4-fs (loop8): orphan cleanup on readonly fs [ 498.084662][T29431] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 498.095839][T29431] EXT4-fs (loop8): Remounting filesystem read-only [ 498.097023][T29440] usb usb8: usbfs: process 29440 (syz.1.8093) did not claim interface 0 before use [ 498.102570][T29431] EXT4-fs (loop8): 1 orphan inode deleted [ 498.103125][T29431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 498.103166][T29431] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 498.103539][T29431] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.170891][T29431] loop8: detected capacity change from 0 to 512 [ 498.179442][T29442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.215597][T29442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.236618][T29431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 498.257396][T29442] loop9: detected capacity change from 0 to 256 [ 498.275541][T29431] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.8092: invalid block [ 498.317572][T29431] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8092: invalid indirect mapped block 4294967295 (level 1) [ 498.339580][T29431] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8092: invalid indirect mapped block 4294967295 (level 1) [ 498.359732][T29431] EXT4-fs (loop8): 2 truncates cleaned up [ 498.371985][T29431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.434275][T29469] netfs: Couldn't get user pages (rc=-14) [ 498.442243][T29431] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.8092: bg 0: block 5: invalid block bitmap [ 498.475274][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.871642][T29503] netlink: 'syz.1.8116': attribute type 10 has an invalid length. [ 498.879566][T29503] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 498.913679][T29505] loop8: detected capacity change from 0 to 1024 [ 498.950881][T29505] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 498.978322][T29505] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 499.001854][T29505] EXT4-fs (loop8): orphan cleanup on readonly fs [ 499.016462][T29505] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 499.028397][T29519] netlink: 'syz.5.8125': attribute type 10 has an invalid length. [ 499.042551][T29505] EXT4-fs (loop8): Remounting filesystem read-only [ 499.049428][T29505] EXT4-fs (loop8): 1 orphan inode deleted [ 499.056368][T29505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 499.068466][T29505] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 499.075439][T29505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.096949][T29505] loop8: detected capacity change from 0 to 512 [ 499.111803][T29505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.154595][T29505] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.8119: invalid block [ 499.156334][T29527] netlink: 'syz.9.8128': attribute type 10 has an invalid length. [ 499.182924][T29505] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8119: invalid indirect mapped block 4294967295 (level 1) [ 499.223248][T29505] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8119: invalid indirect mapped block 4294967295 (level 1) [ 499.300320][T29505] EXT4-fs (loop8): 2 truncates cleaned up [ 499.306650][T29505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.325583][T29505] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.8119: bg 0: block 5: invalid block bitmap [ 499.346347][T29530] netfs: Couldn't get user pages (rc=-14) [ 499.367846][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.430979][T29542] netlink: 'syz.9.8133': attribute type 10 has an invalid length. [ 499.523657][T29543] loop8: detected capacity change from 0 to 8192 [ 499.808922][T29532] chnl_net:caif_netlink_parms(): no params data found [ 499.838202][T29575] __nla_validate_parse: 14 callbacks suppressed [ 499.838226][T29575] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8144'. [ 499.924036][T21963] batadv1: left allmulticast mode [ 499.929126][T21963] batadv1: left promiscuous mode [ 499.935829][T21963] bridge0: port 3(batadv1) entered disabled state [ 499.947561][T29569] netfs: Couldn't get user pages (rc=-14) [ 499.972823][T21963] bridge_slave_1: left allmulticast mode [ 499.978651][T21963] bridge_slave_1: left promiscuous mode [ 499.985929][T21963] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.037391][T21963] bridge_slave_0: left allmulticast mode [ 500.044139][T21963] bridge_slave_0: left promiscuous mode [ 500.050084][T21963] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.106068][T29590] usb usb8: usbfs: process 29590 (syz.8.8148) did not claim interface 0 before use [ 500.136519][T21963] team0: Port device geneve1 removed [ 500.149883][T29567] netfs: Couldn't get user pages (rc=-14) [ 500.223301][T21963] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.232369][T21963] bond_slave_0: left promiscuous mode [ 500.238414][T21963] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.257636][T21963] bond_slave_1: left promiscuous mode [ 500.263460][T21963] $Hÿ (unregistering): Released all slaves [ 500.334554][T21963] hsr_slave_0: left promiscuous mode [ 500.341711][T21963] hsr_slave_1: left promiscuous mode [ 500.347317][T21963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.355822][ T8480] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 500.368421][T21963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.489524][T29610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.513486][T29610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.563309][T29615] loop9: detected capacity change from 0 to 1764 [ 500.578714][T21963] team0 (unregistering): Port device team_slave_1 removed [ 500.593676][T21963] team0 (unregistering): Port device team_slave_0 removed [ 500.645103][T29532] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.652293][T29532] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.661396][T29532] bridge_slave_0: entered allmulticast mode [ 500.668051][T29532] bridge_slave_0: entered promiscuous mode [ 500.675888][T29532] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.683040][T29532] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.705836][T29532] bridge_slave_1: entered allmulticast mode [ 500.715165][T29532] bridge_slave_1: entered promiscuous mode [ 500.744315][T29532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.763505][T29532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.794744][T29622] netfs: Couldn't get user pages (rc=-14) [ 500.802921][T29532] team0: Port device team_slave_0 added [ 500.815505][T29532] team0: Port device team_slave_1 added [ 500.852593][T29532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.859657][T29532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.887162][T29532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.905337][T29532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.913759][T29532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.941234][T29532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.998536][T29532] hsr_slave_0: entered promiscuous mode [ 501.015061][T29532] hsr_slave_1: entered promiscuous mode [ 501.023013][T29628] loop8: detected capacity change from 0 to 1024 [ 501.032855][T29532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.042848][T29532] Cannot create hsr debugfs directory [ 501.070057][T21963] IPVS: stop unused estimator thread 0... [ 501.071847][T29628] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.138313][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.233144][T29647] netlink: 96 bytes leftover after parsing attributes in process `GPL'. [ 501.260072][T29649] ref_ctr_offset mismatch. inode: 0x5ad offset: 0x7 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x0 [ 501.401022][T29532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 501.416776][T29658] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8172'. [ 501.427814][T29532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 501.456340][T29532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 501.461178][T29660] loop9: detected capacity change from 0 to 1024 [ 501.474141][T29532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 501.494715][T29660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.542490][T29532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.558988][T29532] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.569494][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.576721][ T8479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.599672][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.606800][ T8479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.628969][T29532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 501.639429][T29532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.720046][T29532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.907630][T29686] bond0: entered promiscuous mode [ 501.914154][T29686] bond0: entered allmulticast mode [ 501.919663][T29686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.941335][T29686] bond0 (unregistering): Released all slaves [ 501.987173][T29532] veth0_vlan: entered promiscuous mode [ 501.997468][T29532] veth1_vlan: entered promiscuous mode [ 502.051501][T29532] veth0_macvtap: entered promiscuous mode [ 502.065936][T29532] veth1_macvtap: entered promiscuous mode [ 502.091609][T29532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.102203][T29532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.112224][T29532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.122742][T29532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.132649][T29532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.143176][T29532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.157192][T29532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.169925][T29532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.180513][T29532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.190392][T29532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.200960][T29532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.210845][T29532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.221357][T29532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.233930][T29532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.262410][T29532] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.271294][T29532] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.280059][T29532] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.289104][T29532] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.308628][T29705] loop8: detected capacity change from 0 to 1024 [ 502.317299][T26217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.362072][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 502.362087][ T29] audit: type=1400 audit(2000000481.167:36048): avc: denied { mounton } for pid=29532 comm="syz-executor" path="/root/syzkaller.p7mWRK/syz-tmp" dev="sda1" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 502.373618][T29705] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.402744][ T29] audit: type=1400 audit(2000000481.197:36049): avc: denied { mounton } for pid=29532 comm="syz-executor" path="/root/syzkaller.p7mWRK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 502.433578][ T29] audit: type=1400 audit(2000000481.197:36050): avc: denied { mounton } for pid=29532 comm="syz-executor" path="/root/syzkaller.p7mWRK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=92956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 502.462202][ T29] audit: type=1326 audit(2000000481.237:36051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29712 comm="syz.1.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 502.486732][ T29] audit: type=1326 audit(2000000481.237:36052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29712 comm="syz.1.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 502.510632][ T29] audit: type=1326 audit(2000000481.237:36053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29712 comm="syz.1.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 502.534309][ T29] audit: type=1326 audit(2000000481.237:36054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29712 comm="syz.1.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 502.560492][ T29] audit: type=1326 audit(2000000481.267:36055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29712 comm="syz.1.8188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1fde0d169 code=0x7ffc0000 [ 502.584318][ T29] audit: type=1400 audit(2000000481.357:36056): avc: denied { mounton } for pid=29532 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 502.607524][ T29] audit: type=1400 audit(2000000481.357:36057): avc: denied { mount } for pid=29532 comm="syz-executor" name="/" dev="gadgetfs" ino=3783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 502.634511][T29705] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 502.640183][T29719] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8189'. [ 502.732708][T20701] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.743838][T29716] netfs: Couldn't get user pages (rc=-14) [ 502.775250][ T8479] ================================================================== [ 502.783571][ T8479] BUG: KCSAN: data-race in netfs_advance_write / netfs_write_collection_worker [ 502.792576][ T8479] [ 502.794927][ T8479] write to 0xffff8881010a6d38 of 8 bytes by task 29716 on cpu 1: [ 502.802680][ T8479] netfs_advance_write+0x36f/0x610 [ 502.807928][ T8479] netfs_unbuffered_write+0xde/0x330 [ 502.813356][ T8479] netfs_unbuffered_write_iter_locked+0x2b7/0x570 [ 502.819817][ T8479] netfs_unbuffered_write_iter+0x2b7/0x3b0 [ 502.825765][ T8479] v9fs_file_write_iter+0x60/0x80 [ 502.831005][ T8479] vfs_write+0x77b/0x920 [ 502.835371][ T8479] ksys_write+0xe8/0x1b0 [ 502.839694][ T8479] __x64_sys_write+0x42/0x50 [ 502.844328][ T8479] x64_sys_call+0x287e/0x2dc0 [ 502.849044][ T8479] do_syscall_64+0xc9/0x1c0 [ 502.853585][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.859506][ T8479] [ 502.861836][ T8479] read to 0xffff8881010a6d38 of 8 bytes by task 8479 on cpu 0: [ 502.869580][ T8479] netfs_write_collection_worker+0x3ee/0x2530 [ 502.875822][ T8479] process_scheduled_works+0x4db/0xa20 [ 502.881532][ T8479] worker_thread+0x51d/0x6f0 [ 502.886153][ T8479] kthread+0x4ae/0x520 [ 502.890258][ T8479] ret_from_fork+0x4b/0x60 [ 502.894703][ T8479] ret_from_fork_asm+0x1a/0x30 [ 502.899518][ T8479] [ 502.901946][ T8479] value changed: 0x0000000000000000 -> 0xffff8881020149c0 [ 502.909067][ T8479] [ 502.911403][ T8479] Reported by Kernel Concurrency Sanitizer on: [ 502.917663][ T8479] CPU: 0 UID: 0 PID: 8479 Comm: kworker/u8:14 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 502.930102][ T8479] Tainted: [W]=WARN [ 502.934000][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.944081][ T8479] Workqueue: events_unbound netfs_write_collection_worker [ 502.951334][ T8479] ==================================================================