last executing test programs: 5m54.368039537s ago: executing program 32 (id=72): socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000d"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0xd1, 0x3d, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1178e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000740)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000faff00"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2000000080002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000001a3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r4, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r4}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001ff, 0x802) dup(r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB]}, 0x78) 5m47.147921995s ago: executing program 33 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 5m24.218500584s ago: executing program 1 (id=545): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = memfd_secret(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000001503000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) write$binfmt_misc(r9, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000f3000003d74b4f3d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01ef50619551f14dc961ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 5m23.315187952s ago: executing program 1 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='spmi_read_begin\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x90) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r6, r6, 0x0) 5m23.224862132s ago: executing program 1 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) 5m23.132222422s ago: executing program 1 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pread64(r1, &(0x7f0000000940)=""/191, 0xbf, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x1, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_usbip_server_init(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, &(0x7f0000000140)='./file0/file0\x00', 0x271) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400fd4259a4fc528868170000ff000200000000"], 0x14}}, 0x0) 5m21.8550513s ago: executing program 1 (id=600): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 5m21.62862041s ago: executing program 1 (id=602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000640)='target_cmd_complete\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb"], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050000000959349b32ce4e4703533978f5780540055cbffb4f5c441f91ba09c70a0324fc4fa9c4db44f4cfaf51bb37a287bbd0d39b08cd6bd25e6353c43fdd8adfcfbeeeb74a577152a2de75547c3a5dd8ad55cdad9c36d68745ab473ffffb076dacf02fb667404b7c1317e8cdd5195aa42737799fbf9be32be20c775896f0b1290ba4597f6fdff85c603c236d323a2bc1dd98cdaecff0806432a1e539b199232459ba4402b091da916370ae255261ca4949ffabe51"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() 5m21.628176249s ago: executing program 34 (id=602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000640)='target_cmd_complete\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb"], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050000000959349b32ce4e4703533978f5780540055cbffb4f5c441f91ba09c70a0324fc4fa9c4db44f4cfaf51bb37a287bbd0d39b08cd6bd25e6353c43fdd8adfcfbeeeb74a577152a2de75547c3a5dd8ad55cdad9c36d68745ab473ffffb076dacf02fb667404b7c1317e8cdd5195aa42737799fbf9be32be20c775896f0b1290ba4597f6fdff85c603c236d323a2bc1dd98cdaecff0806432a1e539b199232459ba4402b091da916370ae255261ca4949ffabe51"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() 5m16.704648341s ago: executing program 2 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="14000000100001000000000000000a010100000000f6000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000140000001100010000000000050000000000000a"], 0xa4}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000005b36483ed71b40d20000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000fd03000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000950000000000000038718578f6c8794f180baf641aaa7b160f8f048e2ccbece97ee563eeab12fe1b3fee46a0b5b5eba6c5ac11b5942b6e908c62b4cf61af69d447c63e8ba30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c210000", @ANYRES16=r11, @ANYBLOB="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"], 0x219c}, 0x1, 0x0, 0x0, 0x851}, 0x805) 5m16.59145565s ago: executing program 2 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x50) r2 = socket$inet6(0xa, 0x3, 0x3c) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x3ff, 0x8}], 0x3e0000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5m16.5220787s ago: executing program 2 (id=682): r0 = socket(0x21, 0x2, 0x10000000000002) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000000)={0x74, "357f467c11e681685cfef4a26cb91d138b8bdaf26c3733e29063aca6ff1641f1177bfc2687f1698f534d74add0be497966234460b36a820077caedc04cd73f8b708007e92d8c3669912034e749ebddb81b30a58941a8df34558869dcc617c48e7102518c34b8f95549f886d50a796cc5d2099df1"}) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 5m16.38099385s ago: executing program 2 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x21, r3, 0x0, &(0x7f0000000100)={0x0}) openat(0xffffffffffffff9c, 0x0, 0x2a040, 0x120) ptrace$setopts(0x4200, r3, 0xffffffffffffff91, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x3cc, 0x40680, r4, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x8, @void, @value, @void, @value}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5m15.358303888s ago: executing program 2 (id=702): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x40, 0x0, 0x0, 0x5, 0xa014, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100010, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20039c}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x3, 0x3, 0x722}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 5m15.209703128s ago: executing program 2 (id=708): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240"], 0x5c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"]) 5m15.170523408s ago: executing program 35 (id=708): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240"], 0x5c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"]) 5m11.588742212s ago: executing program 8 (id=769): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e00, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="08001efbb07d5a", 0x7}], 0x1, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa}}], 0x18}, 0x48d4) 5m11.588305602s ago: executing program 8 (id=770): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pread64(r0, &(0x7f0000000940)=""/191, 0xbf, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x1, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_usbip_server_init(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) 5m10.5753199s ago: executing program 8 (id=779): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x5, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000600)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}, {@dont_measure}, {@fowner_eq}]}, 0x1, 0x443, &(0x7f0000000d40)="$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") mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x1, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@umask={'umask', 0x3d, 0x5}}]}, 0x1, 0x21a, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000000), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0xfecc) 5m9.541088008s ago: executing program 8 (id=787): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pread64(r0, &(0x7f0000000940)=""/191, 0xbf, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x1, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_usbip_server_init(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r6, &(0x7f0000000140)='./file0/file0\x00', 0x271) 5m8.080939615s ago: executing program 8 (id=820): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000520001000007000000e4140ae10000000400010094f05dd529ee3ebb9b8f32877f356f5f45ecfdb194e9092c3916a8e52871a51026613df95e27baaf8bdfd3d4840b86f871568d07b7b33e38341dfcd6ea426dcdd24a15b43cd85775fe7391cc2f542214a2011edf09e85530b0fcb98585ac54265db09a0b7642c42a29315c5faba15b3a470539e847f3c11c52a64224cf76e47b015430e7766009f524ab7b28ea13c82b590feefba6b351"], 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x88011, 0xffffffffffffffff, 0x611b3000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) 5m7.674291215s ago: executing program 8 (id=832): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x3, 0x3, 0x722}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 5m7.643454715s ago: executing program 36 (id=832): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x3, 0x3, 0x722}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 4m40.461142617s ago: executing program 7 (id=1457): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pread64(r0, &(0x7f0000000940)=""/191, 0xbf, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x5) 4m39.356678224s ago: executing program 7 (id=1476): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket(0x10, 0x80002, 0x0) r2 = syz_io_uring_setup(0x71e2, &(0x7f0000000280)={0x0, 0x0, 0x10180, 0x3, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\r', @ANYRES8=r4, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m39.236807674s ago: executing program 7 (id=1477): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m38.205392683s ago: executing program 7 (id=1494): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESHEX, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x140, &(0x7f00000002c0)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x9c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r2) (async) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r2) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="8e2392b35ebce45e5578cc955d83cd70ced818fe3ad612a62ec0fe07f395800378231c93a4b8443d215106ce540938ab47b835d637e86d169e0896e765cdd1d1bf277369e43279a9415069d2d254ae0e6dacaba49149f8df6511396d546fb49cce4855b23d91abdb0fc80b67a6067f677532c7dfd2ef1a8eeaa6f1e2b12864fc93b256c69eb667a9a58a96342c96627448d061423004aed85e80976868fa0f6d640b91f6ff07df52c1f5c0bf90ecefacf58e8c6ae04adb38a57115c4552ef96dd6b6c4e4b9a4893b2825ff1de48a8cb59d74bdd15ce5918b4f2fe4", 0xdb}, {&(0x7f00000005c0)="aacddc5ceb77e3cc5a13c3b4fb139620cc05d84d4475fc67c9992d669d20c0d9d7ad61527a1d31c58d937b91fb57268b75bc84223328adec60f5ba991543f90a65ac81ca42ef372da08f7ca8307c2147201538b67eaab87e10031e0276a7ef1d5642fc7ecbf2104977e6c2e04aa0106d4053f20cfdd303e5147feaa9ee697441eb078955e321b38236935900a543d56ee65363ba357de003f9bbf499bb0bf80d7b14ccf549bf554d3905fbbb663d0a8b9f7960007ba3af9d4c51c80ee0f57e4e3a31b43bbcb1023a18dbaf31313defede4beb34dc9e323288b0cc3c9d525004087460c96700beef90e055b0261a6ac8a", 0xf0}], 0x2}, 0x0) 4m38.135633332s ago: executing program 7 (id=1495): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64=r1, @ANYRESDEC, @ANYRES32, @ANYBLOB="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"], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="842a3d346b1994af91c1199ddbb83061eb5f7e2caf68939d7226a633da29136062127c05268803c1629e6cc82a89c1ece7ceb7b8267670da4bb1f75f9b99361c7ef81a080000001fabe64749b2571753431a4d6be7a5eeee4043db65edb895aa9635cf293e76bad172c610fb7128395fd2a2c9a634cd0ec6317090d08f64ef2efb2256006d243d7c046ccfdf988660692f536e0b14b9c80991c42faf7b89283150be651389d9730714a86f7dd0305ec02532c9c5e35b1f544d7b009710a590475828b455aad144a304f329b4a43d5ebba05c82b9be1a30f3f834661b6434f98edf", @ANYBLOB="03090000000000000000060000000e0001006e657464657673696d0000000f0002006e657464657673016d30000010000300000000000600040000000000d25152d8b838060000005cd04ccf6d7721b88631b978db3d758ee14a51ca0c7afa1db7facb77a6bf62869c1293d4c52c59010542ec05a82110d897c9e7f5f5ac498a11f6d1459f9e57bce943cc22d07393239b07975a04d670c0751ee7283bb28e3bceab779314c2c4"], 0x44}}, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = gettid() tkill(r5, 0x11) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000080)={0x2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRES8=r0, @ANYRESHEX=r4, @ANYRES32=r2, @ANYRESDEC=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r6, 0x0, 0x5}, 0x18) r7 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(r8, r8, 0x0) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002ec0)={'ip6_vti0\x00', &(0x7f0000002e40)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x4, 0x4, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x1, 0x8, 0xa}}) 4m37.695939031s ago: executing program 7 (id=1502): r0 = creat(0x0, 0x20) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x4000094) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x481}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0xe, 0x2, 0x4, 0x10, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r0], &(0x7f0000000d40)=[{0x2, 0x4, 0x5}, {0x3, 0x2, 0x8, 0xb}, {0x0, 0x3, 0xa, 0x6}, {0x4, 0x4, 0x2, 0x4}, {0x0, 0x5, 0xa, 0x7}], 0x10, 0x8, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x10, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x831, 0x0, 0x0, 0x0, 0xa}, [@jmp={0x5, 0x0, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd784}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}]}, &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000f40)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[r0, r0, r3, r0], 0x0, 0x10, 0x388e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000500)='snd_soc_jack_notify\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='mp']) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], 0x1, 0x7}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44e, &(0x7f00000008c0)="$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") r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000001100)='kfree\x00', r7}, 0x18) r13 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r13, &(0x7f0000000940)=ANY=[@ANYBLOB="73797374656d5f753aee23bf22dfba4008096f"], 0x27) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000010c0)=ANY=[@ANYRESHEX=r12, @ANYRES16=r10, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma,port=0x0000200000000000,privport']) 4m37.695523591s ago: executing program 37 (id=1502): r0 = creat(0x0, 0x20) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x4000094) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x481}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0xe, 0x2, 0x4, 0x10, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r0], &(0x7f0000000d40)=[{0x2, 0x4, 0x5}, {0x3, 0x2, 0x8, 0xb}, {0x0, 0x3, 0xa, 0x6}, {0x4, 0x4, 0x2, 0x4}, {0x0, 0x5, 0xa, 0x7}], 0x10, 0x8, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x10, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x831, 0x0, 0x0, 0x0, 0xa}, [@jmp={0x5, 0x0, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd784}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}]}, &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000f40)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[r0, r0, r3, r0], 0x0, 0x10, 0x388e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000500)='snd_soc_jack_notify\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='mp']) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], 0x1, 0x7}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44e, &(0x7f00000008c0)="$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") r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000001100)='kfree\x00', r7}, 0x18) r13 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r13, &(0x7f0000000940)=ANY=[@ANYBLOB="73797374656d5f753aee23bf22dfba4008096f"], 0x27) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000010c0)=ANY=[@ANYRESHEX=r12, @ANYRES16=r10, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma,port=0x0000200000000000,privport']) 3m18.800725662s ago: executing program 9 (id=3609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 3m18.714033652s ago: executing program 9 (id=3611): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x80000000, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xd, 0x9, {"db913e569d8f8279bea73bff1ce752cb"}, 0x8, 0x3, 0x7}}}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}}, 0x40000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r6], 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3m18.665545881s ago: executing program 9 (id=3614): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010100000000000000000000000059aabe676d71927ad4990504ad525bbe1827d152774c037f3d3dbc3cabd8f6015f94325ddbbd4055d7df1c8f029d038cc4fde2f1c07ae75c027bc8b16114e8254ecd4049331cd276cf804bea0f9de66029adf0e4c4df4be4b6dff305291c5c417a44da7695c4c05bc6046268887d8472b03f546eb264681b11dc04ee9c1653f57a7986269bfde0aa5f7672a5686863542bc30403ca2ce650f1", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 3m18.412526471s ago: executing program 9 (id=3619): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808007ff43bc4830d5347002902affe1ff2d502dfee8987310300800000000000ec84fcb1bf5725c59c99d1b36f3208fb14cd5eb03bd03c692a82007e5fe7e6f31e1680661492dc747a448c25a775b681ee619d65a13a5e42f4bca65cd97e80c2b450767780de3ed5e9e1222aecd3272d0b571441e82d0e7661eae1c22733fa807a353510a073e458c8528fe8f36ac006b6", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350901000000000095000000000000009f9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x484, &(0x7f0000000480), 0x1, 0xb95, &(0x7f00000017c0)="$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") 3m17.87240274s ago: executing program 9 (id=3631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 3m17.71265961s ago: executing program 9 (id=3634): r0 = syz_io_uring_setup(0x69d6, &(0x7f00000018c0)={0x0, 0x9532, 0x1000, 0x0, 0x16d}, &(0x7f0000000200)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 3m17.71240241s ago: executing program 38 (id=3634): r0 = syz_io_uring_setup(0x69d6, &(0x7f00000018c0)={0x0, 0x9532, 0x1000, 0x0, 0x16d}, &(0x7f0000000200)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 3.613802417s ago: executing program 4 (id=7122): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32, @ANYBLOB="080003"], 0x44}}, 0x4800) 3.414951737s ago: executing program 4 (id=7125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00q', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000325000006989ab17d75c01f3ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3}]}) 3.411106556s ago: executing program 0 (id=7126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x78d0, 0x80, 0xc, 0x40, {{0x34, 0x4, 0x3, 0x9, 0xd0, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@end, @ssrr={0x89, 0x2b, 0xe4, [@broadcast, @multicast1, @loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0xc, [0x1, 0xe, 0x3, 0xbe, 0x40dd]}, @ssrr={0x89, 0x17, 0xbf, [@multicast1, @local, @private=0xa010100, @rand_addr=0x64010101, @local]}, @generic={0x83, 0x2}, @rr={0x7, 0x2b, 0x8b, [@local, @rand_addr=0x64010101, @broadcast, @broadcast, @local, @multicast2, @loopback, @rand_addr=0x64010101, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x24, 0x75, 0x3, 0x9, [{@multicast1, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0xaa0}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xfff}]}, @end, @end, @timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0x4, [{@loopback, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x3b, 0x40, 0x7f, 0x8, @remote, @remote, 0x80, 0x8000, 0xfffffffc, 0x22d7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0) 3.192185556s ago: executing program 0 (id=7127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) 3.072858456s ago: executing program 0 (id=7129): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.878667465s ago: executing program 4 (id=7132): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000950000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='neigh_update\x00', r2, 0x0, 0x4006}, 0x18) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d00280a000060001980140004006b2e4f2fdd8733dc1c1639228919eb5e2efc02007b5d2f215d290000140005004af57c15cd92d389e606fce6a0eebda514000400f4d8d35abbd4fab3a3614be8a496bd8f140005008ebcd2c7e1cf0421ab20db4c32c433060500100004000000140003007665746831"], 0xa8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r4 = syz_io_uring_setup(0x344e, &(0x7f0000000100)={0x0, 0xc257, 0x800, 0x0, 0x1eb}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) setregid(0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580)=""/9, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000c00)=ANY=[@ANYBLOB="f2e8eac2ff0109119ae377d02b89d4d42b0600627cae81795a406f75037a2cefa3b35fcf3758eac4c6305c147241b59641dca856758312bad790c6e911f4b2967731caac6c6cbde32211f74179cf8983389b3e6b", @ANYRES32=0xffffffffffffffff, @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbffffff, @void, @value}, 0x94) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r9, @ANYRESDEC=r8, @ANYBLOB="00002104000000000000df0c0000000002000000", @ANYRES32=0x0, @ANYBLOB="c5159a2b273ec3c297293e5bf45f50333faeaba61c2eac1b7391a9fbbef238c1280fd8d7e153d1cf531334dbbf4a05e07abf4292e7364d3f0b2272c8531bc3f4720b16dfabdcb88e18f0a54859cb51631d46eb5206ce", @ANYBLOB="00000000000000000000000000000000000000000000040000000000", @ANYRES16, @ANYRES32=r11, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000018120007eea08fef413cd35444ffef464547ef362e0ef6275678e9e94e0faaf1ba005d2630726390d669a9e3745ea2f12ee10269a3b33ec699d28f0f212313d3f189fa34304e5e08d3f3af74e5f7262b90b46948f513572425c79ed6a3e428be7ef55bcef7", @ANYRES64=r8, @ANYBLOB="0000230000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8b8ffffb703000008000020b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x10, r10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x122, 0x0) r12 = io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b}) io_uring_enter(r12, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000e00)="$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") 2.445413335s ago: executing program 4 (id=7140): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x3b, 0x40, 0x7f, 0x8, @remote, @remote, 0x80, 0x8000, 0xfffffffc, 0x22d7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) 2.318184554s ago: executing program 4 (id=7143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00q', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000325000006989ab17d75c01f3ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3}]}) 2.148425404s ago: executing program 6 (id=7145): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000200)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x36a7, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008090) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)={0x184, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "04a895c0abcc3563fb0837dc7fe3d6e53d9e53fc7b0b5cdc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "296556166bc64d1b3e37873451dc4858a9953f4f91aa774e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4b817341f0cb7b2940c1e96e7950e37805b5fb5040a6eb1a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f8bcf25e1daf4f2cfcb96dc442803b2e986aa38d9646fce7"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b364be8a306790dbd21ad0eda4e48c00fa094c85d8da6840"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9e228fcff41a41c4a25cd942ed7b80977643cd64cc83ac6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c41d309690788087f19196d64a1c0d66f4310d38d9e03160"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d313455cf480c3cfc4bf02d3ea7135b6ee19c468dfbe983f"}]]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20100020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000010}, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x2000000, &(0x7f0000000280)="97b703368a2a35ab570d2de12de93392a0380dbf809088a00cb67ef0dc74da959ccfbbc3310d6567d499aaa0d689963f94a25d07513e821e5cf778f452a4486a43e31471f108b19e0925ea3d3dcad6fef4b796ccc4e2f89e5eaf553832293d606afeb3801fe8adc92164306394cf6b4f28d6f53d9a2c46137ac1e01675cdbff4d2e39cfd441487aaf0", 0x89, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340)="9185e11f51625f5adc294e10d86361311992") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r10}, 0x18) r11 = io_uring_setup(0x2621, &(0x7f0000000700)={0x0, 0x896d, 0x40, 0x2, 0x3d2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r8}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r5, 0x2000000000001, {0x2, 0xf0, 0x3}, 0xff}, 0xb) 2.025573464s ago: executing program 6 (id=7147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0xba, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x1a, 0x4, 0x0, 0x2e, 0xac, 0x67, 0x0, 0x29, 0x2f, 0x0, @multicast1, @private=0xa010104, {[@ra={0x94, 0x4}, @generic={0x17, 0x9, "177ed656f3e3f8"}, @timestamp_addr={0x44, 0x44, 0x2, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x33}}, {@local, 0xf95}, {@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010100, 0xe9}, {@local, 0x81}, {@multicast2, 0x8}, {@local, 0x7}, {@multicast1, 0x2}]}, @end, @noop]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x80}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0) 1.881226314s ago: executing program 6 (id=7149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x78d0, 0x80, 0xc, 0x40, {{0x34, 0x4, 0x3, 0x9, 0xd0, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@end, @ssrr={0x89, 0x2b, 0xe4, [@broadcast, @multicast1, @loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0xc, [0x1, 0xe, 0x3, 0xbe, 0x40dd]}, @ssrr={0x89, 0x17, 0xbf, [@multicast1, @local, @private=0xa010100, @rand_addr=0x64010101, @local]}, @generic={0x83, 0x2}, @rr={0x7, 0x2b, 0x8b, [@local, @rand_addr=0x64010101, @broadcast, @broadcast, @local, @multicast2, @loopback, @rand_addr=0x64010101, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x24, 0x75, 0x3, 0x9, [{@multicast1, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0xaa0}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xfff}]}, @end, @end, @timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0x4, [{@loopback, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x3b, 0x40, 0x7f, 0x8, @remote, @remote, 0x80, 0x8000, 0xfffffffc, 0x22d7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0) 1.802025964s ago: executing program 4 (id=7150): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) 1.789396883s ago: executing program 3 (id=7151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x30}], 0x1, 0x0) 1.402857543s ago: executing program 0 (id=7152): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000950000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='neigh_update\x00', r2, 0x0, 0x4006}, 0x18) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d00280a000060001980140004006b2e4f2fdd8733dc1c1639228919eb5e2efc02007b5d2f215d290000140005004af57c15cd92d389e606fce6a0eebda514000400f4d8d35abbd4fab3a3614be8a496bd8f140005008ebcd2c7e1cf0421ab20db4c32c433060500100004000000140003007665746831"], 0xa8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r4 = syz_io_uring_setup(0x344e, &(0x7f0000000100)={0x0, 0xc257, 0x800, 0x0, 0x1eb}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) setregid(0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580)=""/9, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000c00)=ANY=[@ANYBLOB="f2e8eac2ff0109119ae377d02b89d4d42b0600627cae81795a406f75037a2cefa3b35fcf3758eac4c6305c147241b59641dca856758312bad790c6e911f4b2967731caac6c6cbde32211f74179cf8983389b3e6b", @ANYRES32=0xffffffffffffffff, @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbffffff, @void, @value}, 0x94) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r9, @ANYRESDEC=r8, @ANYBLOB="00002104000000000000df0c0000000002000000", @ANYRES32=0x0, @ANYBLOB="c5159a2b273ec3c297293e5bf45f50333faeaba61c2eac1b7391a9fbbef238c1280fd8d7e153d1cf531334dbbf4a05e07abf4292e7364d3f0b2272c8531bc3f4720b16dfabdcb88e18f0a54859cb51631d46eb5206ce", @ANYBLOB="00000000000000000000000000000000000000000000040000000000", @ANYRES16, @ANYRES32=r11, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000018120007eea08fef413cd35444ffef464547ef362e0ef6275678e9e94e0faaf1ba005d2630726390d669a9e3745ea2f12ee10269a3b33ec699d28f0f212313d3f189fa34304e5e08d3f3af74e5f7262b90b46948f513572425c79ed6a3e428be7ef55bcef7", @ANYRES64=r8, @ANYBLOB="0000230000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8b8ffffb703000008000020b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x10, r10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x122, 0x0) r12 = io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b}) io_uring_enter(r12, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000e00)="$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") 1.378581723s ago: executing program 6 (id=7154): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000200)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x36a7, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008090) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)={0x184, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "04a895c0abcc3563fb0837dc7fe3d6e53d9e53fc7b0b5cdc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "296556166bc64d1b3e37873451dc4858a9953f4f91aa774e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4b817341f0cb7b2940c1e96e7950e37805b5fb5040a6eb1a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f8bcf25e1daf4f2cfcb96dc442803b2e986aa38d9646fce7"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b364be8a306790dbd21ad0eda4e48c00fa094c85d8da6840"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9e228fcff41a41c4a25cd942ed7b80977643cd64cc83ac6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c41d309690788087f19196d64a1c0d66f4310d38d9e03160"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d313455cf480c3cfc4bf02d3ea7135b6ee19c468dfbe983f"}]]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20100020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10000010}, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x2000000, &(0x7f0000000280)="97b703368a2a35ab570d2de12de93392a0380dbf809088a00cb67ef0dc74da959ccfbbc3310d6567d499aaa0d689963f94a25d07513e821e5cf778f452a4486a43e31471f108b19e0925ea3d3dcad6fef4b796ccc4e2f89e5eaf553832293d606afeb3801fe8adc92164306394cf6b4f28d6f53d9a2c46137ac1e01675cdbff4d2e39cfd441487aaf0", 0x89, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340)="9185e11f51625f5adc294e10d86361311992") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r11}, 0x18) r12 = io_uring_setup(0x2621, &(0x7f0000000700)={0x0, 0x896d, 0x40, 0x2, 0x3d2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r12, 0xb, &(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r5, 0x2000000000001, {0x2, 0xf0, 0x3}, 0xff}, 0xb) 884.647192ms ago: executing program 6 (id=7156): r0 = socket(0x10, 0x4, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/231, 0xe7}, {0x0}], 0x10000000000000eb) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = socket(0x10, 0x800000003, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2d, 0xfffffffc, {0x0, 0x0, 0x12, r4, {0x0, 0x1}, {0xffff, 0xe}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000000000000000007a0000000018110000", @ANYRESOCT=r0, @ANYRESDEC=r2], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@gettfilter={0x24, 0x2e, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8, 0x8}, {0x9, 0x5}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000580)={0x28, 0x0, 0x0, @host}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES8=r10, @ANYRES8=r13], 0x48}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffbff, 0x20, &(0x7f0000000140)="f1", 0x1, 0x8, 0x1, 0x0, 0x5, 0x3, 0x0}) 884.328312ms ago: executing program 3 (id=7157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 873.507982ms ago: executing program 0 (id=7158): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) select(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r1, &(0x7f0000000040)=@random={'osx.', '-\\\x00'}, &(0x7f0000000100)=""/95, 0x5f) 812.307432ms ago: executing program 5 (id=7159): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 712.506422ms ago: executing program 3 (id=7160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) 698.484682ms ago: executing program 5 (id=7161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) fsetxattr(r2, &(0x7f0000000600)=@known='system.posix_acl_default\x00', &(0x7f0000000640)='/dev/bus/usb/00#/00#\x00', 0x15, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000680)='afs_silly_rename\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) socket$inet6(0xa, 0x1, 0x0) socket(0x1, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x41, &(0x7f0000000300)={[{@bsdgroups}, {@nodiscard}, {@dioread_nolock}, {@grpjquota}, {@grpjquota}, {@orlov}, {@discard}, {@grpid}, {@barrier}]}, 0x64, 0x510, &(0x7f0000000f80)="$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") r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) r7 = socket$key(0xf, 0x3, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) sendmsg$key(r7, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc00c5512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0xffffffd4, &(0x7f00000005c0)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg$unix(r10, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r10, r9, r9]}}, @rights={{0x18, 0x1, 0x1, [r10]}}], 0x38, 0x3ec0}}], 0x1, 0x0) 664.119221ms ago: executing program 3 (id=7162): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000780)=[{{0x1, 0x1}, {0x0, 0x1}}, {{0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) close(r0) syz_read_part_table(0x4053, &(0x7f0000004080)="$eJzszj9KxEAcBeCnJmyQaQQ7YXERrGNnldYT5CbWCuYCXkHL1N7DA3iYyLIosgrrv0LZ72uSmfm9mRf+muYTM1WSgyTHiwxtu8pUH8y1Z6n3m6QkuXxNvqj78ddaAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8Rsw/ndxdrG01GGqy7nJWmW4Zu91N18J4dJtR6+fXh3Xz/+tDEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsE12U96syobp2epzf5Khm18vfxenX3jscZqmJP34jaIAAAAAADyzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEMAAAAgDB/6zzaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsFAAA//8vXhFd") ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r2, 0x0, 0x6f4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32=0x0, @ANYBLOB="000000000000f800"/17, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000580b34047a76fc73000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = signalfd4(r3, &(0x7f00000001c0)={[0x3]}, 0x8, 0x800) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000000280)={0x0, 0x7214, 0x4000, 0x0, 0x2e1}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 602.720102ms ago: executing program 5 (id=7163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x78d0, 0x80, 0xc, 0x40, {{0x34, 0x4, 0x3, 0x9, 0xd0, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@end, @ssrr={0x89, 0x2b, 0xe4, [@broadcast, @multicast1, @loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0xc, [0x1, 0xe, 0x3, 0xbe, 0x40dd]}, @ssrr={0x89, 0x17, 0xbf, [@multicast1, @local, @private=0xa010100, @rand_addr=0x64010101, @local]}, @generic={0x83, 0x2}, @rr={0x7, 0x2b, 0x8b, [@local, @rand_addr=0x64010101, @broadcast, @broadcast, @local, @multicast2, @loopback, @rand_addr=0x64010101, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x24, 0x75, 0x3, 0x9, [{@multicast1, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0xaa0}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xfff}]}, @end, @end, @timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0x4, [{@loopback, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x3b, 0x40, 0x7f, 0x8, @remote, @remote, 0x80, 0x8000, 0xfffffffc, 0x22d7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0) 512.931201ms ago: executing program 5 (id=7164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 422.807051ms ago: executing program 5 (id=7165): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x3b, 0x40, 0x7f, 0x8, @remote, @remote, 0x80, 0x8000, 0xfffffffc, 0x22d7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) 250.308091ms ago: executing program 5 (id=7166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x28000, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) 106.782681ms ago: executing program 3 (id=7167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51], 0x30}], 0x1, 0x0) 45.05143ms ago: executing program 6 (id=7168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00q', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000325000006989ab17d75c01f3ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3}]}) write$ppp(r3, &(0x7f0000000140)="3888978138ef2106", 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) io_setup(0x8000, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) wait4(0x0, 0x0, 0x40000000, 0x0) r8 = dup(0xffffffffffffffff) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x1) 613.23µs ago: executing program 0 (id=7169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 0s ago: executing program 3 (id=7170): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): r:sysadm_t pid=20845 comm="syz.6.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966715d29 code=0x7ffc0000 [ 338.945292][T20856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20856 comm=syz.6.6253 [ 339.010996][T20856] : renamed from bond0 (while UP) [ 339.208886][T20864] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6256'. [ 339.317163][T20873] netlink: 'syz.6.6260': attribute type 10 has an invalid length. [ 339.438414][T20887] xt_hashlimit: size too large, truncated to 1048576 [ 339.875454][T20917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6272'. [ 339.896473][T20916] netlink: 'syz.6.6271': attribute type 10 has an invalid length. [ 340.034320][T20925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6275'. [ 340.084435][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6277'. [ 340.223321][T20935] loop6: detected capacity change from 0 to 128 [ 340.280891][T20927] syz.3.6276[20927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.281000][T20927] syz.3.6276[20927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.329512][T20927] syz.3.6276[20927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.460185][T20950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6284'. [ 340.553684][T20958] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6283'. [ 340.595449][T20958] usb usb1: usbfs: process 20958 (syz.6.6283) did not claim interface 0 before use [ 340.656873][T20968] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6290'. [ 340.773168][T20972] FAULT_INJECTION: forcing a failure. [ 340.773168][T20972] name failslab, interval 1, probability 0, space 0, times 0 [ 340.787425][T20972] CPU: 1 UID: 0 PID: 20972 Comm: syz.5.6292 Not tainted 6.13.0-rc7-syzkaller #0 [ 340.796481][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.806645][T20972] Call Trace: [ 340.809964][T20972] [ 340.812916][T20972] dump_stack_lvl+0xf2/0x150 [ 340.817608][T20972] dump_stack+0x15/0x1a [ 340.821795][T20972] should_fail_ex+0x223/0x230 [ 340.826596][T20972] should_failslab+0x8f/0xb0 [ 340.831249][T20972] kmem_cache_alloc_noprof+0x52/0x320 [ 340.836705][T20972] ? skb_clone+0x154/0x1f0 [ 340.841155][T20972] skb_clone+0x154/0x1f0 [ 340.845460][T20972] nfnetlink_rcv+0x2de/0x15d0 [ 340.850165][T20972] ? kmem_cache_free+0xdc/0x2d0 [ 340.855046][T20972] ? nlmon_xmit+0x51/0x60 [ 340.859456][T20972] ? __kfree_skb+0x102/0x150 [ 340.864068][T20972] ? consume_skb+0x49/0x160 [ 340.868660][T20972] ? nlmon_xmit+0x51/0x60 [ 340.873027][T20972] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 340.878411][T20972] ? __dev_queue_xmit+0xb6e/0x2090 [ 340.883555][T20972] ? ref_tracker_free+0x3a5/0x410 [ 340.888631][T20972] ? __dev_queue_xmit+0x186/0x2090 [ 340.893907][T20972] netlink_unicast+0x599/0x670 [ 340.898717][T20972] netlink_sendmsg+0x5cc/0x6e0 [ 340.903562][T20972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.908913][T20972] __sock_sendmsg+0x140/0x180 [ 340.913746][T20972] ____sys_sendmsg+0x312/0x410 [ 340.918546][T20972] __sys_sendmsg+0x19d/0x230 [ 340.923345][T20972] __x64_sys_sendmsg+0x46/0x50 [ 340.928189][T20972] x64_sys_call+0x2734/0x2dc0 [ 340.932886][T20972] do_syscall_64+0xc9/0x1c0 [ 340.937490][T20972] ? clear_bhb_loop+0x55/0xb0 [ 340.942373][T20972] ? clear_bhb_loop+0x55/0xb0 [ 340.947084][T20972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.953011][T20972] RIP: 0033:0x7f0136bf5d29 [ 340.957525][T20972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.977201][T20972] RSP: 002b:00007f0135261038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.985893][T20972] RAX: ffffffffffffffda RBX: 00007f0136de5fa0 RCX: 00007f0136bf5d29 [ 340.993882][T20972] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 341.001887][T20972] RBP: 00007f0135261090 R08: 0000000000000000 R09: 0000000000000000 [ 341.009992][T20972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.017984][T20972] R13: 0000000000000000 R14: 00007f0136de5fa0 R15: 00007ffd6f246eb8 [ 341.025984][T20972] [ 341.029628][T20975] usb usb1: usbfs: process 20975 (syz.3.6291) did not claim interface 0 before use [ 341.322335][T20984] vlan2: entered promiscuous mode [ 341.619626][T21002] netlink: 'syz.6.6303': attribute type 4 has an invalid length. [ 341.727036][T21011] usb usb1: usbfs: process 21011 (syz.6.6306) did not claim interface 0 before use [ 342.124593][T21039] pim6reg1: entered promiscuous mode [ 342.130018][T21039] pim6reg1: entered allmulticast mode [ 342.139347][T21035] lo speed is unknown, defaulting to 1000 [ 342.141107][T21039] x_tables: duplicate underflow at hook 1 [ 342.425513][T21084] FAULT_INJECTION: forcing a failure. [ 342.425513][T21084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.438654][T21084] CPU: 0 UID: 0 PID: 21084 Comm: syz.0.6322 Not tainted 6.13.0-rc7-syzkaller #0 [ 342.447700][T21084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.457763][T21084] Call Trace: [ 342.461043][T21084] [ 342.464000][T21084] dump_stack_lvl+0xf2/0x150 [ 342.468625][T21084] dump_stack+0x15/0x1a [ 342.472840][T21084] should_fail_ex+0x223/0x230 [ 342.477592][T21084] should_fail+0xb/0x10 [ 342.481764][T21084] should_fail_usercopy+0x1a/0x20 [ 342.486802][T21084] _copy_from_user+0x1e/0xb0 [ 342.491517][T21084] kstrtouint_from_user+0x76/0xe0 [ 342.496643][T21084] ? 0xffffffff81000000 [ 342.500813][T21084] ? selinux_file_permission+0x22a/0x360 [ 342.506496][T21084] proc_fail_nth_write+0x4f/0x150 [ 342.511603][T21084] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 342.517321][T21084] vfs_write+0x281/0x920 [ 342.521587][T21084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.527232][T21084] ? __fget_files+0x17c/0x1c0 [ 342.531933][T21084] ksys_write+0xe8/0x1b0 [ 342.536273][T21084] __x64_sys_write+0x42/0x50 [ 342.540975][T21084] x64_sys_call+0x287e/0x2dc0 [ 342.545768][T21084] do_syscall_64+0xc9/0x1c0 [ 342.550301][T21084] ? clear_bhb_loop+0x55/0xb0 [ 342.555033][T21084] ? clear_bhb_loop+0x55/0xb0 [ 342.559773][T21084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.565681][T21084] RIP: 0033:0x7f01dcda47df [ 342.570113][T21084] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 342.589793][T21084] RSP: 002b:00007f01db417030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 342.598295][T21084] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f01dcda47df [ 342.606361][T21084] RDX: 0000000000000001 RSI: 00007f01db4170a0 RDI: 0000000000000004 [ 342.614338][T21084] RBP: 00007f01db417090 R08: 0000000000000000 R09: 0000000000000000 [ 342.622328][T21084] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 342.630390][T21084] R13: 0000000000000000 R14: 00007f01dcf95fa0 R15: 00007ffd64b40f18 [ 342.638389][T21084] [ 342.781029][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 342.781048][ T29] audit: type=1326 audit(2000000004.030:22140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 342.783480][T21100] syz.5.6328[21100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.805272][ T29] audit: type=1326 audit(2000000004.030:22141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 342.846085][ T29] audit: type=1326 audit(2000000004.030:22142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 342.857668][T21100] syz.5.6328[21100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.869649][ T29] audit: type=1326 audit(2000000004.030:22143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 342.869742][ T29] audit: type=1326 audit(2000000004.030:22144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 342.869774][ T29] audit: type=1326 audit(2000000004.030:22145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 342.869813][ T29] audit: type=1326 audit(2000000004.030:22146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 342.908065][T21100] syz.5.6328[21100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.928331][ T29] audit: type=1326 audit(2000000004.030:22147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 343.010496][ T29] audit: type=1326 audit(2000000004.030:22148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 343.034195][ T29] audit: type=1326 audit(2000000004.030:22149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 343.089472][T21105] hub 2-0:1.0: USB hub found [ 343.094316][T21105] hub 2-0:1.0: 8 ports detected [ 343.130504][T21087] loop6: detected capacity change from 0 to 32768 [ 343.153497][T21109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.160738][T21109] IPv6: NLM_F_CREATE should be set when creating new route [ 343.197364][T21087] loop6: p1 p3 < p5 p6 > p4 [ 343.208994][T21087] loop6: p4 size 83886080 extends beyond EOD, truncated [ 343.209881][T21105] wireguard0: entered promiscuous mode [ 343.221662][T21105] wireguard0: entered allmulticast mode [ 343.322441][T21123] netlink: 'syz.6.6334': attribute type 10 has an invalid length. [ 343.344194][T21127] __nla_validate_parse: 6 callbacks suppressed [ 343.344213][T21127] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6333'. [ 343.371500][T21127] usb usb1: usbfs: process 21127 (syz.5.6333) did not claim interface 0 before use [ 343.422218][T21129] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 343.443654][T21139] pim6reg1: entered promiscuous mode [ 343.449022][T21139] pim6reg1: entered allmulticast mode [ 343.513957][T21137] mmap: syz.3.6338 (21137): VmData 29351936 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 344.221362][T21194] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6351'. [ 344.455355][T21207] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 344.549602][T21219] netlink: 'syz.6.6360': attribute type 29 has an invalid length. [ 344.667428][T21223] loop6: detected capacity change from 0 to 512 [ 344.701570][T21223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.718702][T21223] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.748985][T21230] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 344.773103][T21234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6365'. [ 344.799580][T21236] netlink: 'syz.4.6366': attribute type 10 has an invalid length. [ 344.865156][T21240] vlan3: entered promiscuous mode [ 344.894143][T21242] FAULT_INJECTION: forcing a failure. [ 344.894143][T21242] name failslab, interval 1, probability 0, space 0, times 0 [ 344.906917][T21242] CPU: 0 UID: 0 PID: 21242 Comm: syz.4.6369 Not tainted 6.13.0-rc7-syzkaller #0 [ 344.916025][T21242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.926106][T21242] Call Trace: [ 344.929377][T21242] [ 344.932301][T21242] dump_stack_lvl+0xf2/0x150 [ 344.936980][T21242] dump_stack+0x15/0x1a [ 344.941281][T21242] should_fail_ex+0x223/0x230 [ 344.945989][T21242] should_failslab+0x8f/0xb0 [ 344.950680][T21242] kmem_cache_alloc_noprof+0x52/0x320 [ 344.956115][T21242] ? getname_flags+0x81/0x3b0 [ 344.960948][T21242] getname_flags+0x81/0x3b0 [ 344.965458][T21242] user_path_at+0x26/0x120 [ 344.969883][T21242] __se_sys_mount_setattr+0x49c/0x1330 [ 344.975393][T21242] ? fput+0x1c4/0x200 [ 344.979417][T21242] __x64_sys_mount_setattr+0x67/0x80 [ 344.984767][T21242] x64_sys_call+0x2c0c/0x2dc0 [ 344.989472][T21242] do_syscall_64+0xc9/0x1c0 [ 344.994056][T21242] ? clear_bhb_loop+0x55/0xb0 [ 344.998754][T21242] ? clear_bhb_loop+0x55/0xb0 [ 345.003448][T21242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.009420][T21242] RIP: 0033:0x7f2c583c5d29 [ 345.013830][T21242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.033481][T21242] RSP: 002b:00007f2c56a37038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 345.041926][T21242] RAX: ffffffffffffffda RBX: 00007f2c585b5fa0 RCX: 00007f2c583c5d29 [ 345.049902][T21242] RDX: 0000000000008000 RSI: 0000000020000180 RDI: 0000000000000007 [ 345.057906][T21242] RBP: 00007f2c56a37090 R08: 0000000000000020 R09: 0000000000000000 [ 345.065883][T21242] R10: 0000000020001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 345.073876][T21242] R13: 0000000000000000 R14: 00007f2c585b5fa0 R15: 00007ffdaf7429b8 [ 345.081866][T21242] [ 345.122348][T21246] netlink: 'syz.5.6371': attribute type 3 has an invalid length. [ 345.294031][T21266] netlink: 'syz.3.6379': attribute type 10 has an invalid length. [ 345.303983][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.314385][T21266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.338090][T21266] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 345.372712][T21275] FAULT_INJECTION: forcing a failure. [ 345.372712][T21275] name failslab, interval 1, probability 0, space 0, times 0 [ 345.385458][T21275] CPU: 1 UID: 0 PID: 21275 Comm: syz.3.6382 Not tainted 6.13.0-rc7-syzkaller #0 [ 345.394586][T21275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.404696][T21275] Call Trace: [ 345.407992][T21275] [ 345.410928][T21275] dump_stack_lvl+0xf2/0x150 [ 345.415581][T21275] dump_stack+0x15/0x1a [ 345.419757][T21275] should_fail_ex+0x223/0x230 [ 345.424445][T21275] ? assoc_array_clear+0x48/0xf0 [ 345.429406][T21275] should_failslab+0x8f/0xb0 [ 345.434051][T21275] __kmalloc_cache_noprof+0x4e/0x320 [ 345.439424][T21275] assoc_array_clear+0x48/0xf0 [ 345.444203][T21275] ? __pfx_keyring_revoke+0x10/0x10 [ 345.449491][T21275] keyring_revoke+0x22/0x60 [ 345.454041][T21275] key_revoke+0x8b/0x120 [ 345.458384][T21275] __se_sys_keyctl+0x7a9/0xbb0 [ 345.463276][T21275] ? putname+0xcf/0xf0 [ 345.467351][T21275] ? __fget_files+0x17c/0x1c0 [ 345.472051][T21275] ? fput+0x1c4/0x200 [ 345.476040][T21275] ? ksys_write+0x176/0x1b0 [ 345.480596][T21275] __x64_sys_keyctl+0x67/0x80 [ 345.485380][T21275] x64_sys_call+0x163d/0x2dc0 [ 345.490060][T21275] do_syscall_64+0xc9/0x1c0 [ 345.494566][T21275] ? clear_bhb_loop+0x55/0xb0 [ 345.499281][T21275] ? clear_bhb_loop+0x55/0xb0 [ 345.504034][T21275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.509932][T21275] RIP: 0033:0x7f5118235d29 [ 345.514380][T21275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.534033][T21275] RSP: 002b:00007f51168a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 345.542474][T21275] RAX: ffffffffffffffda RBX: 00007f5118425fa0 RCX: 00007f5118235d29 [ 345.550522][T21275] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000003 [ 345.558579][T21275] RBP: 00007f51168a7090 R08: 0000000000000000 R09: 0000000000000000 [ 345.566553][T21275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.574537][T21275] R13: 0000000000000000 R14: 00007f5118425fa0 R15: 00007fffd2466f78 [ 345.582519][T21275] [ 345.613697][T11582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.618892][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6380'. [ 345.631601][T21272] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6380'. [ 345.664674][T21272] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 345.779351][T21272] lo speed is unknown, defaulting to 1000 [ 346.035893][T21305] netlink: 'syz.0.6391': attribute type 10 has an invalid length. [ 346.646457][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6400'. [ 346.701259][T21334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.708805][T21334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.100649][T21342] loop6: detected capacity change from 0 to 32768 [ 347.159039][T21342] loop6: p1 p3 < p5 p6 > p4 [ 347.181058][T21342] loop6: p4 size 83886080 extends beyond EOD, truncated [ 347.241655][T21360] FAULT_INJECTION: forcing a failure. [ 347.241655][T21360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.254948][T21360] CPU: 1 UID: 0 PID: 21360 Comm: syz.5.6409 Not tainted 6.13.0-rc7-syzkaller #0 [ 347.264114][T21360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.274227][T21360] Call Trace: [ 347.277540][T21360] [ 347.280483][T21360] dump_stack_lvl+0xf2/0x150 [ 347.285153][T21360] dump_stack+0x15/0x1a [ 347.289362][T21360] should_fail_ex+0x223/0x230 [ 347.294061][T21360] should_fail_alloc_page+0xfd/0x110 [ 347.299370][T21360] __alloc_pages_noprof+0x109/0x340 [ 347.304595][T21360] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 347.310067][T21360] alloc_pages_noprof+0xe1/0x100 [ 347.315089][T21360] get_free_pages_noprof+0xc/0x30 [ 347.320148][T21360] pgd_alloc+0x22/0x170 [ 347.324409][T21360] mm_init+0x33c/0x780 [ 347.328553][T21360] ? kmem_cache_alloc_noprof+0x22c/0x320 [ 347.334208][T21360] ? copy_mm+0xe1/0x1220 [ 347.338475][T21360] copy_mm+0x11d/0x1220 [ 347.342745][T21360] ? kmem_cache_alloc_noprof+0x22c/0x320 [ 347.348399][T21360] ? copy_signal+0x54/0x350 [ 347.352964][T21360] ? hrtimer_init+0x104/0x1f0 [ 347.357703][T21360] ? __init_rwsem+0x5d/0x70 [ 347.362274][T21360] ? copy_signal+0x326/0x350 [ 347.366905][T21360] copy_process+0xd5b/0x1f90 [ 347.371699][T21360] kernel_clone+0x167/0x5e0 [ 347.376225][T21360] ? vfs_write+0x596/0x920 [ 347.380674][T21360] __x64_sys_clone+0xe8/0x120 [ 347.385437][T21360] x64_sys_call+0x2d7e/0x2dc0 [ 347.390138][T21360] do_syscall_64+0xc9/0x1c0 [ 347.394759][T21360] ? clear_bhb_loop+0x55/0xb0 [ 347.399465][T21360] ? clear_bhb_loop+0x55/0xb0 [ 347.404171][T21360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.410089][T21360] RIP: 0033:0x7f0136bf5d29 [ 347.414527][T21360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.434262][T21360] RSP: 002b:00007f013523ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 347.442715][T21360] RAX: ffffffffffffffda RBX: 00007f0136de6080 RCX: 00007f0136bf5d29 [ 347.450697][T21360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 347.458714][T21360] RBP: 00007f0135240090 R08: 0000000000000000 R09: 0000000000000000 [ 347.466811][T21360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 347.474786][T21360] R13: 0000000000000000 R14: 00007f0136de6080 R15: 00007ffd6f246eb8 [ 347.482770][T21360] [ 347.640520][T21368] lo speed is unknown, defaulting to 1000 [ 347.737034][T21381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6418'. [ 347.795852][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 347.795916][ T29] audit: type=1326 audit(2000000009.050:22544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21376 comm="syz.6.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966715d29 code=0x7ffc0000 [ 347.826225][ T29] audit: type=1326 audit(2000000009.050:22545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21376 comm="syz.6.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966715d29 code=0x7ffc0000 [ 347.893296][ T29] audit: type=1400 audit(2000000009.110:22546): avc: denied { ioctl } for pid=21386 comm="syz.0.6421" path="socket:[69075]" dev="sockfs" ino=69075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.918331][ T29] audit: type=1326 audit(2000000009.140:22547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.5.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 347.981762][T21385] netlink: 'syz.5.6419': attribute type 10 has an invalid length. [ 347.996500][ T29] audit: type=1326 audit(2000000009.140:22548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.5.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 348.020320][ T29] audit: type=1326 audit(2000000009.140:22549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.5.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 348.043948][ T29] audit: type=1326 audit(2000000009.150:22550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.5.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 348.067722][ T29] audit: type=1326 audit(2000000009.210:22551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.5.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 348.091417][ T29] audit: type=1326 audit(2000000009.210:22552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.5.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 348.115164][ T29] audit: type=1326 audit(2000000009.220:22553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.5.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0136bf5d29 code=0x7ffc0000 [ 348.823732][T21411] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 349.034453][T21401] lo speed is unknown, defaulting to 1000 [ 349.174432][T21401] chnl_net:caif_netlink_parms(): no params data found [ 349.374495][T21401] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.381675][T21401] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.401416][T21401] bridge_slave_0: entered allmulticast mode [ 349.407877][T21401] bridge_slave_0: entered promiscuous mode [ 349.408812][T21457] netlink: 'syz.5.6440': attribute type 10 has an invalid length. [ 349.414789][T21401] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.421702][T21457] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6440'. [ 349.428705][T21401] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.445117][T21401] bridge_slave_1: entered allmulticast mode [ 349.452134][T21401] bridge_slave_1: entered promiscuous mode [ 349.485849][T21401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.666260][T21464] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6441'. [ 349.720858][T21464] usb usb1: usbfs: process 21464 (syz.5.6441) did not claim interface 0 before use [ 349.740765][T21442] lo speed is unknown, defaulting to 1000 [ 349.779644][T21401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.938875][T21401] team0: Port device team_slave_0 added [ 349.953106][T21401] team0: Port device team_slave_1 added [ 350.012161][T21401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.019157][T21401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.045198][T21401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.080679][T21401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.088615][T21401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.114762][T21401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.162595][T21467] netlink: 'syz.3.6442': attribute type 10 has an invalid length. [ 350.258630][T21401] hsr_slave_0: entered promiscuous mode [ 350.274933][T21401] hsr_slave_1: entered promiscuous mode [ 350.280923][T21401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.304285][T21401] Cannot create hsr debugfs directory [ 350.321195][T21467] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.338920][T21467] bond0: (slave team0): Enslaving as an active interface with an up link [ 350.382872][T21474] vlan3: entered promiscuous mode [ 350.444318][T21478] vlan2: entered promiscuous mode [ 350.528625][T21484] FAULT_INJECTION: forcing a failure. [ 350.528625][T21484] name failslab, interval 1, probability 0, space 0, times 0 [ 350.541343][T21484] CPU: 0 UID: 0 PID: 21484 Comm: syz.0.6449 Not tainted 6.13.0-rc7-syzkaller #0 [ 350.550476][T21484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.560605][T21484] Call Trace: [ 350.563937][T21484] [ 350.566899][T21484] dump_stack_lvl+0xf2/0x150 [ 350.571580][T21484] dump_stack+0x15/0x1a [ 350.575869][T21484] should_fail_ex+0x223/0x230 [ 350.580636][T21484] should_failslab+0x8f/0xb0 [ 350.585258][T21484] kmem_cache_alloc_noprof+0x52/0x320 [ 350.590654][T21484] ? mas_alloc_nodes+0x1e3/0x490 [ 350.595683][T21484] ? __mod_memcg_state+0x122/0x280 [ 350.600882][T21484] mas_alloc_nodes+0x1e3/0x490 [ 350.605746][T21484] mas_preallocate+0x44a/0x650 [ 350.610529][T21484] vma_link+0x93/0x370 [ 350.614612][T21484] insert_vm_struct+0x17b/0x210 [ 350.619471][T21484] alloc_bprm+0x36d/0x5d0 [ 350.623819][T21484] do_execveat_common+0x134/0x800 [ 350.628938][T21484] ? getname_flags+0x15a/0x3b0 [ 350.633710][T21484] __x64_sys_execveat+0x75/0x90 [ 350.638590][T21484] x64_sys_call+0x291e/0x2dc0 [ 350.643276][T21484] do_syscall_64+0xc9/0x1c0 [ 350.647902][T21484] ? clear_bhb_loop+0x55/0xb0 [ 350.652586][T21484] ? clear_bhb_loop+0x55/0xb0 [ 350.657272][T21484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.663321][T21484] RIP: 0033:0x7f01dcda5d29 [ 350.667874][T21484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.687487][T21484] RSP: 002b:00007f01db417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 350.695907][T21484] RAX: ffffffffffffffda RBX: 00007f01dcf95fa0 RCX: 00007f01dcda5d29 [ 350.703906][T21484] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 350.711880][T21484] RBP: 00007f01db417090 R08: 0000000000000000 R09: 0000000000000000 [ 350.719854][T21484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.727825][T21484] R13: 0000000000000000 R14: 00007f01dcf95fa0 R15: 00007ffd64b40f18 [ 350.735894][T21484] [ 350.770826][T21401] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.805318][T21486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6450'. [ 350.879439][T21401] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.960727][T21401] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.036083][T21401] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.270145][T21401] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 351.298261][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6457'. [ 351.358611][T21401] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 351.399289][T21401] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 351.432187][T21401] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.438304][T21518] FAULT_INJECTION: forcing a failure. [ 351.438304][T21518] name failslab, interval 1, probability 0, space 0, times 0 [ 351.451561][T21518] CPU: 1 UID: 0 PID: 21518 Comm: syz.4.6460 Not tainted 6.13.0-rc7-syzkaller #0 [ 351.460679][T21518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 351.470754][T21518] Call Trace: [ 351.474126][T21518] [ 351.477083][T21518] dump_stack_lvl+0xf2/0x150 [ 351.481857][T21518] dump_stack+0x15/0x1a [ 351.486071][T21518] should_fail_ex+0x223/0x230 [ 351.490782][T21518] should_failslab+0x8f/0xb0 [ 351.495458][T21518] kmem_cache_alloc_node_noprof+0x59/0x320 [ 351.501282][T21518] ? __alloc_skb+0x10b/0x310 [ 351.505897][T21518] __alloc_skb+0x10b/0x310 [ 351.510387][T21518] netlink_alloc_large_skb+0xad/0xe0 [ 351.515695][T21518] netlink_sendmsg+0x3b4/0x6e0 [ 351.520579][T21518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.525912][T21518] __sock_sendmsg+0x140/0x180 [ 351.530630][T21518] ____sys_sendmsg+0x312/0x410 [ 351.535419][T21518] __sys_sendmsg+0x19d/0x230 [ 351.540158][T21518] __x64_sys_sendmsg+0x46/0x50 [ 351.545005][T21518] x64_sys_call+0x2734/0x2dc0 [ 351.549724][T21518] do_syscall_64+0xc9/0x1c0 [ 351.554270][T21518] ? clear_bhb_loop+0x55/0xb0 [ 351.559048][T21518] ? clear_bhb_loop+0x55/0xb0 [ 351.561441][T21515] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 351.563776][T21518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.578340][T21518] RIP: 0033:0x7f2c583c5d29 [ 351.582797][T21518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.602422][T21518] RSP: 002b:00007f2c56a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.610949][T21518] RAX: ffffffffffffffda RBX: 00007f2c585b5fa0 RCX: 00007f2c583c5d29 [ 351.618944][T21518] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 351.626975][T21518] RBP: 00007f2c56a37090 R08: 0000000000000000 R09: 0000000000000000 [ 351.635039][T21518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.643039][T21518] R13: 0000000000000000 R14: 00007f2c585b5fa0 R15: 00007ffdaf7429b8 [ 351.651037][T21518] [ 351.695046][T21511] lo speed is unknown, defaulting to 1000 [ 351.774988][T21521] netlink: 'syz.3.6461': attribute type 10 has an invalid length. [ 351.948793][T21523] netlink: 'syz.0.6462': attribute type 10 has an invalid length. [ 352.080425][T21401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.131230][T21401] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.170324][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.177481][ T8627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.253060][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.260231][ T8627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.332179][T21401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.588095][T21401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.808469][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 352.808487][ T29] audit: type=1326 audit(2000000014.060:22895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 352.838301][ T29] audit: type=1326 audit(2000000014.060:22896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 352.901288][ T29] audit: type=1326 audit(2000000014.110:22897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 352.924971][ T29] audit: type=1326 audit(2000000014.110:22898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 352.948630][ T29] audit: type=1326 audit(2000000014.110:22899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 352.972388][ T29] audit: type=1326 audit(2000000014.120:22900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 352.996064][ T29] audit: type=1326 audit(2000000014.120:22901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 353.005523][T21574] FAULT_INJECTION: forcing a failure. [ 353.005523][T21574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.019793][ T29] audit: type=1326 audit(2000000014.120:22902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 353.032723][T21574] CPU: 1 UID: 0 PID: 21574 Comm: syz.5.6473 Not tainted 6.13.0-rc7-syzkaller #0 [ 353.056370][ T29] audit: type=1326 audit(2000000014.120:22903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 353.065267][T21574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.065284][T21574] Call Trace: [ 353.065292][T21574] [ 353.065302][T21574] dump_stack_lvl+0xf2/0x150 [ 353.088848][ T29] audit: type=1326 audit(2000000014.120:22904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21556 comm="syz.0.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 353.098845][T21574] dump_stack+0x15/0x1a [ 353.112842][T21401] veth0_vlan: entered promiscuous mode [ 353.133238][T21574] should_fail_ex+0x223/0x230 [ 353.133276][T21574] should_fail+0xb/0x10 [ 353.152018][T21574] should_fail_usercopy+0x1a/0x20 [ 353.157065][T21574] _copy_from_iter+0xd5/0xd00 [ 353.161815][T21574] ? avc_has_perm+0xd4/0x160 [ 353.166452][T21574] ? selinux_socket_sendmsg+0x185/0x1c0 [ 353.172026][T21574] bcm_sendmsg+0xca/0x470 [ 353.176370][T21574] ? __pfx_bcm_sendmsg+0x10/0x10 [ 353.181315][T21574] __sock_sendmsg+0x140/0x180 [ 353.186058][T21574] ____sys_sendmsg+0x312/0x410 [ 353.190855][T21574] __sys_sendmsg+0x19d/0x230 [ 353.195482][T21574] __x64_sys_sendmsg+0x46/0x50 [ 353.200256][T21574] x64_sys_call+0x2734/0x2dc0 [ 353.204976][T21574] do_syscall_64+0xc9/0x1c0 [ 353.209485][T21574] ? clear_bhb_loop+0x55/0xb0 [ 353.214309][T21574] ? clear_bhb_loop+0x55/0xb0 [ 353.218995][T21574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.224899][T21574] RIP: 0033:0x7f0136bf5d29 [ 353.229339][T21574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.248954][T21574] RSP: 002b:00007f0135240038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.257372][T21574] RAX: ffffffffffffffda RBX: 00007f0136de6080 RCX: 00007f0136bf5d29 [ 353.265404][T21574] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 353.273376][T21574] RBP: 00007f0135240090 R08: 0000000000000000 R09: 0000000000000000 [ 353.281348][T21574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.289386][T21574] R13: 0000000000000001 R14: 00007f0136de6080 R15: 00007ffd6f246eb8 [ 353.297372][T21574] [ 353.315759][T21401] veth1_vlan: entered promiscuous mode [ 353.368043][T21401] veth0_macvtap: entered promiscuous mode [ 353.384112][T21401] veth1_macvtap: entered promiscuous mode [ 353.424241][T21401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.434684][T21586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6477'. [ 353.444089][T21401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.455010][T21401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.470237][T21401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.480740][T21401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.490623][T21401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.501177][T21401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.511062][T21401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.521574][T21401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.531504][T21401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.542079][T21401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.551915][T21401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.562416][T21401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.572300][T21401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.582781][T21401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.592640][T21401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.603106][T21401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.617462][T21401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.625898][T21401] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.634656][T21401] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.643465][T21401] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.652312][T21401] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.913068][T21616] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 354.257192][T21630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6490'. [ 354.862668][T21659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6497'. [ 354.879764][T21659] usb usb1: usbfs: process 21659 (syz.4.6497) did not claim interface 0 before use [ 354.903920][T21636] lo speed is unknown, defaulting to 1000 [ 355.006813][T21636] chnl_net:caif_netlink_parms(): no params data found [ 355.035452][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 355.072744][T21666] smc: net device bond0 applied user defined pnetid S [ 355.091146][T21636] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.098346][T21636] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.110597][T21636] bridge_slave_0: entered allmulticast mode [ 355.118118][T21636] bridge_slave_0: entered promiscuous mode [ 355.125177][T21636] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.132438][T21636] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.139793][T21636] bridge_slave_1: entered allmulticast mode [ 355.146631][T21636] bridge_slave_1: entered promiscuous mode [ 355.182536][T21636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.194904][T21636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.246833][T21636] team0: Port device team_slave_0 added [ 355.253861][T21636] team0: Port device team_slave_1 added [ 355.307945][T21636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.315047][T21636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.341076][T21636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.355269][T21692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.362483][T21692] IPv6: NLM_F_CREATE should be set when creating new route [ 355.370720][T21636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.377729][T21636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.403690][T21636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.408484][T21696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6508'. [ 355.429198][T21694] FAULT_INJECTION: forcing a failure. [ 355.429198][T21694] name failslab, interval 1, probability 0, space 0, times 0 [ 355.441846][T21694] CPU: 1 UID: 0 PID: 21694 Comm: syz.0.6507 Not tainted 6.13.0-rc7-syzkaller #0 [ 355.450890][T21694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.460949][T21694] Call Trace: [ 355.464228][T21694] [ 355.467205][T21694] dump_stack_lvl+0xf2/0x150 [ 355.471841][T21694] dump_stack+0x15/0x1a [ 355.476085][T21694] should_fail_ex+0x223/0x230 [ 355.480777][T21694] should_failslab+0x8f/0xb0 [ 355.485449][T21694] kmem_cache_alloc_node_noprof+0x59/0x320 [ 355.491268][T21694] ? __alloc_skb+0x10b/0x310 [ 355.495937][T21694] __alloc_skb+0x10b/0x310 [ 355.500363][T21694] netlink_alloc_large_skb+0xad/0xe0 [ 355.505657][T21694] netlink_sendmsg+0x3b4/0x6e0 [ 355.510436][T21694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.515801][T21694] __sock_sendmsg+0x140/0x180 [ 355.520522][T21694] ____sys_sendmsg+0x312/0x410 [ 355.525343][T21694] __sys_sendmsg+0x19d/0x230 [ 355.529961][T21694] __x64_sys_sendmsg+0x46/0x50 [ 355.534818][T21694] x64_sys_call+0x2734/0x2dc0 [ 355.539509][T21694] do_syscall_64+0xc9/0x1c0 [ 355.544018][T21694] ? clear_bhb_loop+0x55/0xb0 [ 355.548840][T21694] ? clear_bhb_loop+0x55/0xb0 [ 355.553579][T21694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.559512][T21694] RIP: 0033:0x7f01dcda5d29 [ 355.563929][T21694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.583557][T21694] RSP: 002b:00007f01db417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.591977][T21694] RAX: ffffffffffffffda RBX: 00007f01dcf95fa0 RCX: 00007f01dcda5d29 [ 355.599950][T21694] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 355.607951][T21694] RBP: 00007f01db417090 R08: 0000000000000000 R09: 0000000000000000 [ 355.615946][T21694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.623925][T21694] R13: 0000000000000000 R14: 00007f01dcf95fa0 R15: 00007ffd64b40f18 [ 355.631945][T21694] [ 355.640694][T21636] hsr_slave_0: entered promiscuous mode [ 355.661508][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6508'. [ 355.670713][T21636] hsr_slave_1: entered promiscuous mode [ 355.678565][T21636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.686192][T21636] Cannot create hsr debugfs directory [ 355.727982][T21703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6510'. [ 355.738269][T21703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.747485][T21703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.771844][T21636] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.818350][T21636] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.867752][T21636] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.890372][T21709] pim6reg1: entered promiscuous mode [ 355.895862][T21709] pim6reg1: entered allmulticast mode [ 355.948158][T21636] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.984067][T21709] Process accounting resumed [ 356.020080][T21636] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.029018][T21636] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 356.038183][T21636] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 356.046940][T21636] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.098141][T21636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.112950][T21636] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.124043][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.131184][T15227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.143751][T15227] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.150816][T15227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.183740][T21636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.194198][T21636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.271082][T21636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.341070][T21732] loop6: detected capacity change from 0 to 1024 [ 356.360602][T21732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.451932][T21744] EXT4-fs (loop6): shut down requested (0) [ 356.471821][T21636] veth0_vlan: entered promiscuous mode [ 356.484611][T21636] veth1_vlan: entered promiscuous mode [ 356.511949][T21636] veth0_macvtap: entered promiscuous mode [ 356.514605][ T8620] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 356.535676][T21636] veth1_macvtap: entered promiscuous mode [ 356.558271][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.568744][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.578599][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.589120][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.591898][ T8620] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 356.611443][ T8620] EXT4-fs (loop6): This should not happen!! Data will be lost [ 356.611443][ T8620] [ 356.619285][T21636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.621150][ T8620] EXT4-fs (loop6): Total free blocks count 0 [ 356.634616][ T8620] EXT4-fs (loop6): Free/Dirty block details [ 356.640604][ T8620] EXT4-fs (loop6): free_blocks=68451041280 [ 356.646508][ T8620] EXT4-fs (loop6): dirty_blocks=4864 [ 356.651804][ T8620] EXT4-fs (loop6): Block reservation details [ 356.657820][ T8620] EXT4-fs (loop6): i_reserved_data_blocks=304 [ 356.673001][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.683502][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.693536][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.704051][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.713901][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.724361][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.734195][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.744660][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.754634][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.765098][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.774943][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.788872][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.798885][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.809399][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.819244][T21636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.829749][T21636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.841732][T21753] tmpfs: Bad value for 'mpol' [ 356.849370][T21636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.870451][T21755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6521'. [ 356.884326][T21755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6521'. [ 356.903525][T21636] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.912494][T21636] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.921560][T21636] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.930436][T21636] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.010849][T21765] bond0: (slave team0): Releasing backup interface [ 357.031776][T21765] team0 (unregistering): Port device team_slave_0 removed [ 357.063501][T21765] team0 (unregistering): Port device team_slave_1 removed [ 357.083638][T21765] syz_tun: left promiscuous mode [ 357.090515][T21771] FAULT_INJECTION: forcing a failure. [ 357.090515][T21771] name failslab, interval 1, probability 0, space 0, times 0 [ 357.100745][T21765] team0 (unregistering): Port device vlan2 removed [ 357.103314][T21771] CPU: 1 UID: 0 PID: 21771 Comm: syz.3.6526 Not tainted 6.13.0-rc7-syzkaller #0 [ 357.118785][T21771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.128946][T21771] Call Trace: [ 357.132238][T21771] [ 357.135184][T21771] dump_stack_lvl+0xf2/0x150 [ 357.139809][T21771] dump_stack+0x15/0x1a [ 357.143995][T21771] should_fail_ex+0x223/0x230 [ 357.148771][T21771] ? find_css_set+0x577/0xd60 [ 357.153548][T21771] should_failslab+0x8f/0xb0 [ 357.158183][T21771] __kmalloc_cache_noprof+0x4e/0x320 [ 357.163494][T21771] find_css_set+0x577/0xd60 [ 357.168098][T21771] cgroup_migrate_prepare_dst+0x75/0x3e0 [ 357.173803][T21771] cgroup_attach_task+0x1c2/0x460 [ 357.179030][T21771] __cgroup_procs_write+0x1af/0x210 [ 357.184255][T21771] ? __pfx_cgroup_procs_write+0x10/0x10 [ 357.189831][T21771] cgroup_procs_write+0x29/0x50 [ 357.194736][T21771] ? __pfx_cgroup_procs_write+0x10/0x10 [ 357.200310][T21771] cgroup_file_write+0x16f/0x320 [ 357.205318][T21771] ? __check_object_size+0x364/0x520 [ 357.210625][T21771] ? __pfx_cgroup_file_write+0x10/0x10 [ 357.216112][T21771] kernfs_fop_write_iter+0x1c8/0x2c0 [ 357.221436][T21771] vfs_write+0x77f/0x920 [ 357.225746][T21771] ? __schedule+0x6fa/0x930 [ 357.230342][T21771] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 357.236192][T21771] ksys_write+0xe8/0x1b0 [ 357.240501][T21771] __x64_sys_write+0x42/0x50 [ 357.245215][T21771] x64_sys_call+0x287e/0x2dc0 [ 357.249913][T21771] do_syscall_64+0xc9/0x1c0 [ 357.254436][T21771] ? clear_bhb_loop+0x55/0xb0 [ 357.259159][T21771] ? clear_bhb_loop+0x55/0xb0 [ 357.263860][T21771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.269776][T21771] RIP: 0033:0x7f5118235d29 [ 357.274213][T21771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.293907][T21771] RSP: 002b:00007f51168a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.302332][T21771] RAX: ffffffffffffffda RBX: 00007f5118425fa0 RCX: 00007f5118235d29 [ 357.310303][T21771] RDX: 0000000000000012 RSI: 0000000020000c40 RDI: 0000000000000006 [ 357.318283][T21771] RBP: 00007f51168a7090 R08: 0000000000000000 R09: 0000000000000000 [ 357.326313][T21771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.334278][T21771] R13: 0000000000000000 R14: 00007f5118425fa0 R15: 00007fffd2466f78 [ 357.342260][T21771] [ 357.393178][T21776] FAULT_INJECTION: forcing a failure. [ 357.393178][T21776] name failslab, interval 1, probability 0, space 0, times 0 [ 357.405992][T21776] CPU: 0 UID: 0 PID: 21776 Comm: syz.6.6528 Not tainted 6.13.0-rc7-syzkaller #0 [ 357.415056][T21776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.425205][T21776] Call Trace: [ 357.428505][T21776] [ 357.431452][T21776] dump_stack_lvl+0xf2/0x150 [ 357.436133][T21776] dump_stack+0x15/0x1a [ 357.440330][T21776] should_fail_ex+0x223/0x230 [ 357.445045][T21776] should_failslab+0x8f/0xb0 [ 357.449818][T21776] kmem_cache_alloc_noprof+0x52/0x320 [ 357.455283][T21776] ? audit_log_start+0x34c/0x6b0 [ 357.460287][T21776] audit_log_start+0x34c/0x6b0 [ 357.465082][T21776] audit_seccomp+0x4b/0x130 [ 357.469618][T21776] __seccomp_filter+0x6fa/0x1180 [ 357.474703][T21776] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 357.480468][T21776] ? vfs_write+0x596/0x920 [ 357.484915][T21776] ? __schedule+0x6fa/0x930 [ 357.489488][T21776] __secure_computing+0x9f/0x1c0 [ 357.494518][T21776] syscall_trace_enter+0xd1/0x1f0 [ 357.499590][T21776] do_syscall_64+0xaa/0x1c0 [ 357.504185][T21776] ? clear_bhb_loop+0x55/0xb0 [ 357.508925][T21776] ? clear_bhb_loop+0x55/0xb0 [ 357.513629][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.519622][T21776] RIP: 0033:0x7f589b275d29 [ 357.524056][T21776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.541378][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 357.543716][T21776] RSP: 002b:00007f58998e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.543744][T21776] RAX: ffffffffffffffda RBX: 00007f589b465fa0 RCX: 00007f589b275d29 [ 357.566348][T21776] RDX: 0000000000000094 RSI: 0000000020000b00 RDI: 0000000000000005 [ 357.574328][T21776] RBP: 00007f58998e7090 R08: 0000000000000000 R09: 0000000000000000 [ 357.582298][T21776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.590324][T21776] R13: 0000000000000000 R14: 00007f589b465fa0 R15: 00007ffc0930da88 [ 357.598314][T21776] [ 357.675166][T21789] vlan2: entered promiscuous mode [ 357.709261][T21796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6536'. [ 357.722637][T21796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6536'. [ 357.778553][T21800] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 357.846595][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 357.846609][ T29] audit: type=1326 audit(2000000019.100:23037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.3.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5118235d29 code=0x7fc00000 [ 357.879379][ T29] audit: type=1326 audit(2000000019.140:23038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.3.6537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5118235d29 code=0x0 [ 357.903080][T21802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21802 comm=syz.4.6535 [ 357.915725][T21802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21802 comm=syz.4.6535 [ 357.929023][ T29] audit: type=1326 audit(2000000019.190:23039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm="syz.6.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7fc00000 [ 357.953408][T21810] FAULT_INJECTION: forcing a failure. [ 357.953408][T21810] name failslab, interval 1, probability 0, space 0, times 0 [ 357.966228][T21810] CPU: 0 UID: 0 PID: 21810 Comm: syz.6.6539 Not tainted 6.13.0-rc7-syzkaller #0 [ 357.975277][T21810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.985356][T21810] Call Trace: [ 357.988640][T21810] [ 357.991575][T21810] dump_stack_lvl+0xf2/0x150 [ 357.996221][T21810] dump_stack+0x15/0x1a [ 358.000443][T21810] should_fail_ex+0x223/0x230 [ 358.005194][T21810] should_failslab+0x8f/0xb0 [ 358.009819][T21810] kmem_cache_alloc_noprof+0x52/0x320 [ 358.015204][T21810] ? getname_flags+0x81/0x3b0 [ 358.019896][T21810] ? vfs_write+0x596/0x920 [ 358.024332][T21810] getname_flags+0x81/0x3b0 [ 358.028851][T21810] user_path_at+0x26/0x120 [ 358.033326][T21810] __se_sys_utime+0xc6/0x1c0 [ 358.037945][T21810] __x64_sys_utime+0x31/0x40 [ 358.042559][T21810] x64_sys_call+0x2996/0x2dc0 [ 358.047246][T21810] do_syscall_64+0xc9/0x1c0 [ 358.051782][T21810] ? clear_bhb_loop+0x55/0xb0 [ 358.056476][T21810] ? clear_bhb_loop+0x55/0xb0 [ 358.061167][T21810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.067192][T21810] RIP: 0033:0x7f589b275d29 [ 358.071717][T21810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.091468][T21810] RSP: 002b:00007f58998c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 358.099897][T21810] RAX: ffffffffffffffda RBX: 00007f589b466080 RCX: 00007f589b275d29 [ 358.107952][T21810] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000000 [ 358.116015][T21810] RBP: 00007f58998c6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.124271][T21810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.132320][T21810] R13: 0000000000000000 R14: 00007f589b466080 R15: 00007ffc0930da88 [ 358.140344][T21810] [ 358.152677][ T29] audit: type=1326 audit(2000000019.400:23040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm="syz.6.6539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f589b275d29 code=0x0 [ 358.175728][ T29] audit: type=1326 audit(2000000019.400:23041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21806 comm="syz.0.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7fc00000 [ 358.326244][T21821] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6542'. [ 358.516000][ T29] audit: type=1326 audit(2000000019.770:23042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21828 comm="syz.4.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 358.539804][ T29] audit: type=1326 audit(2000000019.770:23043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21828 comm="syz.4.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 358.563666][ T29] audit: type=1326 audit(2000000019.770:23044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21828 comm="syz.4.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 358.587339][ T29] audit: type=1326 audit(2000000019.770:23045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21828 comm="syz.4.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 358.619419][ T29] audit: type=1326 audit(2000000019.770:23046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21828 comm="syz.4.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 358.630131][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 358.666352][T21834] FAULT_INJECTION: forcing a failure. [ 358.666352][T21834] name failslab, interval 1, probability 0, space 0, times 0 [ 358.679151][T21834] CPU: 0 UID: 0 PID: 21834 Comm: syz.4.6547 Not tainted 6.13.0-rc7-syzkaller #0 [ 358.688201][T21834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.698268][T21834] Call Trace: [ 358.701583][T21834] [ 358.704601][T21834] dump_stack_lvl+0xf2/0x150 [ 358.709299][T21834] dump_stack+0x15/0x1a [ 358.713478][T21834] should_fail_ex+0x223/0x230 [ 358.718217][T21834] ? alloc_fs_context+0x44/0x4e0 [ 358.723176][T21834] should_failslab+0x8f/0xb0 [ 358.727870][T21834] __kmalloc_cache_noprof+0x4e/0x320 [ 358.733255][T21834] alloc_fs_context+0x44/0x4e0 [ 358.738039][T21834] ? strncmp+0x34/0x70 [ 358.742125][T21834] fs_context_for_mount+0x21/0x30 [ 358.747224][T21834] do_new_mount+0xf3/0x690 [ 358.751688][T21834] path_mount+0x49b/0xb30 [ 358.756045][T21834] __se_sys_mount+0x27c/0x2d0 [ 358.760752][T21834] __x64_sys_mount+0x67/0x80 [ 358.765422][T21834] x64_sys_call+0x2c84/0x2dc0 [ 358.770169][T21834] do_syscall_64+0xc9/0x1c0 [ 358.774848][T21834] ? clear_bhb_loop+0x55/0xb0 [ 358.779541][T21834] ? clear_bhb_loop+0x55/0xb0 [ 358.784307][T21834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.790214][T21834] RIP: 0033:0x7f2c583c5d29 [ 358.794695][T21834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.814314][T21834] RSP: 002b:00007f2c56a37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.822765][T21834] RAX: ffffffffffffffda RBX: 00007f2c585b5fa0 RCX: 00007f2c583c5d29 [ 358.830809][T21834] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 358.839016][T21834] RBP: 00007f2c56a37090 R08: 0000000020000680 R09: 0000000000000000 [ 358.846995][T21834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.855029][T21834] R13: 0000000000000000 R14: 00007f2c585b5fa0 R15: 00007ffdaf7429b8 [ 358.863030][T21834] [ 358.912326][T21836] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 358.965486][T21846] netlink: 'syz.6.6548': attribute type 4 has an invalid length. [ 359.038535][T21853] loop6: detected capacity change from 0 to 1024 [ 359.048772][T21842] lo speed is unknown, defaulting to 1000 [ 359.084568][T21844] netlink: 'syz.0.6551': attribute type 27 has an invalid length. [ 359.099288][T21853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.162591][T21844] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.169794][T21844] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.245616][T21844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.284072][T21871] EXT4-fs (loop6): shut down requested (0) [ 359.331527][T21844] geneve0: left allmulticast mode [ 359.350097][T21844] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.359227][T21844] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.368302][T21844] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.377348][T21844] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.391714][T15227] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 359.409836][T15227] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 359.422353][T15227] EXT4-fs (loop6): This should not happen!! Data will be lost [ 359.422353][T15227] [ 359.432194][T15227] EXT4-fs (loop6): Total free blocks count 0 [ 359.438423][T15227] EXT4-fs (loop6): Free/Dirty block details [ 359.444470][T15227] EXT4-fs (loop6): free_blocks=68451041280 [ 359.450326][T15227] EXT4-fs (loop6): dirty_blocks=7696 [ 359.455652][T15227] EXT4-fs (loop6): Block reservation details [ 359.461650][T15227] EXT4-fs (loop6): i_reserved_data_blocks=481 [ 359.470625][T21844] vlan2: left promiscuous mode [ 359.692257][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 359.801717][T21886] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 359.867373][T21898] FAULT_INJECTION: forcing a failure. [ 359.867373][T21898] name failslab, interval 1, probability 0, space 0, times 0 [ 359.880139][T21898] CPU: 1 UID: 0 PID: 21898 Comm: syz.4.6568 Not tainted 6.13.0-rc7-syzkaller #0 [ 359.889189][T21898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.899265][T21898] Call Trace: [ 359.902641][T21898] [ 359.905595][T21898] dump_stack_lvl+0xf2/0x150 [ 359.910234][T21898] dump_stack+0x15/0x1a [ 359.914469][T21898] should_fail_ex+0x223/0x230 [ 359.919238][T21898] should_failslab+0x8f/0xb0 [ 359.923880][T21898] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 359.930260][T21898] ? sidtab_sid2str_get+0xb8/0x140 [ 359.935520][T21898] kmemdup_noprof+0x2a/0x60 [ 359.940081][T21898] sidtab_sid2str_get+0xb8/0x140 [ 359.945153][T21898] security_sid_to_context_core+0x1eb/0x2f0 [ 359.951144][T21898] security_sid_to_context+0x27/0x30 [ 359.956468][T21898] selinux_lsmprop_to_secctx+0x2c/0x40 [ 359.961964][T21898] security_lsmprop_to_secctx+0x4a/0x90 [ 359.967548][T21898] audit_log_task_context+0x93/0x1c0 [ 359.972869][T21898] audit_log_task+0xf9/0x1c0 [ 359.977533][T21898] audit_seccomp+0x68/0x130 [ 359.982214][T21898] __seccomp_filter+0x6fa/0x1180 [ 359.987292][T21898] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 359.992970][T21898] ? vfs_write+0x596/0x920 [ 359.997494][T21898] ? putname+0xcf/0xf0 [ 360.001649][T21898] __secure_computing+0x9f/0x1c0 [ 360.006713][T21898] syscall_trace_enter+0xd1/0x1f0 [ 360.011776][T21898] ? fpregs_assert_state_consistent+0x83/0xa0 [ 360.017897][T21898] do_syscall_64+0xaa/0x1c0 [ 360.022502][T21898] ? clear_bhb_loop+0x55/0xb0 [ 360.027245][T21898] ? clear_bhb_loop+0x55/0xb0 [ 360.031957][T21898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.037892][T21898] RIP: 0033:0x7f2c583c5d29 [ 360.042343][T21898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.061970][T21898] RSP: 002b:00007f2c56a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 360.070403][T21898] RAX: ffffffffffffffda RBX: 00007f2c585b5fa0 RCX: 00007f2c583c5d29 [ 360.078395][T21898] RDX: 0000000000000004 RSI: 0000000000000006 RDI: 0000000000000000 [ 360.086475][T21898] RBP: 00007f2c56a37090 R08: 0000000000000000 R09: 0000000000000000 [ 360.094510][T21898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.102551][T21898] R13: 0000000000000000 R14: 00007f2c585b5fa0 R15: 00007ffdaf7429b8 [ 360.110558][T21898] [ 360.150084][T21902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21902 comm=syz.5.6569 [ 360.191652][T21902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=21902 comm=syz.5.6569 [ 360.296070][T21894] loop6: detected capacity change from 0 to 32768 [ 360.364880][T21914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6573'. [ 360.381556][T21894] loop6: p1 p3 < p5 p6 > p4 [ 360.395426][T21894] loop6: p4 size 83886080 extends beyond EOD, truncated [ 360.451166][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6573'. [ 360.919068][T21931] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 360.955678][T21935] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 360.973182][T21935] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 361.030974][T21941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6581'. [ 361.050720][T21943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6582'. [ 361.067466][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6581'. [ 361.081717][T21943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6582'. [ 361.347943][T21962] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6586'. [ 362.037504][T22000] geneve0: entered allmulticast mode [ 362.135703][T22005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.143030][T22005] IPv6: NLM_F_CREATE should be set when creating new route [ 362.602591][T22019] FAULT_INJECTION: forcing a failure. [ 362.602591][T22019] name failslab, interval 1, probability 0, space 0, times 0 [ 362.615374][T22019] CPU: 0 UID: 0 PID: 22019 Comm: syz.6.6609 Not tainted 6.13.0-rc7-syzkaller #0 [ 362.624452][T22019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.634536][T22019] Call Trace: [ 362.637833][T22019] [ 362.640804][T22019] dump_stack_lvl+0xf2/0x150 [ 362.645455][T22019] dump_stack+0x15/0x1a [ 362.649655][T22019] should_fail_ex+0x223/0x230 [ 362.654369][T22019] should_failslab+0x8f/0xb0 [ 362.659010][T22019] kmem_cache_alloc_node_noprof+0x59/0x320 [ 362.664930][T22019] ? __alloc_skb+0x10b/0x310 [ 362.669628][T22019] __alloc_skb+0x10b/0x310 [ 362.674086][T22019] netlink_alloc_large_skb+0xad/0xe0 [ 362.679419][T22019] netlink_sendmsg+0x3b4/0x6e0 [ 362.684242][T22019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.689573][T22019] __sock_sendmsg+0x140/0x180 [ 362.694295][T22019] ____sys_sendmsg+0x312/0x410 [ 362.699108][T22019] __sys_sendmsg+0x19d/0x230 [ 362.703769][T22019] __x64_sys_sendmsg+0x46/0x50 [ 362.708577][T22019] x64_sys_call+0x2734/0x2dc0 [ 362.713351][T22019] do_syscall_64+0xc9/0x1c0 [ 362.717942][T22019] ? clear_bhb_loop+0x55/0xb0 [ 362.722648][T22019] ? clear_bhb_loop+0x55/0xb0 [ 362.727357][T22019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.733334][T22019] RIP: 0033:0x7f589b275d29 [ 362.737824][T22019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.757506][T22019] RSP: 002b:00007f58998e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.765974][T22019] RAX: ffffffffffffffda RBX: 00007f589b465fa0 RCX: 00007f589b275d29 [ 362.773982][T22019] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 362.781988][T22019] RBP: 00007f58998e7090 R08: 0000000000000000 R09: 0000000000000000 [ 362.790062][T22019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.798065][T22019] R13: 0000000000000000 R14: 00007f589b465fa0 R15: 00007ffc0930da88 [ 362.806093][T22019] [ 362.914464][T22028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.939121][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 362.939138][ T29] audit: type=1326 audit(2000000024.190:23311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22016 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 362.939179][T22028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.945382][ T29] audit: type=1326 audit(2000000024.190:23312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22016 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 363.067070][ T29] audit: type=1326 audit(2000000024.320:23313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz.5.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc98185d29 code=0x7ffc0000 [ 363.090841][ T29] audit: type=1326 audit(2000000024.320:23314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz.5.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc98185d29 code=0x7ffc0000 [ 363.127616][ T29] audit: type=1326 audit(2000000024.370:23315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz.5.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc98185d29 code=0x7ffc0000 [ 363.151456][ T29] audit: type=1326 audit(2000000024.370:23316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz.5.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc98185d29 code=0x7ffc0000 [ 363.175248][ T29] audit: type=1326 audit(2000000024.370:23317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz.5.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc98185d29 code=0x7ffc0000 [ 363.199025][ T29] audit: type=1326 audit(2000000024.370:23318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz.5.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc98185d29 code=0x7ffc0000 [ 363.222641][ T29] audit: type=1326 audit(2000000024.380:23319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz.5.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc98185d29 code=0x7ffc0000 [ 363.246327][ T29] audit: type=1326 audit(2000000024.380:23320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz.5.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc98185d29 code=0x7ffc0000 [ 363.283606][T22044] vlan4: entered promiscuous mode [ 363.322222][T22050] geneve0: entered allmulticast mode [ 363.372487][T22039] loop6: detected capacity change from 0 to 32768 [ 363.390087][T22054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.397318][T22054] IPv6: NLM_F_CREATE should be set when creating new route [ 363.427099][T22039] loop6: p1 p3 < p5 p6 > p4 [ 363.432590][T22039] loop6: p4 size 83886080 extends beyond EOD, truncated [ 363.643231][T22074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6631'. [ 363.751826][T22086] FAULT_INJECTION: forcing a failure. [ 363.751826][T22086] name failslab, interval 1, probability 0, space 0, times 0 [ 363.764601][T22086] CPU: 1 UID: 0 PID: 22086 Comm: syz.5.6637 Not tainted 6.13.0-rc7-syzkaller #0 [ 363.773700][T22086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.783911][T22086] Call Trace: [ 363.787199][T22086] [ 363.790138][T22086] dump_stack_lvl+0xf2/0x150 [ 363.794813][T22086] dump_stack+0x15/0x1a [ 363.799054][T22086] should_fail_ex+0x223/0x230 [ 363.803750][T22086] should_failslab+0x8f/0xb0 [ 363.808372][T22086] kmem_cache_alloc_noprof+0x52/0x320 [ 363.813842][T22086] ? skb_clone+0x154/0x1f0 [ 363.818278][T22086] skb_clone+0x154/0x1f0 [ 363.822536][T22086] __netlink_deliver_tap+0x2bd/0x4f0 [ 363.827849][T22086] netlink_unicast+0x64a/0x670 [ 363.832695][T22086] netlink_sendmsg+0x5cc/0x6e0 [ 363.837485][T22086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.842836][T22086] __sock_sendmsg+0x140/0x180 [ 363.847556][T22086] sock_write_iter+0x15e/0x1a0 [ 363.852443][T22086] do_iter_readv_writev+0x394/0x450 [ 363.857671][T22086] vfs_writev+0x2d4/0x880 [ 363.862025][T22086] ? proc_fail_nth_write+0x12a/0x150 [ 363.867345][T22086] do_writev+0xf4/0x220 [ 363.871519][T22086] __x64_sys_writev+0x45/0x50 [ 363.876223][T22086] x64_sys_call+0x1fab/0x2dc0 [ 363.880910][T22086] do_syscall_64+0xc9/0x1c0 [ 363.885485][T22086] ? clear_bhb_loop+0x55/0xb0 [ 363.890175][T22086] ? clear_bhb_loop+0x55/0xb0 [ 363.895016][T22086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.900922][T22086] RIP: 0033:0x7efc98185d29 [ 363.905443][T22086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.925067][T22086] RSP: 002b:00007efc967f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 363.933515][T22086] RAX: ffffffffffffffda RBX: 00007efc98375fa0 RCX: 00007efc98185d29 [ 363.941526][T22086] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000004 [ 363.949503][T22086] RBP: 00007efc967f1090 R08: 0000000000000000 R09: 0000000000000000 [ 363.957590][T22086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.965568][T22086] R13: 0000000000000000 R14: 00007efc98375fa0 R15: 00007ffcf889a138 [ 363.973556][T22086] [ 364.054805][T22097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.062072][T22097] IPv6: NLM_F_CREATE should be set when creating new route [ 364.234310][T22114] FAULT_INJECTION: forcing a failure. [ 364.234310][T22114] name failslab, interval 1, probability 0, space 0, times 0 [ 364.246993][T22114] CPU: 1 UID: 0 PID: 22114 Comm: syz.4.6649 Not tainted 6.13.0-rc7-syzkaller #0 [ 364.256106][T22114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 364.266232][T22114] Call Trace: [ 364.269527][T22114] [ 364.272472][T22114] dump_stack_lvl+0xf2/0x150 [ 364.277110][T22114] dump_stack+0x15/0x1a [ 364.281346][T22114] should_fail_ex+0x223/0x230 [ 364.286054][T22114] should_failslab+0x8f/0xb0 [ 364.290691][T22114] kmem_cache_alloc_node_noprof+0x59/0x320 [ 364.296585][T22114] ? __alloc_skb+0x10b/0x310 [ 364.301196][T22114] ? avc_has_perm+0xd4/0x160 [ 364.305969][T22114] __alloc_skb+0x10b/0x310 [ 364.310450][T22114] pfkey_sendmsg+0x10d/0x970 [ 364.315146][T22114] ? avc_has_perm+0xd4/0x160 [ 364.319846][T22114] ? selinux_socket_sendmsg+0x185/0x1c0 [ 364.325463][T22114] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 364.330606][T22114] __sock_sendmsg+0x140/0x180 [ 364.335401][T22114] ____sys_sendmsg+0x312/0x410 [ 364.340214][T22114] __sys_sendmsg+0x19d/0x230 [ 364.344852][T22114] __x64_sys_sendmsg+0x46/0x50 [ 364.349647][T22114] x64_sys_call+0x2734/0x2dc0 [ 364.354355][T22114] do_syscall_64+0xc9/0x1c0 [ 364.358940][T22114] ? clear_bhb_loop+0x55/0xb0 [ 364.363706][T22114] ? clear_bhb_loop+0x55/0xb0 [ 364.368497][T22114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.374401][T22114] RIP: 0033:0x7f2c583c5d29 [ 364.378878][T22114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.398536][T22114] RSP: 002b:00007f2c56a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.406973][T22114] RAX: ffffffffffffffda RBX: 00007f2c585b5fa0 RCX: 00007f2c583c5d29 [ 364.415013][T22114] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 364.423019][T22114] RBP: 00007f2c56a37090 R08: 0000000000000000 R09: 0000000000000000 [ 364.430999][T22114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.438981][T22114] R13: 0000000000000000 R14: 00007f2c585b5fa0 R15: 00007ffdaf7429b8 [ 364.446970][T22114] [ 364.451531][T22115] geneve0: entered allmulticast mode [ 364.466615][T22090] geneve0: entered allmulticast mode [ 364.531453][T22121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6651'. [ 364.641111][T22126] loop6: detected capacity change from 0 to 512 [ 364.641266][T22128] netlink: 'syz.3.6654': attribute type 27 has an invalid length. [ 364.649004][T22126] ext4: Unknown parameter 'euid' [ 364.704417][T22128] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.711656][T22128] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.730681][T22132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6656'. [ 364.822985][T22128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.852291][T22128] geneve0: left allmulticast mode [ 364.859411][T22128] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.868391][T22128] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.877436][T22128] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.886612][T22128] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.388955][T22180] FAULT_INJECTION: forcing a failure. [ 365.388955][T22180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.402102][T22180] CPU: 1 UID: 0 PID: 22180 Comm: syz.4.6672 Not tainted 6.13.0-rc7-syzkaller #0 [ 365.411171][T22180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 365.421360][T22180] Call Trace: [ 365.424654][T22180] [ 365.427611][T22180] dump_stack_lvl+0xf2/0x150 [ 365.432242][T22180] dump_stack+0x15/0x1a [ 365.436441][T22180] should_fail_ex+0x223/0x230 [ 365.441159][T22180] should_fail+0xb/0x10 [ 365.445352][T22180] should_fail_usercopy+0x1a/0x20 [ 365.450399][T22180] _copy_from_user+0x1e/0xb0 [ 365.455191][T22180] memdup_user+0x64/0xc0 [ 365.459513][T22180] proc_pid_attr_write+0x15d/0x220 [ 365.464755][T22180] vfs_writev+0x3fb/0x880 [ 365.469155][T22180] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 365.474836][T22180] ? mutex_lock+0xd/0x40 [ 365.479129][T22180] do_writev+0xf4/0x220 [ 365.483397][T22180] __x64_sys_writev+0x45/0x50 [ 365.488159][T22180] x64_sys_call+0x1fab/0x2dc0 [ 365.492870][T22180] do_syscall_64+0xc9/0x1c0 [ 365.497417][T22180] ? clear_bhb_loop+0x55/0xb0 [ 365.502139][T22180] ? clear_bhb_loop+0x55/0xb0 [ 365.506910][T22180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.512826][T22180] RIP: 0033:0x7f2c583c5d29 [ 365.517246][T22180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.536920][T22180] RSP: 002b:00007f2c56a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 365.545431][T22180] RAX: ffffffffffffffda RBX: 00007f2c585b5fa0 RCX: 00007f2c583c5d29 [ 365.553550][T22180] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000004 [ 365.561563][T22180] RBP: 00007f2c56a37090 R08: 0000000000000000 R09: 0000000000000000 [ 365.569665][T22180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.577647][T22180] R13: 0000000000000000 R14: 00007f2c585b5fa0 R15: 00007ffdaf7429b8 [ 365.585716][T22180] [ 365.606949][T22183] vlan2: entered promiscuous mode [ 365.628908][T22191] bridge0: port 1(veth1_to_batadv) entered blocking state [ 365.636250][T22191] bridge0: port 1(veth1_to_batadv) entered disabled state [ 365.646679][T22191] veth1_to_batadv: entered allmulticast mode [ 365.654190][T22191] veth1_to_batadv: entered promiscuous mode [ 365.662972][T22191] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 365.697528][T22199] netlink: 'syz.0.6680': attribute type 10 has an invalid length. [ 365.796250][T22213] __nla_validate_parse: 1 callbacks suppressed [ 365.796269][T22213] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6682'. [ 365.833396][T22213] usb usb1: usbfs: process 22213 (syz.5.6682) did not claim interface 0 before use [ 366.029692][T22233] netlink: 'syz.6.6695': attribute type 10 has an invalid length. [ 366.040406][T22233] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.048794][T22233] bond0: (slave team0): Enslaving as an active interface with an up link [ 366.084538][T22235] loop6: detected capacity change from 0 to 1024 [ 366.109608][T22235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.205674][T22245] EXT4-fs (loop6): shut down requested (0) [ 366.253832][ T8627] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 366.283469][ T8627] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 366.296139][ T8627] EXT4-fs (loop6): This should not happen!! Data will be lost [ 366.296139][ T8627] [ 366.305795][ T8627] EXT4-fs (loop6): Total free blocks count 0 [ 366.311823][ T8627] EXT4-fs (loop6): Free/Dirty block details [ 366.317770][ T8627] EXT4-fs (loop6): free_blocks=68451041280 [ 366.323661][ T8627] EXT4-fs (loop6): dirty_blocks=5152 [ 366.329050][ T8627] EXT4-fs (loop6): Block reservation details [ 366.335096][ T8627] EXT4-fs (loop6): i_reserved_data_blocks=322 [ 366.370744][T22252] vlan3: entered promiscuous mode [ 366.657752][T22269] Cannot find del_set index 0 as target [ 366.681251][T22271] netlink: 'syz.4.6708': attribute type 10 has an invalid length. [ 366.752408][T22280] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6711'. [ 366.940026][T22295] loop6: detected capacity change from 0 to 1024 [ 366.962458][T22295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.071813][T22308] EXT4-fs (loop6): shut down requested (0) [ 367.088447][T22309] netlink: 'syz.0.6722': attribute type 10 has an invalid length. [ 367.129781][ T164] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 367.147637][T22314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6723'. [ 367.147705][ T164] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 367.169128][ T164] EXT4-fs (loop6): This should not happen!! Data will be lost [ 367.169128][ T164] [ 367.178856][ T164] EXT4-fs (loop6): Total free blocks count 0 [ 367.184987][ T164] EXT4-fs (loop6): Free/Dirty block details [ 367.191043][ T164] EXT4-fs (loop6): free_blocks=68451041280 [ 367.196909][ T164] EXT4-fs (loop6): dirty_blocks=5648 [ 367.202344][ T164] EXT4-fs (loop6): Block reservation details [ 367.208341][ T164] EXT4-fs (loop6): i_reserved_data_blocks=353 [ 367.460206][T22342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.510344][T22350] FAULT_INJECTION: forcing a failure. [ 367.510344][T22350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.523546][T22350] CPU: 0 UID: 0 PID: 22350 Comm: syz.3.6738 Not tainted 6.13.0-rc7-syzkaller #0 [ 367.532675][T22350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.542785][T22350] Call Trace: [ 367.546112][T22350] [ 367.549051][T22350] dump_stack_lvl+0xf2/0x150 [ 367.553716][T22350] dump_stack+0x15/0x1a [ 367.557934][T22350] should_fail_ex+0x223/0x230 [ 367.562630][T22350] should_fail+0xb/0x10 [ 367.566935][T22350] should_fail_usercopy+0x1a/0x20 [ 367.572044][T22350] _copy_from_user+0x1e/0xb0 [ 367.576656][T22350] move_addr_to_kernel+0x82/0x120 [ 367.581710][T22350] __sys_connect+0x67/0x1b0 [ 367.586242][T22350] __x64_sys_connect+0x41/0x50 [ 367.591024][T22350] x64_sys_call+0x22a7/0x2dc0 [ 367.595756][T22350] do_syscall_64+0xc9/0x1c0 [ 367.600274][T22350] ? clear_bhb_loop+0x55/0xb0 [ 367.605065][T22350] ? clear_bhb_loop+0x55/0xb0 [ 367.609791][T22350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.615763][T22350] RIP: 0033:0x7f5118235d29 [ 367.620269][T22350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.639886][T22350] RSP: 002b:00007f51168a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 367.648437][T22350] RAX: ffffffffffffffda RBX: 00007f5118425fa0 RCX: 00007f5118235d29 [ 367.656433][T22350] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 367.664496][T22350] RBP: 00007f51168a7090 R08: 0000000000000000 R09: 0000000000000000 [ 367.672584][T22350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.680707][T22350] R13: 0000000000000000 R14: 00007f5118425fa0 R15: 00007fffd2466f78 [ 367.688698][T22350] [ 367.707652][T22351] 9pnet_fd: Insufficient options for proto=fd [ 367.840578][T22365] vlan2: entered promiscuous mode [ 367.894076][T22367] netlink: 'syz.6.6745': attribute type 10 has an invalid length. [ 367.933484][T22370] vlan2: entered promiscuous mode [ 367.963999][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 367.964025][ T29] audit: type=1326 audit(2000000029.210:23911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 367.993960][ T29] audit: type=1326 audit(2000000029.210:23912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.017837][ T29] audit: type=1326 audit(2000000029.210:23913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.020258][T22376] syz.6.6748[22376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.041599][ T29] audit: type=1326 audit(2000000029.210:23914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.076633][ T29] audit: type=1326 audit(2000000029.210:23915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.100288][ T29] audit: type=1326 audit(2000000029.210:23916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.124085][ T29] audit: type=1326 audit(2000000029.210:23917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.147645][ T29] audit: type=1326 audit(2000000029.210:23918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.171293][ T29] audit: type=1326 audit(2000000029.210:23919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.194883][ T29] audit: type=1326 audit(2000000029.210:23920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22361 comm="syz.4.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c583c5d29 code=0x7ffc0000 [ 368.235420][T22376] syz.6.6748[22376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.235494][T22376] syz.6.6748[22376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.375440][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6751'. [ 368.596547][T22407] vlan2: entered promiscuous mode [ 368.624353][T22405] lo speed is unknown, defaulting to 1000 [ 369.172684][T22418] FAULT_INJECTION: forcing a failure. [ 369.172684][T22418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.185891][T22418] CPU: 1 UID: 0 PID: 22418 Comm: syz.5.6762 Not tainted 6.13.0-rc7-syzkaller #0 [ 369.194938][T22418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.205067][T22418] Call Trace: [ 369.208410][T22418] [ 369.211365][T22418] dump_stack_lvl+0xf2/0x150 [ 369.216012][T22418] dump_stack+0x15/0x1a [ 369.220202][T22418] should_fail_ex+0x223/0x230 [ 369.224917][T22418] should_fail+0xb/0x10 [ 369.229094][T22418] should_fail_usercopy+0x1a/0x20 [ 369.234175][T22418] _copy_to_user+0x20/0xa0 [ 369.238632][T22418] simple_read_from_buffer+0xa0/0x110 [ 369.244104][T22418] proc_fail_nth_read+0xf9/0x140 [ 369.249133][T22418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.254705][T22418] vfs_read+0x1a2/0x700 [ 369.258893][T22418] ? __rcu_read_unlock+0x4e/0x70 [ 369.263940][T22418] ? __fget_files+0x17c/0x1c0 [ 369.268822][T22418] ksys_read+0xe8/0x1b0 [ 369.273114][T22418] __x64_sys_read+0x42/0x50 [ 369.277654][T22418] x64_sys_call+0x2874/0x2dc0 [ 369.282425][T22418] do_syscall_64+0xc9/0x1c0 [ 369.286954][T22418] ? clear_bhb_loop+0x55/0xb0 [ 369.291670][T22418] ? clear_bhb_loop+0x55/0xb0 [ 369.296744][T22418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.302655][T22418] RIP: 0033:0x7efc9818473c [ 369.307098][T22418] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 369.326725][T22418] RSP: 002b:00007efc967f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 369.335161][T22418] RAX: ffffffffffffffda RBX: 00007efc98375fa0 RCX: 00007efc9818473c [ 369.343154][T22418] RDX: 000000000000000f RSI: 00007efc967f10a0 RDI: 0000000000000004 [ 369.351190][T22418] RBP: 00007efc967f1090 R08: 0000000000000000 R09: 0000000000000000 [ 369.359180][T22418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.367173][T22418] R13: 0000000000000000 R14: 00007efc98375fa0 R15: 00007ffcf889a138 [ 369.375178][T22418] [ 369.402585][T22420] loop6: detected capacity change from 0 to 1024 [ 369.444636][T22420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.572628][T22422] netlink: 'syz.0.6763': attribute type 10 has an invalid length. [ 369.667700][T22442] EXT4-fs (loop6): shut down requested (0) [ 369.723704][ T164] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 369.753923][ T164] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 369.766584][ T164] EXT4-fs (loop6): This should not happen!! Data will be lost [ 369.766584][ T164] [ 369.776245][ T164] EXT4-fs (loop6): Total free blocks count 0 [ 369.782303][ T164] EXT4-fs (loop6): Free/Dirty block details [ 369.788278][ T164] EXT4-fs (loop6): free_blocks=68451041280 [ 369.794144][ T164] EXT4-fs (loop6): dirty_blocks=2560 [ 369.799594][ T164] EXT4-fs (loop6): Block reservation details [ 369.805689][ T164] EXT4-fs (loop6): i_reserved_data_blocks=160 [ 369.836796][T22445] lo speed is unknown, defaulting to 1000 [ 370.420904][T22463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6775'. [ 370.454679][T22463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6775'. [ 370.525981][T22467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6777'. [ 370.931478][T22478] loop6: detected capacity change from 0 to 512 [ 370.990973][T22478] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 371.029478][T22478] EXT4-fs (loop6): mount failed [ 371.170759][T22494] FAULT_INJECTION: forcing a failure. [ 371.170759][T22494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.184001][T22494] CPU: 0 UID: 0 PID: 22494 Comm: syz.5.6786 Not tainted 6.13.0-rc7-syzkaller #0 [ 371.193114][T22494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.203253][T22494] Call Trace: [ 371.206598][T22494] [ 371.209535][T22494] dump_stack_lvl+0xf2/0x150 [ 371.214153][T22494] dump_stack+0x15/0x1a [ 371.218333][T22494] should_fail_ex+0x223/0x230 [ 371.223101][T22494] should_fail+0xb/0x10 [ 371.227267][T22494] should_fail_usercopy+0x1a/0x20 [ 371.232352][T22494] _copy_from_iter+0xd5/0xd00 [ 371.237107][T22494] ? kmalloc_reserve+0x16e/0x190 [ 371.242055][T22494] ? __build_skb_around+0x196/0x1f0 [ 371.247325][T22494] ? __alloc_skb+0x21f/0x310 [ 371.251986][T22494] ? __virt_addr_valid+0x1ed/0x250 [ 371.257162][T22494] ? __check_object_size+0x364/0x520 [ 371.262465][T22494] netlink_sendmsg+0x460/0x6e0 [ 371.267378][T22494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.272677][T22494] __sock_sendmsg+0x140/0x180 [ 371.277451][T22494] ____sys_sendmsg+0x312/0x410 [ 371.282301][T22494] __sys_sendmsg+0x19d/0x230 [ 371.286924][T22494] __x64_sys_sendmsg+0x46/0x50 [ 371.291776][T22494] x64_sys_call+0x2734/0x2dc0 [ 371.296590][T22494] do_syscall_64+0xc9/0x1c0 [ 371.301106][T22494] ? clear_bhb_loop+0x55/0xb0 [ 371.305850][T22494] ? clear_bhb_loop+0x55/0xb0 [ 371.310539][T22494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.316444][T22494] RIP: 0033:0x7efc98185d29 [ 371.321042][T22494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.340764][T22494] RSP: 002b:00007efc967f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.349188][T22494] RAX: ffffffffffffffda RBX: 00007efc98375fa0 RCX: 00007efc98185d29 [ 371.357165][T22494] RDX: 0000000000000004 RSI: 0000000020000000 RDI: 0000000000000003 [ 371.365177][T22494] RBP: 00007efc967f1090 R08: 0000000000000000 R09: 0000000000000000 [ 371.373155][T22494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.381173][T22494] R13: 0000000000000000 R14: 00007efc98375fa0 R15: 00007ffcf889a138 [ 371.389166][T22494] [ 371.414665][T22497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6788'. [ 371.431597][T22499] vlan3: entered promiscuous mode [ 371.443745][T22501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6790'. [ 371.456841][T22501] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6790'. [ 371.516839][T22509] netlink: 'syz.4.6794': attribute type 10 has an invalid length. [ 371.943065][T22531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6803'. [ 372.011814][T22539] vlan2: entered promiscuous mode [ 372.017325][T22541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6807'. [ 372.032165][T22541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6807'. [ 372.049256][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6809'. [ 372.249221][T22562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6816'. [ 372.447246][T22574] vlan4: entered promiscuous mode [ 372.511951][T22572] geneve0: entered allmulticast mode [ 372.512304][T22576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6823'. [ 372.531079][T22576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6823'. [ 372.620804][T22586] vlan2: entered promiscuous mode [ 372.870230][T22611] netlink: 'syz.3.6835': attribute type 10 has an invalid length. [ 373.085045][T22618] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 373.106241][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 373.106260][ T29] audit: type=1400 audit(2000000034.360:24321): avc: denied { getopt } for pid=22619 comm="syz.0.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.180949][ T29] audit: type=1326 audit(2000000034.430:24322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.204659][ T29] audit: type=1326 audit(2000000034.430:24323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.233751][ T29] audit: type=1326 audit(2000000034.490:24324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.257436][ T29] audit: type=1326 audit(2000000034.490:24325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.281069][ T29] audit: type=1326 audit(2000000034.490:24326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.304842][ T29] audit: type=1326 audit(2000000034.490:24327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.348028][ T29] audit: type=1326 audit(2000000034.590:24328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.371924][ T29] audit: type=1326 audit(2000000034.590:24329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.395564][ T29] audit: type=1326 audit(2000000034.590:24330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5118235d29 code=0x7ffc0000 [ 373.422691][T22628] netlink: 'syz.3.6842': attribute type 10 has an invalid length. [ 373.491859][T22643] loop6: detected capacity change from 0 to 128 [ 373.511837][T22643] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 373.694688][T22655] netlink: 'syz.5.6852': attribute type 10 has an invalid length. [ 373.740981][T22655] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.776307][T22655] bond0: (slave team0): Enslaving as an active interface with an up link [ 374.103359][T22680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=22680 comm=syz.5.6861 [ 374.452653][T22696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.753869][T22736] netlink: 'syz.0.6883': attribute type 10 has an invalid length. [ 375.806754][T22739] netlink: 'syz.5.6884': attribute type 10 has an invalid length. [ 375.814711][T22739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.850781][T22739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.871370][T22739] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 375.922544][T22743] vlan3: entered promiscuous mode [ 376.827340][T22779] __nla_validate_parse: 9 callbacks suppressed [ 376.827357][T22779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6898'. [ 376.845895][T22779] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6898'. [ 376.924855][T22781] netlink: 'syz.4.6899': attribute type 10 has an invalid length. [ 377.004333][T22789] vlan4: entered promiscuous mode [ 377.008792][T22792] netlink: 'syz.0.6904': attribute type 10 has an invalid length. [ 377.282234][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6913'. [ 377.345826][T22823] netlink: 'syz.3.6913': attribute type 7 has an invalid length. [ 377.353593][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6913'. [ 377.560641][T22833] netlink: 'syz.3.6918': attribute type 10 has an invalid length. [ 377.757556][T22846] vlan3: entered promiscuous mode [ 377.998188][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6927'. [ 378.094661][T22862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6929'. [ 378.099804][T22860] netlink: 'syz.6.6928': attribute type 10 has an invalid length. [ 378.115296][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 378.115383][ T29] audit: type=1326 audit(2000000039.350:24707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22859 comm="syz.6.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 378.147897][T22860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.176235][T22862] netlink: 'syz.0.6929': attribute type 7 has an invalid length. [ 378.183984][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6929'. [ 378.205879][T22866] netlink: 'syz.5.6931': attribute type 10 has an invalid length. [ 378.206729][T22860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.238553][T22860] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 378.272270][ T29] audit: type=1326 audit(2000000039.520:24708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22859 comm="syz.6.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 378.294891][T22869] vlan2: entered promiscuous mode [ 378.297057][ T29] audit: type=1326 audit(2000000039.520:24709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22859 comm="syz.6.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 378.486787][T22881] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6937'. [ 378.508569][T22881] usb usb1: usbfs: process 22881 (syz.6.6937) did not claim interface 0 before use [ 378.528619][T22886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6940'. [ 379.352151][T22905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6947'. [ 379.388824][T22905] netlink: 'syz.0.6947': attribute type 7 has an invalid length. [ 379.409706][ T29] audit: type=1400 audit(2000000040.660:24710): avc: denied { map_create } for pid=22906 comm="syz.3.6948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.429205][ T29] audit: type=1400 audit(2000000040.660:24711): avc: denied { bpf } for pid=22906 comm="syz.3.6948" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 379.450091][ T29] audit: type=1400 audit(2000000040.660:24712): avc: denied { map_read map_write } for pid=22906 comm="syz.3.6948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.482849][ T29] audit: type=1400 audit(2000000040.680:24713): avc: denied { prog_load } for pid=22901 comm="syz.6.6946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.503100][ T29] audit: type=1400 audit(2000000040.680:24714): avc: denied { perfmon } for pid=22901 comm="syz.6.6946" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 379.524301][ T29] audit: type=1400 audit(2000000040.680:24715): avc: denied { prog_run } for pid=22901 comm="syz.6.6946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.544220][ T29] audit: type=1400 audit(2000000040.680:24716): avc: denied { create } for pid=22901 comm="syz.6.6946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.731587][T22935] usb usb1: usbfs: process 22935 (syz.6.6952) did not claim interface 0 before use [ 379.794453][T22931] vlan3: entered promiscuous mode [ 379.813975][T22939] usb usb1: usbfs: process 22939 (syz.3.6956) did not claim interface 0 before use [ 380.556575][T22958] loop6: detected capacity change from 0 to 512 [ 380.597960][T22958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.625385][T22958] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.843750][T22970] netlink: 'syz.3.6965': attribute type 7 has an invalid length. [ 381.393753][T21401] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.498277][T23013] vlan4: entered promiscuous mode [ 381.946501][T23024] __nla_validate_parse: 6 callbacks suppressed [ 381.946521][T23024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6988'. [ 381.971199][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6988'. [ 382.083115][T23029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6990'. [ 382.097643][T23029] vlan2: entered promiscuous mode [ 382.102908][T23029] syz_tun: entered promiscuous mode [ 382.112070][T23029] team0: Port device vlan2 added [ 382.311306][T23044] netlink: 'syz.0.6996': attribute type 10 has an invalid length. [ 382.356754][T23051] netlink: 'syz.0.6998': attribute type 10 has an invalid length. [ 382.485614][T23046] lo speed is unknown, defaulting to 1000 [ 383.431842][T23084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7010'. [ 383.470980][T23084] netlink: 'syz.4.7010': attribute type 7 has an invalid length. [ 383.478788][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7010'. [ 383.622201][T23092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7013'. [ 383.722560][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 383.722574][ T29] audit: type=1400 audit(2000000044.970:24984): avc: denied { create } for pid=23095 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 383.744890][T23082] loop6: detected capacity change from 0 to 32768 [ 383.766025][ T29] audit: type=1400 audit(2000000045.010:24985): avc: denied { setopt } for pid=23095 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 383.785785][ T29] audit: type=1400 audit(2000000045.010:24986): avc: denied { bind } for pid=23095 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 383.828047][T23082] loop6: p1 p3 < p5 p6 > p4 [ 383.834637][ T29] audit: type=1326 audit(2000000045.080:24987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23100 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 383.859186][ T29] audit: type=1326 audit(2000000045.080:24988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23100 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 383.882833][ T29] audit: type=1326 audit(2000000045.080:24989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23100 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 383.906575][ T29] audit: type=1326 audit(2000000045.080:24990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23100 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 383.931144][ T29] audit: type=1326 audit(2000000045.080:24991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23100 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 383.957168][T23082] loop6: p4 size 83886080 extends beyond EOD, truncated [ 384.079963][ T29] audit: type=1326 audit(2000000045.080:24992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23100 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 384.103784][ T29] audit: type=1326 audit(2000000045.080:24993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23100 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcda5d29 code=0x7ffc0000 [ 384.147222][T23104] netlink: 'syz.4.7018': attribute type 10 has an invalid length. [ 384.238367][T23113] netlink: 'syz.4.7021': attribute type 10 has an invalid length. [ 384.260027][T23113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 384.353931][T23123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7025'. [ 384.483541][T23130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.490813][T23130] IPv6: NLM_F_CREATE should be set when creating new route [ 384.675490][T23138] netlink: 'syz.0.7032': attribute type 10 has an invalid length. [ 384.913481][T23152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7037'. [ 385.066853][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7042'. [ 385.075794][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7042'. [ 385.118036][T23160] FAULT_INJECTION: forcing a failure. [ 385.118036][T23160] name failslab, interval 1, probability 0, space 0, times 0 [ 385.131595][T23160] CPU: 0 UID: 0 PID: 23160 Comm: syz.3.7042 Not tainted 6.13.0-rc7-syzkaller #0 [ 385.140692][T23160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.150757][T23160] Call Trace: [ 385.154039][T23160] [ 385.156985][T23160] dump_stack_lvl+0xf2/0x150 [ 385.161729][T23160] dump_stack+0x15/0x1a [ 385.165921][T23160] should_fail_ex+0x223/0x230 [ 385.170695][T23160] should_failslab+0x8f/0xb0 [ 385.175317][T23160] kmem_cache_alloc_node_noprof+0x59/0x320 [ 385.181215][T23160] ? __alloc_skb+0x10b/0x310 [ 385.185826][T23160] ? security_capable+0x81/0x90 [ 385.190729][T23160] __alloc_skb+0x10b/0x310 [ 385.195174][T23160] netlink_ack+0xef/0x4f0 [ 385.199591][T23160] ? avc_has_perm_noaudit+0x1cc/0x210 [ 385.205005][T23160] netlink_rcv_skb+0x19c/0x230 [ 385.209799][T23160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.215352][T23160] rtnetlink_rcv+0x1c/0x30 [ 385.219779][T23160] netlink_unicast+0x599/0x670 [ 385.224621][T23160] netlink_sendmsg+0x5cc/0x6e0 [ 385.229486][T23160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.234825][T23160] __sock_sendmsg+0x140/0x180 [ 385.239581][T23160] ____sys_sendmsg+0x312/0x410 [ 385.244452][T23160] __sys_sendmsg+0x19d/0x230 [ 385.249112][T23160] __x64_sys_sendmsg+0x46/0x50 [ 385.253887][T23160] x64_sys_call+0x2734/0x2dc0 [ 385.258600][T23160] do_syscall_64+0xc9/0x1c0 [ 385.263109][T23160] ? clear_bhb_loop+0x55/0xb0 [ 385.267792][T23160] ? clear_bhb_loop+0x55/0xb0 [ 385.272539][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.278492][T23160] RIP: 0033:0x7f5118235d29 [ 385.282963][T23160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.302627][T23160] RSP: 002b:00007f51168a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.311044][T23160] RAX: ffffffffffffffda RBX: 00007f5118425fa0 RCX: 00007f5118235d29 [ 385.319019][T23160] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 385.326993][T23160] RBP: 00007f51168a7090 R08: 0000000000000000 R09: 0000000000000000 [ 385.334975][T23160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.343054][T23160] R13: 0000000000000000 R14: 00007f5118425fa0 R15: 00007fffd2466f78 [ 385.351038][T23160] [ 385.410125][T23172] netlink: 'syz.4.7045': attribute type 10 has an invalid length. [ 385.820317][T23204] vlan4: entered promiscuous mode [ 386.415162][T23235] netlink: 'syz.3.7067': attribute type 10 has an invalid length. [ 386.525069][T23241] netlink: 'syz.3.7070': attribute type 7 has an invalid length. [ 386.682644][T23254] netlink: 'syz.3.7076': attribute type 10 has an invalid length. [ 386.690623][T23254] syz_tun: entered promiscuous mode [ 386.698602][T23254] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 387.325328][T23296] validate_nla: 2 callbacks suppressed [ 387.325346][T23296] netlink: 'syz.5.7093': attribute type 10 has an invalid length. [ 387.350920][T23296] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 387.442705][T23301] __nla_validate_parse: 5 callbacks suppressed [ 387.442726][T23301] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7095'. [ 387.477659][T23301] netlink: 'syz.5.7095': attribute type 7 has an invalid length. [ 387.485485][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7095'. [ 387.609768][T23308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7096'. [ 387.632724][T23308] usb usb1: usbfs: process 23308 (syz.4.7096) did not claim interface 0 before use [ 388.811379][T23340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7107'. [ 388.834131][T23346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.841393][T23346] IPv6: NLM_F_CREATE should be set when creating new route [ 388.946872][T23356] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7111'. [ 388.978175][T23356] usb usb1: usbfs: process 23356 (syz.5.7111) did not claim interface 0 before use [ 389.270414][T23368] netlink: 'syz.6.7118': attribute type 10 has an invalid length. [ 389.291260][T23368] syz_tun: entered promiscuous mode [ 389.311263][T23368] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 389.568683][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 389.568696][ T29] audit: type=1326 audit(2000000050.820:25172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.599715][ T29] audit: type=1326 audit(2000000050.820:25173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.650661][T23376] loop6: detected capacity change from 0 to 1024 [ 389.693909][ T29] audit: type=1326 audit(2000000050.880:25174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.718389][ T29] audit: type=1326 audit(2000000050.880:25175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.729476][T23376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.741992][ T29] audit: type=1326 audit(2000000050.880:25176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.779215][ T29] audit: type=1326 audit(2000000050.900:25177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.802840][ T29] audit: type=1326 audit(2000000050.900:25178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.827250][ T29] audit: type=1326 audit(2000000050.900:25179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.851124][ T29] audit: type=1326 audit(2000000050.900:25180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f589b275d29 code=0x7ffc0000 [ 389.862576][T23384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7122'. [ 389.875566][ T29] audit: type=1326 audit(2000000050.900:25181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23375 comm="syz.6.7120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f589b275d63 code=0x7ffc0000 [ 389.957152][T23386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7124'. [ 389.991101][T23377] EXT4-fs (loop6): shut down requested (0) [ 390.015947][T23386] netlink: 'syz.5.7124': attribute type 7 has an invalid length. [ 390.023716][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7124'. [ 390.073224][T23394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7126'. [ 390.087753][ T8620] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 390.137052][ T8620] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 390.150379][ T8620] EXT4-fs (loop6): This should not happen!! Data will be lost [ 390.150379][ T8620] [ 390.160137][ T8620] EXT4-fs (loop6): Total free blocks count 0 [ 390.166208][ T8620] EXT4-fs (loop6): Free/Dirty block details [ 390.172110][ T8620] EXT4-fs (loop6): free_blocks=68451041280 [ 390.178777][ T8620] EXT4-fs (loop6): dirty_blocks=2336 [ 390.184094][ T8620] EXT4-fs (loop6): Block reservation details [ 390.190125][ T8620] EXT4-fs (loop6): i_reserved_data_blocks=146 [ 390.698306][T23417] netlink: 'syz.6.7135': attribute type 10 has an invalid length. [ 390.838825][T23425] vlan2: entered promiscuous mode [ 390.869000][T23425] team0: Port device vlan2 added [ 391.037869][T23431] vlan4: entered promiscuous mode [ 392.418469][T20986] bond0: (slave syz_tun): Releasing backup interface [ 392.524876][T20986] team0: Port device vlan2 removed [ 392.553697][T23476] netlink: 'syz.5.7155': attribute type 10 has an invalid length. [ 392.645571][T23488] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7156'. [ 392.685189][T23490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.698631][T23493] usb usb1: usbfs: process 23493 (syz.6.7156) did not claim interface 0 before use [ 392.710849][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.798367][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.858802][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.942587][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.030625][T23475] lo speed is unknown, defaulting to 1000 [ 393.096832][T23508] vlan3: entered promiscuous mode [ 393.162836][ T11] veth1_to_batadv: left allmulticast mode [ 393.168890][ T11] veth1_to_batadv: left promiscuous mode [ 393.174692][ T11] bridge0: port 1(veth1_to_batadv) entered disabled state [ 393.465361][T23516] loop6: detected capacity change from 0 to 1024 [ 393.500583][T23516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.699183][T23527] EXT4-fs (loop6): shut down requested (0) [ 393.763656][ T8605] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 393.800847][ T8605] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 393.814162][ T8605] EXT4-fs (loop6): This should not happen!! Data will be lost [ 393.814162][ T8605] [ 393.823846][ T8605] EXT4-fs (loop6): Total free blocks count 0 [ 393.829894][ T8605] EXT4-fs (loop6): Free/Dirty block details [ 393.836691][ T8605] EXT4-fs (loop6): free_blocks=68451041280 [ 393.842707][ T8605] EXT4-fs (loop6): dirty_blocks=9040 [ 393.848089][ T8605] EXT4-fs (loop6): Block reservation details [ 393.854073][ T8605] EXT4-fs (loop6): i_reserved_data_blocks=565 [ 393.877162][T23516] ================================================================== [ 393.885281][T23516] BUG: KCSAN: data-race in file_update_time / inode_update_timestamps [ 393.893461][T23516] [ 393.895781][T23516] read to 0xffff88812269ae9c of 4 bytes by task 23514 on cpu 0: [ 393.903444][T23516] file_update_time+0x8b/0x2b0 [ 393.908362][T23516] ext4_page_mkwrite+0x19e/0xb70 [ 393.913412][T23516] do_wp_page+0xca1/0x2340 [ 393.917827][T23516] handle_mm_fault+0xc63/0x2ac0 [ 393.922681][T23516] exc_page_fault+0x3b9/0x650 [ 393.927385][T23516] asm_exc_page_fault+0x26/0x30 [ 393.932248][T23516] [ 393.934578][T23516] write to 0xffff88812269ae9c of 4 bytes by task 23516 on cpu 1: [ 393.942289][T23516] inode_update_timestamps+0x139/0x250 [ 393.947756][T23516] file_update_time+0x219/0x2b0 [ 393.952609][T23516] ext4_page_mkwrite+0x19e/0xb70 [ 393.957548][T23516] do_wp_page+0xca1/0x2340 [ 393.961968][T23516] handle_mm_fault+0xc63/0x2ac0 [ 393.966831][T23516] exc_page_fault+0x296/0x650 [ 393.971522][T23516] asm_exc_page_fault+0x26/0x30 [ 393.976393][T23516] __put_user_8+0x11/0x20 [ 393.980721][T23516] __se_sys_io_setup+0x95/0x1b0 [ 393.985584][T23516] __x64_sys_io_setup+0x31/0x40 [ 393.990458][T23516] x64_sys_call+0x160f/0x2dc0 [ 393.995144][T23516] do_syscall_64+0xc9/0x1c0 [ 393.999645][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.005624][T23516] [ 394.007939][T23516] value changed: 0x2e7ddef6 -> 0x07bfa87c [ 394.013670][T23516] [ 394.016000][T23516] Reported by Kernel Concurrency Sanitizer on: [ 394.022152][T23516] CPU: 1 UID: 0 PID: 23516 Comm: syz.6.7168 Not tainted 6.13.0-rc7-syzkaller #0 [ 394.031169][T23516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.041218][T23516] ================================================================== [ 394.198319][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.208475][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.218611][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 394.228281][ T11] bond0 (unregistering): (slave team0): Releasing backup interface [ 394.236781][ T11] bond0 (unregistering): Released all slaves [ 394.291050][T23475] chnl_net:caif_netlink_parms(): no params data found [ 394.321978][ T11] hsr_slave_0: left promiscuous mode [ 394.327910][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.335439][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.348947][ T11] veth1_macvtap: left promiscuous mode [ 394.354448][ T11] veth0_macvtap: left promiscuous mode [ 394.360071][ T11] veth1_vlan: left promiscuous mode [ 394.365310][ T11] veth0_vlan: left promiscuous mode [ 394.427658][ T11] team0 (unregistering): Port device team_slave_1 removed [ 394.440888][ T11] team0 (unregistering): Port device team_slave_0 removed [ 394.494746][T23475] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.501924][T23475] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.509149][T23475] bridge_slave_0: entered allmulticast mode [ 394.517502][T23475] bridge_slave_0: entered promiscuous mode [ 394.524501][T23475] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.532244][T23475] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.539955][T23475] bridge_slave_1: entered allmulticast mode [ 394.546751][T23475] bridge_slave_1: entered promiscuous mode [ 394.564653][T23475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.575337][T23475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.594682][T23475] team0: Port device team_slave_0 added [ 394.601487][T23475] team0: Port device team_slave_1 added [ 394.617376][T23475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.624318][T23475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.650301][T23475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.661791][T23475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.668830][T23475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.695652][T23475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.724100][T23475] hsr_slave_0: entered promiscuous mode [ 394.731029][T23475] hsr_slave_1: entered promiscuous mode [ 394.737211][T23475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.744761][T23475] Cannot create hsr debugfs directory [ 394.980634][T23475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 394.989281][T23475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 394.998657][T23475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.007634][T23475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.022305][T23475] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.029357][T23475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.036638][T23475] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.043678][T23475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.077886][T23475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.090588][T15227] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.099451][T15227] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.111945][T23475] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.122277][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.129336][T15227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.139903][T15227] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.146986][T15227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.214155][T23475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.326189][T23475] veth0_vlan: entered promiscuous mode [ 395.334120][T23475] veth1_vlan: entered promiscuous mode [ 395.349748][T23475] veth0_macvtap: entered promiscuous mode [ 395.357913][T23475] veth1_macvtap: entered promiscuous mode [ 395.368482][T23475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.379091][T23475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.390397][T23475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.401751][T23475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.412261][T23475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.422921][T23475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.433352][T23475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.443206][T23475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.454419][T23475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.464295][T23475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.474760][T23475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.485394][T23475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.495856][T23475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.505698][T23475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.517016][T23475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.527627][T23475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.537713][T23475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.546571][T23475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.555456][T23475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.564156][T23475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.586855][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 395.586893][ T29] audit: type=1400 audit(2000000056.840:25537): avc: denied { mounton } for pid=23475 comm="syz-executor" path="/root/syzkaller.Dxjk26/syz-tmp" dev="sda1" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 395.617809][ T29] audit: type=1400 audit(2000000056.840:25538): avc: denied { mount } for pid=23475 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 395.640874][ T29] audit: type=1400 audit(2000000056.840:25539): avc: denied { mount } for pid=23475 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 395.663083][ T29] audit: type=1400 audit(2000000056.840:25540): avc: denied { mounton } for pid=23475 comm="syz-executor" path="/root/syzkaller.Dxjk26/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 395.690109][ T29] audit: type=1400 audit(2000000056.840:25541): avc: denied { mounton } for pid=23475 comm="syz-executor" path="/root/syzkaller.Dxjk26/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=76641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 395.718018][ T29] audit: type=1400 audit(2000000056.890:25542): avc: denied { mounton } for pid=23475 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 395.741958][ T29] audit: type=1400 audit(2000000056.890:25543): avc: denied { mount } for pid=23475 comm="syz-executor" name="/" dev="gadgetfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 395.764659][ T29] audit: type=1400 audit(2000000056.990:25544): avc: denied { write } for pid=23475 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 395.792112][ T29] audit: type=1400 audit(2000000056.990:25545): avc: denied { open } for pid=23475 comm="syz-executor" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0"