last executing test programs: 32.688590131s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xd, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025150fb68321f7b5fb1abd7000fb", @ANYRES32=r5, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380040003800800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r9, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r10, 0x89f7, &(0x7f0000000340)={'sit0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r11 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x5, 0x0, 0x4, 0x11d691, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10113f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r12}, 0x10) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000004, 0x12011, r11, 0x0) 31.966275917s ago: executing program 1 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ff0300001af1f82aa5bbd3f7a4691268392f62155280a5a85d87bb470000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) utimes(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3326bd70000000000005"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x8001, 0x7f, 0xf0, 0x1}, {0xf12, 0x1, 0x8, 0x4}, {0x6, 0x2, 0xf6, 0xfffffffc}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1ab0000000000000e0032000000080017015600000008000300", @ANYRES32, @ANYBLOB="0c0022158891f0c0422dcd1c4002541199000600006b365725244088b324f71011e9259310118687ee273145931d05ac9c0693"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x40) 30.068763341s ago: executing program 1 (id=31): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 30.068568961s ago: executing program 32 (id=31): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 24.981078519s ago: executing program 3 (id=83): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000f5689d6a317dc481aa9f7640dddbdbc35dd37fe3f4aa8d764c815d4d5341f5be793f5784df5bbd44bcb2927fa16527459ac7"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x143) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000ac0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000f8ff00000000bfa200000000000007020000f8ffb70400000000000085000000820000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 16.363186875s ago: executing program 3 (id=224): r0 = syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000740)='./cgroup\x00', 0x10, &(0x7f00000005c0)={[{@orlov}, {@sysvgroups}, {@dioread_lock}]}, 0x1, 0x510, &(0x7f0000000c40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x123) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000000700)=ANY=[@ANYBLOB='uid', @ANYRESHEX=0x0]) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000003200)=""/4140, 0x102c, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x7, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r3, @ANYRES32], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) chdir(&(0x7f0000000000)='./cgroup\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x5, 0x2, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xe1, 0x1, 0x4, [{@multicast1, 0x1000}]}, @timestamp_prespec={0x44, 0x24, 0x2e, 0x3, 0x0, [{@broadcast, 0x3}, {@multicast1, 0x7076}, {@local, 0x4}, {@remote, 0x4}]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x41, [@local, @remote]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="23f272feb3e5a300a21ee90e8d7cbd2deb54ee3665e1bb87904ba8f191bc9ab28feff3009ffe61f779977b989b8a6c9ff5503458faee806f38b91d9a2c2bdf0d14e1b9711d79569b8ef770019e09b46a238454658240ddff650b2f1d", 0x5c, 0x14044, &(0x7f00000004c0)={0x11, 0xf6, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000240)="3a00f6399ed615248f5e0b025aa9d00591c6472c7e307813c97ff12a61189e8c318b45b9921b2484835180a7a9850923f2c7f46503676358ce0391fc1a0b5c4d871090721ce0e28141de309e4b1151b7f0fd0de8eb28c5a87badb5008e31fd7cf7fbb0ec9e03d6df2ab2b322cd6e1aacd81693db0622dd42f8483cbdd96b7725c6c7", 0x82, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) shutdown(r7, 0x1) preadv(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, 0x6, 0x100) getpeername$inet6(r8, &(0x7f0000000500)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000580)=0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b70209000000e600000000008600000095bc5ae5c38e71e76de743e9b0f0cebc25794a50f63666165c55d6efc8f37c5f6a764e936ece758ec421a813d3c557546c54c8521d1e20f9d9152573030000002044615878691c47dfa105925f85b7fc6b01fab624b13a123f86776346a206963ea6332fefaa6bf40060e826195fcae0b49b5d6f630a0c2e30eb8421195ca9f644"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='itimer_state\x00', r9, 0x0, 0x9}, 0x18) setitimer(0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff03000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebe0dd7defb321440000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192]) 15.85379702s ago: executing program 3 (id=231): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x5102}) 15.599064421s ago: executing program 3 (id=234): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x7, @remote, 0x3}}, [0x3, 0xb, 0x80, 0x401, 0x8, 0x3, 0x80, 0xff000, 0x8000000000000000, 0x2, 0x9, 0x2, 0x8000000000000000, 0x2040000000, 0xff]}, &(0x7f0000000400)=0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a101e, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 15.488297502s ago: executing program 3 (id=237): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x7, @remote, 0x3}}, [0x3, 0xb, 0x80, 0x401, 0x8, 0x3, 0x80, 0xff000, 0x8000000000000000, 0x2, 0x9, 0x2, 0x8000000000000000, 0x2040000000, 0xff]}, &(0x7f0000000400)=0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 15.253969194s ago: executing program 4 (id=244): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x5102}) 15.187829444s ago: executing program 3 (id=246): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025150fb68321f7b5fb1abd7000fb", @ANYRES32=r4, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380040003800800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f0000000340)={'sit0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r10 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x5, 0x0, 0x4, 0x11d691, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10113f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r11}, 0x10) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000004, 0x12011, r10, 0x0) 15.076503375s ago: executing program 33 (id=246): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025150fb68321f7b5fb1abd7000fb", @ANYRES32=r4, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380040003800800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f0000000340)={'sit0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r10 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x5, 0x0, 0x4, 0x11d691, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10113f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r11}, 0x10) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000004, 0x12011, r10, 0x0) 14.865136557s ago: executing program 4 (id=252): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f000011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) 14.641866268s ago: executing program 4 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 14.300009451s ago: executing program 4 (id=262): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x7, @remote, 0x3}}, [0x3, 0xb, 0x80, 0x401, 0x8, 0x3, 0x80, 0xff000, 0x8000000000000000, 0x2, 0x9, 0x2, 0x8000000000000000, 0x2040000000, 0xff]}, &(0x7f0000000400)=0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a101e, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 14.223023502s ago: executing program 4 (id=263): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x61680, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x807) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x21, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13.683931345s ago: executing program 4 (id=271): add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fed5ef1d026a59c5410e802e221332ef7a", 0x11, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000fc0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40090) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) creat(0x0, 0x0) pipe2$9p(0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d80)=@newtaction={0xedc, 0x30, 0x25, 0x0, 0x0, {}, [{0xec8, 0x1, [@m_pedit={0xec4, 0x1, 0x0, 0x0, {{0xa}, {0xe98, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800000}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xa6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x1}, {0x1}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xb8}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {0x9ed}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xaef4}, {}, {}, {}, {}, {0x0, 0xa24, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {0x5}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}], 0x4}}, @TCA_PEDIT_KEYS_EX={0x74, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x381a14e25663725e}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xedc}}, 0x0) 13.636104106s ago: executing program 34 (id=271): add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fed5ef1d026a59c5410e802e221332ef7a", 0x11, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000fc0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40090) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) creat(0x0, 0x0) pipe2$9p(0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d80)=@newtaction={0xedc, 0x30, 0x25, 0x0, 0x0, {}, [{0xec8, 0x1, [@m_pedit={0xec4, 0x1, 0x0, 0x0, {{0xa}, {0xe98, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800000}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xa6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x1}, {0x1}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xb8}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {0x9ed}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xaef4}, {}, {}, {}, {}, {0x0, 0xa24, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {0x5}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}], 0x4}}, @TCA_PEDIT_KEYS_EX={0x74, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x381a14e25663725e}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xedc}}, 0x0) 11.626750441s ago: executing program 5 (id=301): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 11.609062842s ago: executing program 5 (id=302): r0 = socket$inet6(0xa, 0x806, 0xdf) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x5d15, &(0x7f0000000080)={0x0, 0xe929, 0x800, 0x0, 0x3e3}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00'}) 11.292692884s ago: executing program 5 (id=304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000340)={0x400, 0x1ffe, 0x1ff, 0x812, 0x1a, "76880031b500"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x5f) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800004, &(0x7f0000000080), 0x1, 0x262, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000010280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f00000007c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d6978656424756e695f786c6174653d312c73686f72f46e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1375ea1541d8edfeb1101f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7f54653b33118a4e01fcfe3a2329576bf6a45353bf9f720cea11bf481ed7ed0979416e75e6fa5f6b699749e9d4446c849ed79650b35dd0bd6e1955fe9b0c09861cf61fd57be7ba905990ed7a4c5b3793959636630d74ecc23264ea54d4d2cc4f112f49319943fc4489afac5889e329d5086e4448f01928f41"], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") open(&(0x7f00000000c0)='.\x00', 0x0, 0x164) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x5300, 0x5dd8, 0x1000003, 0x0, 0x200000200000000, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) read(0xffffffffffffffff, &(0x7f0000000c80)=""/217, 0xd9) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x32f, @tick=0xfffffffc, 0x0, {0x4}, 0x1, 0x1}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001280)=ANY=[], 0x6, 0x0, &(0x7f0000000000)) lsm_list_modules(&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=0x38, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') timer_create(0x1, &(0x7f0000000500)={0x0, 0x13, 0xb, @thr={&(0x7f0000001bc0)="3a06896e520cce134f9171a116763af7a5161424b2a571d1ff83d74a9cd806ddaca9364facd28bbf6c62a7e601696d919611a3f6b97ef47a19927558e01894894078e21aafbe5c50a05a1b210bcdc2433ad907724079491df24b0f729030ba8ea82f5ec1b03ff33d784146533537c6b1f18badcbc29e1f2533a228bf41f1bd7cb24f1adee2b7fcda54afde1e59e3c81b6a844babf2ff8aba535a29b391891efd54b5336aed44db0c5ae50634e66db9d45948ff2e676c03baf5fff2c0e14a943cbd1b0606ad33ba6dad87e647c7c1e08067fa39d2806186dc4e6c212f645478285f1e150b2d904cf2a1be14cb27727279f76e8a76274b495676b009236318c0cb557a4e4678fa08553fa8e6122cfb8d16274dde93b4881fee625bf733a1c634cff4a1851cae029f75e6ba11c7fa19b959133e4a13f7fb4111b65259e86f585d79f0bcff63dc49985828cbf3be06af741da8208c8c84dea81c1e6e46bca342d22c6abb7ff5be5bc14c8983e4a71fc2bfdde698b51578a3f429390c7d51405c75cbeda267117cc2067b797b431ab1babac735389002bbb0c8408191c592c6118dac76a8bb0968be83883ba872b143c89685fa175cc19fbc23ddf46a9639c1ecb62ef5d5a8c5b25d0c00421687843fb15827bd160e4f9967eee2d05a7cff0b78342f689aa94051095b87ea221379e948df76c8634749b6d1bbebff134159ecf6d246a36b2fff04646212e60ade0a01ae9c69e7ffc6385bb785dcda9789b4e21f8bf7b3627cede5304549244858e1b7529ec25dba865e5c8d2acb5cc8202a12082dce04b9b41a72d807d53747445c546131e6d743b8d64cc0f6f0fd3a149aa6043cae23318fde9853f2f7ae8f0f5d33dd3a78437fe0329b2f2cc0cf60cd807f269f6b871de762e80363608be1f27fbaaded0bdd90992190703c1f0defd423324544fb3f17533fc01800689a9db2d1608954c8857d1afb83b2db75d34b1b03e2fe563eb558d90d0093fa9b1e3bbdcc70879ea7b9a2a16b63d1823fa26ad5c975fc2d0b76d7f5f00796424392af78d5e2d3949fb3b4469c40dbc4afe114d6a5020845332cfbce358e91de16d0064727c6a6ca2b8ea399976b081e5712d8cbc05596ea5a84ee05736c16243363c1de5176c2a0f3f2ec34fc4e6b0c94b64578bc36307bfee173c6b3efa980cb8a7093479d8481253d8f30db66bb2f7e86416aa774152d8660268931d055153698e34c4196331a64fc02c54366b8415452a5c3b12467ad2e19c89c8e343aa5127be128c799397fb2a9d230df5d291519b2e5c962d71827ddc8dcf3766b28c865ea01addad3a662ec1bcba3d71e68351ed7e159551433b6bf830573d85644fe65f9b7f23ac5a1db3dd66a6e51b0f4bd34a79c8cfd28e6538c4a21b41d2e694cfcbae584878330c4634406dab1a1cfd6c3d457423ee7707f0a486ebeaf5ac363005754c6196d998d404b89bc6ef2b16ed280673f08147cd4bf0136694bf47708606e995d0a72aebda871933d9fdb5bf8f58de0c0e9caabf1088d9b2d8506aaf3f7b7c9bf620415a7436128bc7c85ab9480deccc9803e6fca25906c8e343fc8ce1688654c6c56117e1585275fe4e85631f0cd22982f60212bcdc678efaa74ac02669daa877b04c22a0be9a027f81c5f0602db9b0c3bd0c708846c5deda3b764ff4d61f7421ec308fefe2081b340366218c59fff9c53df1055861eabaa3c2a1160e3aee73f8c334eacf93e63370e088305cec6c7387261650c625abecd5755145548159a1b47ab16f2311ce443448d6a885aeb8e09b7ccc82b047b97469acaa13870618728a2c83c380587626a41613639364b7358a818c4d742992496bd02ec4c8d0d3e33af90b3248e62a2a2cc1c76b6aacb4463d207a0b9337f668344351d9f8aa405b6a3bd5e4ba5bdd4376d61cb59d50b8e6fc26a4a49d33f305e4b0d63c1658626f39026099b59c92a03f93d5e20e0ee5425a102406b02038b9bccfa0d8995b1ac730ef200151dbafb753e168041b8ab1666bdab7fc00c7faf5416a29c2b91726ee3a9bf51ed45139c39535ee7e2858fcb9fb633f18e5e25a9b283954c99b1a9ec403287fa755288e3ee11f56c66b289719863f4e07cc5c1daf26c49ad9680b0ee8fd2abe017b5358a9d2a806b2d072edffcf35fd2f3bb0d105bae6d56d0735b9969dd5d2fb447d01f6f6503ffc01052badc3dd67efbbb0bfa3bc186609c32ee3ead1e4af301aead077646b2bf21f4299a3b5c96e43f6faf16bfd035697271904fcbe703cc03fe3a591725140be174e2e6449d133c6893147c839231c4cbb129d2a8dd5bf78a945cfb9e50fc7c3641ccc52f070cfac99c8f3275f77145bf8e7a4b5e9750c0e8dd96412a7627f202167572963db9e409a2b8e7817be80977f9826b786bd353c322343c2cdac2371d0a5d3cef22188a767eb1a2d1791b2dfd6bebdb38f5c7b1061486848e9bdac73d67d3411ba054b2c73bcb788e63bdf7d2035d11ed9c261fec6666e8d30ecc4faf711cbc2a5f99b4658413222d558e7fb88eff70fdbffb5dd1143cc1509110861b6f72f7ed48eeb3b5d3f27a5c997664e36ff791470f8b82773a1f430944448b2f62f926b10f8357565b6c7a5ecc5b0707368e45e1e77288155c54f35b4c3bbec35eff9a0698af2fd07e9581f4e1c64d7b43fb0a890cd94b42eff67ebee5c96afb1724827ac0a1323a23b9f2b8a03d4809447f0075bfba30892b3e32fe926e27f08ad3dd1e66380af368431a865f94c77da71c2c15539c0489c777f055e24642df8387f12de3b61c27025293873a3d839ca33051cd152bb3e340a8b59b0ed73b0decbf107d3b3633b4099f215088a8635dee13464f0ea169d0823740b6a5e3ffb07e19c4ce991ce62b6b15baff76abf7e122e0ff65e9b087f978204c758c3d7105475a9e2731b08abcf6beef45e6deaa37c45cb22a744263063eb7e18b5106dc166de18ff43cf00848391411af52f2da0cdf5188f85df09b0c8be60aa4df37880f36168a3841ba6643236cafa1c8a20b311ef8697764c76476a19e04e7f8e1865dcefed747608ad5074dea32404545659de956d2a0c5b4a2e1e72b30396a5f5e3c33dfbb5c0ba4faa03942fd0234fbe19980da9ec422323b082ec25b3f9a6a763b5f8e60c9289004989d44fa8386a612f308552fce88da41b183fef1e483b674c568696059d910f44f73721ead0d5397ca87381ea8cdfb1f104a4bc998787bab7ad260a98409f2ab0c886ab8bc9faf5bf832e9922fa2ecdf0960a74294c1adc8013f5fcf217d742705ab1bf1c590ba3addf0239394efe3b79e427b4c8a1fad1b110a0678537e270a9fd1b645444949d9e0737ece2c1b5bdd6eae22e8207ca2a24c289b7be79211551f20ae1460335ff0170ea6134a349e8c7a7fe4bd41b24ebe7ba316e5b266187d37691cfa9e5d5cc4f6545f45e7d3e2020f2790f47684d074c8970f07e1231c0afe4d618afc94726795cb78c1a3cf94b956f42c9d4a3df2be3f991be137745103ba9dafb73d05e8e6b9366a186da374d2f48e1c02df4cf1a129188ad0ef70bb14646b76b79121ccc0b84468de20140a99208ea571b01b3543229d645784e0d8ef875464d1282d3ff85396ff76fd200e7b728379c09a02e28ede7f241775e6be13e25cf32e7cd245496c32902ce54d315867ad60b7ff9dccc7279c01a1ceca2297c13e64ccd533820a0a24515586f4e8f78dd6126dea2848f958fa374c67490286488468215ecb7383c52c28006598190bce3f6d23a19da4653872adce45fbbe5b83396f29a31f5d8583d7554059f5c91ebbee4aa74ba53a7331d7e45481d8db2a3b24394046685fdd53191f0864d1be2996e458066a341d819eab55b1025d35d7dcc3a3ce66ed4824dd37029346ffd8c7a458a296b01e8c45b4b80eb278f8797c20dfc05c4725b28e8b7fea2b95a3129cfc909bb022f18009f39800c5eac40eaad2628ca8a5abfccec4fd3c2979b71ce01d4aafa36c93a47a57e1f7c89e8e25a619b67efc464115d69634aef3a050277097e04dd7b232460ab1d592e906f54181ccd9cb0dc45335964e5fbba96fcae933e20c07fd4450defcdd6bced55f78a0f580f88ece0d9983402c428c67ef53290be6f0c6fce30b9475c325fb497ed9bf1eb6e93133b45bd882555b0541bd28b25d9efe85f949513b6e8f894fa9bf81ff69ef72348ff1957e1ae7b0a5116fdcb549d95e0d59bce80bab05ef94079a7627dd4945f9b839c924359045bf9fe5a1eab057c080e481b4acc4c7f41db4f95f7c1030c05241f40ce3829914fdf5855afb88a3b0d337e118997a259b87cc4eb2ae10ea5e1b9845945915d46c59a3947e7d659fff00d6e5986a3c67e0df739dcabbd77ecd01eca954795eb1c2f9646c1360193536b95d4937e23eee21049e635b658cdb0e97def97ef2ff4e1ab4b2fd118f620f724b7c29f9975834b3b6408a47b9718847de302a84493293dce1ccf66df41379f9b829d1ef2862c05159024dad670b67da1f42cf285500a75352e096b03227cc17a031d18123ff1e56fdd40be0c0739b02ca5a2ccb5c4592e0dfd69ea8788d3f02df1fb73a8fd7151efd0c5a7163fecd417f6b24306cd0d72df0f9a0b481f51db6689a55de2e5ca83d13049aa4fc6de9c6ea2404de3a2f9b1d3577a9c37d38fe7b689ee62e8015597d687fcd608537addcf019a041f5ed9345a3eb9d0cdb45f5436485cc6316f7c1291d5b01ca55592842cd66c42ebc48746a7325727692602f2064b10b36992d16bf74725de59080f8f6920183fbc66dbed84c9a4276f8611c77beb9d07988e6974fe09e760cbb62c49c1af02825c85c5570dd30f8a627d7bc38eb4bc3ceffa1138aa5805a1c140dcaf7f6fe6ae6c5be976e45f952741efeecb4b1d174153207d6393d58d6d831fe01982565840618715fda006c9ef513a280a3ff0fab0bc83ab061b63f4e3e9df885ced0edb93b7abb19a286ec5f837d49ee933e6377b8a52ff5d3776ed35fd337df4eea1df62d6084b8ae7ed02c4d019a6b6fc033763f4ccab9ebc6f4f8a92c6daa330b5a33644967c5ff8ed85b83aa5e95ba35ad02abedfbdc284d3e62c5ea248aeefb9e4ff198a63c81c903fceb7bad1aa9274e1a70f2843d911f6c85ef86c321826158beeeb8334213b4f9cc586e3331cb2d74191c76eb0846a59b4cf186e3bf3810044e298f5c52f1f2751cf3715a61c572008992622f3c34e47afbb37ea5a4bd25949f3c2cb0630def1293bb354a4383553f364d25b4e09b0da855b800f90c8493aa50671581218aeb3b69663a41704c154e5e1b5e4c25161a8bb358679ce95ed32a93f43d5b16922dadad425116f23df7a2dce19e3a0d72a4d499c78fe4230dd50d8bccb94c8347b40e1f05869f4e7f7fbb9e192d7fdbb5828ab0ecc09d9d36caedffd285dfaa99c1659d70366b6f8a52c394c23b5e86c20be949bf8177a015265add6e7bc529cc22edf2e3ba08dbf389517c7d4d41e34f8564a7f958657404ce2b2d55a08ea17208c92f0328843e8a2147873f0412b1aa92825a528f1c1021e5cdb50f0a0a31ac3242a727367b2624bddc6764205186704cf340724c999d2f2b372e45dbd69aaf5a57f08d14adc6086f30ca396a426fd77f4df8243c2e40d684d83bfcbae48d2d364f1f4e1a1d71cb3d6324d84dadd00229614725c9ffdd8a3d3d742678b3bd03461232da2f23d4d5a996f8929551e6bc1287c9c1501b0ee83c6288a2a035a9526bf748b8c57b99d5", &(0x7f0000000600)="b68b8c59db212180c48f40409d4575f8c70c364161d810a33a69bc3a40780bff0f7e55010cae6b6cc608700bde789e13829e7198a13bf54dc51a9956c6107f7fdd0106ef621fb2b1a894c4d53437446b7a1f5a79686600725c70d2b84ae455acd1a6c9114082ee0504b025d646cfe779a30ae6327eea9407924cc16a22c20ccd000a5cd24f7349debb206642c47e46a821c91867b91cdf477650353027612e1f836dac5624d04ca567576dfa6d4a9ef5b1e7c32a32c88240a531d95581cf8c8db3"}}, &(0x7f0000000540)) 11.272573794s ago: executing program 5 (id=305): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x7, @remote, 0x3}}, [0x3, 0xb, 0x80, 0x401, 0x8, 0x3, 0x80, 0xff000, 0x8000000000000000, 0x2, 0x9, 0x2, 0x8000000000000000, 0x2040000000, 0xff]}, &(0x7f0000000400)=0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a101e, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 11.254385354s ago: executing program 5 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x600, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a00000a0000000000000000000000080012"], 0x50}}, 0x4000000) 10.946510337s ago: executing program 5 (id=309): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3c5}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x92, 0x1067, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 10.925632137s ago: executing program 35 (id=309): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3c5}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x92, 0x1067, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 2.003012545s ago: executing program 8 (id=432): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) fsopen(&(0x7f0000000400)='9p\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x800}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1852f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYRES16=r5]) 1.924818245s ago: executing program 6 (id=433): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcc82, 0x7}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) 1.733122847s ago: executing program 8 (id=435): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0xfffc}, &(0x7f0000000040)=0x90) 1.698896837s ago: executing program 6 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ff0300001af1f82aa5bbd3f7a4691268392f62155280a5a85d87bb470000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) utimes(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3326bd70000000000005"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x8001, 0x7f, 0xf0, 0x1}, {0xf12, 0x1, 0x8, 0x4}, {0x6, 0x2, 0xf6, 0xfffffffc}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r6, @ANYBLOB="a1ab0000000000000e0032000000080017015600000008000300", @ANYRES32, @ANYBLOB="0c0022158891f0c0422dcd1c4002541199000600006b365725244088b324f71011e9259310118687ee273145931d05ac9c0693"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x40) 1.664739067s ago: executing program 8 (id=439): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) 1.589819328s ago: executing program 8 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0xfffffffffffffffc}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x246200, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.30396794s ago: executing program 6 (id=445): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1401e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x3, 0x466, &(0x7f0000000e40)="$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") ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[], 0x5b0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100181f00000000000000000000000000000a0000000000612e6100005f3000"], &(0x7f0000000300)=""/24, 0x22, 0x18, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r6, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) setreuid(0xee00, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x38) r10 = socket(0x10, 0x4, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r11, r11, 0x0) mount$nfs(&(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x1010000, &(0x7f0000000440)={[{'^)'}, {}], [{@fowner_lt={'fowner<', r11}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+-%+^-%;'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@permit_directio}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) 1.210368371s ago: executing program 7 (id=447): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0xff, 0x7ffc0002}]}) fsopen(0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) (fail_nth: 2) 833.557144ms ago: executing program 7 (id=451): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) fsopen(&(0x7f0000000400)='9p\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x800}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1852f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3]) 685.456945ms ago: executing program 0 (id=454): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000140)=""/244, 0xf4}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000001480)=""/212, 0xd4}, {&(0x7f00000013c0)=""/80, 0x50}], 0x7, 0x0, 0x0, 0x40810}, 0x20008081) 666.865975ms ago: executing program 7 (id=456): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r7, 0x10, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0xc, 0x99, {0xff3, 0x39}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4084040}, 0x20000000) unlink(&(0x7f0000000180)='./cgroup/../file0\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xf, 0x13, "ec28a144f13d7607"}) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0xa) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 612.755345ms ago: executing program 7 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 612.329935ms ago: executing program 0 (id=458): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002ac0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa8, 0x11, 0x148, 0xa8, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x7}, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xec91, 0xb, [0x26, 0x2b, 0x15, 0x2e, 0x39, 0x36, 0x2b, 0x32, 0x2a, 0x22, 0x10, 0x3a, 0x2, 0x4, 0x3, 0x11], 0x2, 0x0, 0x7000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kfree\x00', r4, 0x0, 0x4}, 0x18) syz_read_part_table(0x5c9, &(0x7f0000000880)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d0000000000f0ff001400000008000300", @ANYRES32=r8, @ANYBLOB="0800051d00000000140006"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffa, 0x7c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='block_rq_remap\x00', r1, 0x0, 0x80000006}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r9, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x88, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x8810) 594.002366ms ago: executing program 8 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='ib_mad_send_done_handler\x00', r1, 0x0, 0x2}, 0x18) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000001180)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) 584.611715ms ago: executing program 7 (id=461): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) fsopen(&(0x7f0000000400)='9p\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x800}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1852f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES16=r4]) 512.639776ms ago: executing program 2 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='jbd2_shrink_checkpoint_list\x00', 0xffffffffffffffff, 0x0, 0x800}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00', 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r4 = inotify_init1(0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000002480)=""/4097, 0x1001}], 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x1001, 0x1000000}, 0x3, {0x1}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) inotify_add_watch(r4, &(0x7f0000000500)='./file0\x00', 0xd4000121) 275.199288ms ago: executing program 2 (id=463): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) read(r0, &(0x7f0000000000)=""/269, 0xfffffdef) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 274.399508ms ago: executing program 6 (id=464): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 235.973538ms ago: executing program 2 (id=465): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x1b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/20, @ANYRESHEX=r0, @ANYBLOB="000038aeba565089a8db00000000f8c5e26eaa12000000000000005c9040fc8d7393cd00"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_buf(r1, 0x0, 0xc, &(0x7f0000000340)="97fcbff9d67003680daeac9bcfd8b51f279bbf955648ce1aac9b6fed9c67d72a51a80f5fa577dd6dfd8b1a7ac49d883530290b6f9608e9e79d566f78a65c9cdd1183cf68387aea8fc9db092b18141c660441433c6409885f21670cb4833e4c8e0b2c942bcd7a1ed2a61a2e1049d755728048276bcf3e7bc9147af627bfe324b3fa5167a7a1c36a4375bb6543e80a82de493b5cf9c1efe5390f43ffbec299c881d631e7e4c20c239b327918dbd198afd4fa3cb17fc4ef098b6241f5cb3ba6aeb446b61b000ce29eab9596197de5bdc11a91d21d2cdd623ac7e5b4407550bf7d05cdc71216bfca529472", 0xe9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') write$P9_RVERSION(r3, 0x0, 0x0) flistxattr(r1, &(0x7f00000002c0)=""/99, 0x63) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x4}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4881) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket(0x10, 0x3, 0x21) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r6], 0x20}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, 0x0, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@remote, @private, 0x0}, &(0x7f0000000600)=0xc) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="a01400001700080001000000ffdbdf25fc000000000000000000000000000001000004d36c0000007f000001000000000000000000000000ff010000000000000000000000000001ff0200000000000000000000000000014e2200034e2400000b0000202f000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="fe80000000000030000000000000000000000000000000004e2400044e220000020080000c000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="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"], 0x14a0}, 0x1, 0x0, 0x0, 0x20040001}, 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x400) 215.863038ms ago: executing program 6 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000004500000088"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 210.499688ms ago: executing program 0 (id=467): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r7, 0x10, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0xc, 0x99, {0xff3, 0x39}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4084040}, 0x20000000) unlink(&(0x7f0000000180)='./cgroup/../file0\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xf, 0x13, "ec28a144f13d7607"}) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0xa) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 182.717419ms ago: executing program 2 (id=468): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000140)=""/244, 0xf4}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000001480)=""/212, 0xd4}, {&(0x7f00000013c0)=""/80, 0x50}], 0x7, 0x0, 0x0, 0x40810}, 0x20008081) 181.931309ms ago: executing program 7 (id=469): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) syz_io_uring_setup(0x21c7, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r3, 0x2030}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$TCSETA(r3, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) syz_emit_ethernet(0x69, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 180.287539ms ago: executing program 6 (id=470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0xfffffffffffffffc}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x246200, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 96.756859ms ago: executing program 2 (id=471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) 96.396249ms ago: executing program 0 (id=472): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x0, 0x7}) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x0, 'lblc\x00', 0x0, 0x0, 0x37}, 0x2c) 85.738869ms ago: executing program 2 (id=473): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x81, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x30, r4, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x77}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d70630000fedbdf251700000008000300", @ANYRES32, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c000380080002000300000006000100fcff00000800020003000000050002"], 0x64}}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket(0x1e, 0x4, 0x0) fdatasync(0xffffffffffffffff) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x80000000000) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r7, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0) getdents64(r3, 0x0, 0x22) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000080000023000000000000180d000000cce601a0deff115f004607aa8ed49c56a588bc4ef3c845149fd6f4e79125f040950dfe5057982327c352c90a9ff0a36f6b28a93475cfe4a084eac2403b7b2a4645a2a9ffc202670344ca26dc133f98f45d6d9b483a32c9d26420c6762363c8f88baf445e97fb53e8455d853cdbc5613ad40cd10b1476c79439483e3f3226", @ANYRES32=r1, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 84.659959ms ago: executing program 8 (id=474): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032bbd7000ffdbdf25040000000800190064010102050021000000000006000e0083004000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r6 = open(&(0x7f0000000480)='./file0/file0\x00', 0x20101, 0xa2) write$binfmt_misc(r6, &(0x7f0000000500)="0bebec21314012b5ab1638891a44b890f2debd99789ce304d525ebe47db12ffb0244131f2624d3286c5be60f1c9113f6ec39f32b95aea0ddf51c314a0ee20a581eeb8e32d4edcc5f642d09d734ae15a938444b11213de7bdfc44df1b744bdd3f45f3a95cb13e47ee34d69de74e37cad6833aca9affab803ef37fdc58e1bb01b6272139b65087b5b8cd193c25eadfd1ac98f5d0d35b", 0x95) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000640)=0x101, 0x4) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r8 = getuid() connect$unix(0xffffffffffffffff, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a00)=ANY=[@ANYBLOB="021074070ba406d7363140172adbdf250800120000000200bc6b6e0000c0010006005e250c4287de00050600000400000000000000d5da1ca700000000000000000000000000000001fc020000000000000000000000000002cef6bd957accea7a4f435a3a133ed25e3c173a030dfb0553426a508b5a336d05f8fd4f8f06788e8c9cdad52bff0698fc4836ed79716d3af30fcd23b01c035c8c4396463257555647bd90356ae24823fe679ead693b4e92443a119e7c49eec3bddedeb01c6ecfa32b02faef990e93910b1fa313af014c42a306ce1c2d41e86cf4c7d0f0dfa61b96da1c0698de"], 0x58}}, 0x20040000) lchown(&(0x7f0000000e40)='./file0\x00', r8, 0xee01) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000017c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0x11c) fstat(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r7, &(0x7f0000000800)='./file0/file0\x00', 0x900, 0x4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {r8, 0xee00}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f80)={0x0, 0x0, 0x0}, &(0x7f0000001fc0)=0xc) mount$bpf(0x0, &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40), 0x2290a4, &(0x7f0000002140)=ANY=[@ANYRES64, @ANYRESHEX=r13, @ANYBLOB="24f492742f9aa0c9501970379f28478eb1f3adec"]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010005000000000002000700", @ANYRES32=r8, @ANYBLOB="02000300", @ANYRES32=r9, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000500", @ANYRES32=r8, @ANYBLOB="02000500", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000500", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="040000000000000008000200", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="10000600000000000000000000009c00"], 0x8c, 0x1) 65.76574ms ago: executing program 0 (id=475): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) read(r0, &(0x7f0000000000)=""/269, 0xfffffdef) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 0s ago: executing program 0 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="c67f0d7df9", 0x5}], 0x1) kernel console output (not intermixed with test programs): IPVS: using max 1968 ests per chain, 98400 per kthread [ 34.028763][ T3502] mmap: syz.2.19 (3502) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.119811][ T3507] loop4: detected capacity change from 0 to 4096 [ 34.138780][ T3507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.201929][ T3507] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.224071][ T3507] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 34.330908][ T3510] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 34.383307][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.471754][ T3512] FAULT_INJECTION: forcing a failure. [ 34.471754][ T3512] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.471813][ T3512] CPU: 1 UID: 0 PID: 3512 Comm: syz.3.23 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 34.471841][ T3512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.471901][ T3512] Call Trace: [ 34.471909][ T3512] [ 34.471917][ T3512] dump_stack_lvl+0xf2/0x150 [ 34.471950][ T3512] dump_stack+0x15/0x1a [ 34.471976][ T3512] should_fail_ex+0x24a/0x260 [ 34.472084][ T3512] should_fail+0xb/0x10 [ 34.472117][ T3512] should_fail_usercopy+0x1a/0x20 [ 34.472161][ T3512] _copy_to_iter+0xd5/0xd00 [ 34.472196][ T3512] ? xfd_validate_state+0x46/0xf0 [ 34.472260][ T3512] ? save_fpregs_to_fpstate+0x102/0x160 [ 34.472295][ T3512] ? __virt_addr_valid+0x1ed/0x250 [ 34.472322][ T3512] ? __check_object_size+0x364/0x520 [ 34.472350][ T3512] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 34.472447][ T3512] __skb_datagram_iter+0xc8/0x610 [ 34.472546][ T3512] skb_copy_datagram_iter+0x41/0x130 [ 34.472581][ T3512] unix_stream_read_actor+0x44/0x70 [ 34.472649][ T3512] unix_stream_read_generic+0x6be/0x1470 [ 34.472692][ T3512] ? __pfx_autoremove_wake_function+0x10/0x10 [ 34.472717][ T3512] unix_stream_recvmsg+0xc4/0xf0 [ 34.472736][ T3512] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 34.472833][ T3512] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 34.472854][ T3512] sock_recvmsg+0x13f/0x170 [ 34.472890][ T3512] ____sys_recvmsg+0xf9/0x280 [ 34.472939][ T3512] __sys_recvmsg+0x1c0/0x260 [ 34.472983][ T3512] __x64_sys_recvmsg+0x46/0x50 [ 34.473012][ T3512] x64_sys_call+0xc64/0x2dc0 [ 34.473062][ T3512] do_syscall_64+0xc9/0x1c0 [ 34.473096][ T3512] ? clear_bhb_loop+0x55/0xb0 [ 34.473129][ T3512] ? clear_bhb_loop+0x55/0xb0 [ 34.473159][ T3512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.473260][ T3512] RIP: 0033:0x7fdf8f7fd169 [ 34.473350][ T3512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.473368][ T3512] RSP: 002b:00007fdf8de61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 34.473409][ T3512] RAX: ffffffffffffffda RBX: 00007fdf8fa15fa0 RCX: 00007fdf8f7fd169 [ 34.473422][ T3512] RDX: 0000000040000100 RSI: 0000400000000100 RDI: 0000000000000004 [ 34.473435][ T3512] RBP: 00007fdf8de61090 R08: 0000000000000000 R09: 0000000000000000 [ 34.473497][ T3512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.473511][ T3512] R13: 0000000000000000 R14: 00007fdf8fa15fa0 R15: 00007ffd68da8868 [ 34.473543][ T3512] [ 34.683750][ T3375] IPVS: starting estimator thread 0... [ 34.771899][ T3527] IPVS: using max 2304 ests per chain, 115200 per kthread [ 34.920177][ T3302] syz-executor (3302) used greatest stack depth: 10752 bytes left [ 35.047433][ T168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.249494][ T168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.284385][ T3502] +}[@ (3502) used greatest stack depth: 7368 bytes left [ 35.300855][ T168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.325599][ T3545] pimreg: entered allmulticast mode [ 35.332206][ T3545] pimreg: left allmulticast mode [ 35.360080][ T168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.465190][ T3552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 35.474215][ T3554] loop0: detected capacity change from 0 to 4096 [ 35.489059][ T3556] FAULT_INJECTION: forcing a failure. [ 35.489059][ T3556] name failslab, interval 1, probability 0, space 0, times 1 [ 35.501829][ T3556] CPU: 1 UID: 0 PID: 3556 Comm: syz.2.37 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 35.501871][ T3556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.501886][ T3556] Call Trace: [ 35.501891][ T3556] [ 35.501898][ T3556] dump_stack_lvl+0xf2/0x150 [ 35.501926][ T3556] dump_stack+0x15/0x1a [ 35.501946][ T3556] should_fail_ex+0x24a/0x260 [ 35.502045][ T3556] should_failslab+0x8f/0xb0 [ 35.502074][ T3556] kmem_cache_alloc_noprof+0x52/0x320 [ 35.502096][ T3556] ? audit_log_start+0x34c/0x6b0 [ 35.502134][ T3556] ? audit_log_end+0x1d0/0x1e0 [ 35.502214][ T3556] audit_log_start+0x34c/0x6b0 [ 35.502252][ T3556] ? kmem_cache_free+0xdc/0x2d0 [ 35.502325][ T3556] audit_seccomp+0x4b/0x130 [ 35.502357][ T3556] ? should_fail_ex+0xd7/0x260 [ 35.502386][ T3556] __seccomp_filter+0x6fa/0x1180 [ 35.502412][ T3556] ? lsm_fill_user_ctx+0x185/0x1d0 [ 35.502469][ T3556] __secure_computing+0x9f/0x1c0 [ 35.502493][ T3556] syscall_trace_enter+0xd1/0x1f0 [ 35.502518][ T3556] ? fpregs_assert_state_consistent+0x83/0xa0 [ 35.502585][ T3556] do_syscall_64+0xaa/0x1c0 [ 35.502622][ T3556] ? clear_bhb_loop+0x55/0xb0 [ 35.502653][ T3556] ? clear_bhb_loop+0x55/0xb0 [ 35.502680][ T3556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.502759][ T3556] RIP: 0033:0x7fa8328bbb7c [ 35.502776][ T3556] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 35.502794][ T3556] RSP: 002b:00007fa830f21030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.502812][ T3556] RAX: ffffffffffffffda RBX: 00007fa832ad5fa0 RCX: 00007fa8328bbb7c [ 35.502824][ T3556] RDX: 000000000000000f RSI: 00007fa830f210a0 RDI: 0000000000000005 [ 35.502837][ T3556] RBP: 00007fa830f21090 R08: 0000000000000000 R09: 0000000000000000 [ 35.502851][ T3556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.502867][ T3556] R13: 0000000000000000 R14: 00007fa832ad5fa0 R15: 00007fffb8afca38 [ 35.502885][ T3556] [ 35.505359][ T3554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.678886][ T3538] chnl_net:caif_netlink_parms(): no params data found [ 35.738011][ T3554] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.795878][ T3554] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 35.822841][ T168] bridge_slave_1: left allmulticast mode [ 35.828699][ T168] bridge_slave_1: left promiscuous mode [ 35.834465][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.872113][ T168] bridge_slave_0: left allmulticast mode [ 35.878029][ T168] bridge_slave_0: left promiscuous mode [ 35.883798][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.891670][ T3585] loop4: detected capacity change from 0 to 128 [ 35.916930][ T3585] +}[@: attempt to access beyond end of device [ 35.916930][ T3585] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 35.934372][ T3554] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 36.010739][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.020809][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.030364][ T168] bond0 (unregistering): Released all slaves [ 36.091280][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.137846][ T3598] loop3: detected capacity change from 0 to 128 [ 36.143771][ T3598] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 36.172290][ T168] hsr_slave_0: left promiscuous mode [ 36.178142][ T168] hsr_slave_1: left promiscuous mode [ 36.178546][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.178579][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.179075][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.179101][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.181696][ T168] veth1_macvtap: left promiscuous mode [ 36.181720][ T168] veth0_macvtap: left promiscuous mode [ 36.181761][ T168] veth1_vlan: left promiscuous mode [ 36.181790][ T168] veth0_vlan: left promiscuous mode [ 36.182271][ T3598] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.198052][ T3598] ext2 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.243436][ T3602] loop0: detected capacity change from 0 to 128 [ 36.353213][ T3598] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 36.377775][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.560943][ T168] team0 (unregistering): Port device team_slave_1 removed [ 36.577506][ T168] team0 (unregistering): Port device team_slave_0 removed [ 36.621544][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.621606][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.621684][ T3538] bridge_slave_0: entered allmulticast mode [ 36.622260][ T3538] bridge_slave_0: entered promiscuous mode [ 36.664741][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.664777][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.664932][ T3538] bridge_slave_1: entered allmulticast mode [ 36.666848][ T3538] bridge_slave_1: entered promiscuous mode [ 36.747610][ T3538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.769743][ T3538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.817784][ T3618] loop2: detected capacity change from 0 to 256 [ 36.837925][ T3538] team0: Port device team_slave_0 added [ 36.846882][ T3538] team0: Port device team_slave_1 added [ 36.870598][ T3538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.877669][ T3538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.903720][ T3538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.914407][ T1051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 36.930079][ T3538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.937095][ T3538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.963238][ T3538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.974104][ T1051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 36.985019][ T3374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 37.036355][ T3631] loop0: detected capacity change from 0 to 1024 [ 37.044451][ T3538] hsr_slave_0: entered promiscuous mode [ 37.058588][ T3538] hsr_slave_1: entered promiscuous mode [ 37.069825][ T3631] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 37.070128][ T3538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.098403][ T3538] Cannot create hsr debugfs directory [ 37.102300][ T3631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 37.113221][ T1051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 37.127767][ T3631] System zones: 0-1, 3-36 [ 37.132463][ T3631] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.181499][ T3642] loop2: detected capacity change from 0 to 4096 [ 37.188036][ T3631] EXT4-fs (loop0): 1 orphan inode deleted [ 37.200119][ T3631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.219566][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.286791][ T3538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.308667][ T3538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.318765][ T3642] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 37.333462][ T3538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.333699][ T3650] loop4: detected capacity change from 0 to 128 [ 37.349067][ T3538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.357946][ T3374] IPVS: starting estimator thread 0... [ 37.377889][ T3650] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 37.386893][ T3642] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 37.406588][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.410768][ T3650] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.440707][ T3538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.456656][ T3653] IPVS: using max 1872 ests per chain, 93600 per kthread [ 37.463783][ T3650] ext2 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.506223][ T3538] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.528495][ T3667] FAULT_INJECTION: forcing a failure. [ 37.528495][ T3667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.541628][ T3667] CPU: 0 UID: 0 PID: 3667 Comm: syz.0.56 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 37.541659][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.541674][ T3667] Call Trace: [ 37.541682][ T3667] [ 37.541725][ T3667] dump_stack_lvl+0xf2/0x150 [ 37.541758][ T3667] dump_stack+0x15/0x1a [ 37.541784][ T3667] should_fail_ex+0x24a/0x260 [ 37.541891][ T3667] should_fail+0xb/0x10 [ 37.541918][ T3667] should_fail_usercopy+0x1a/0x20 [ 37.541980][ T3667] _copy_from_user+0x1c/0xa0 [ 37.542001][ T3667] copy_msghdr_from_user+0x54/0x2a0 [ 37.542117][ T3667] ? __fget_files+0x17c/0x1c0 [ 37.542230][ T3667] __sys_sendmsg+0x13e/0x230 [ 37.542277][ T3667] __x64_sys_sendmsg+0x46/0x50 [ 37.542383][ T3667] x64_sys_call+0x2734/0x2dc0 [ 37.542418][ T3667] do_syscall_64+0xc9/0x1c0 [ 37.542456][ T3667] ? clear_bhb_loop+0x55/0xb0 [ 37.542489][ T3667] ? clear_bhb_loop+0x55/0xb0 [ 37.542522][ T3667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.542560][ T3667] RIP: 0033:0x7ff7d3a9d169 [ 37.542578][ T3667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.542671][ T3667] RSP: 002b:00007ff7d2107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.542693][ T3667] RAX: ffffffffffffffda RBX: 00007ff7d3cb5fa0 RCX: 00007ff7d3a9d169 [ 37.542708][ T3667] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000005 [ 37.542722][ T3667] RBP: 00007ff7d2107090 R08: 0000000000000000 R09: 0000000000000000 [ 37.542736][ T3667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.542750][ T3667] R13: 0000000000000000 R14: 00007ff7d3cb5fa0 R15: 00007fffb0681898 [ 37.542771][ T3667] [ 37.745536][ T3673] FAULT_INJECTION: forcing a failure. [ 37.745536][ T3673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.745766][ T3670] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 37.758783][ T3673] CPU: 1 UID: 0 PID: 3673 Comm: syz.0.58 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 37.758839][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.758853][ T3673] Call Trace: [ 37.758860][ T3673] [ 37.758869][ T3673] dump_stack_lvl+0xf2/0x150 [ 37.758903][ T3673] dump_stack+0x15/0x1a [ 37.758927][ T3673] should_fail_ex+0x24a/0x260 [ 37.758962][ T3673] should_fail+0xb/0x10 [ 37.759032][ T3673] should_fail_usercopy+0x1a/0x20 [ 37.759076][ T3673] _copy_from_user+0x1c/0xa0 [ 37.759103][ T3673] move_addr_to_kernel+0x82/0x120 [ 37.759180][ T3673] __sys_connect+0x67/0x1b0 [ 37.759212][ T3673] __x64_sys_connect+0x41/0x50 [ 37.759239][ T3673] x64_sys_call+0x22a7/0x2dc0 [ 37.759273][ T3673] do_syscall_64+0xc9/0x1c0 [ 37.759322][ T3673] ? clear_bhb_loop+0x55/0xb0 [ 37.759437][ T3673] ? clear_bhb_loop+0x55/0xb0 [ 37.759471][ T3673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.759506][ T3673] RIP: 0033:0x7ff7d3a9d169 [ 37.759524][ T3673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.759577][ T3673] RSP: 002b:00007ff7d2107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 37.759600][ T3673] RAX: ffffffffffffffda RBX: 00007ff7d3cb5fa0 RCX: 00007ff7d3a9d169 [ 37.759617][ T3673] RDX: 0000000000000010 RSI: 0000400000000040 RDI: 0000000000000003 [ 37.759632][ T3673] RBP: 00007ff7d2107090 R08: 0000000000000000 R09: 0000000000000000 [ 37.759647][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.759661][ T3673] R13: 0000000000000000 R14: 00007ff7d3cb5fa0 R15: 00007fffb0681898 [ 37.759683][ T3673] [ 37.764257][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.803935][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.804437][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.873272][ T3676] program syz.3.60 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.893373][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.977042][ T3682] loop0: detected capacity change from 0 to 128 [ 37.977428][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.984276][ T3682] EXT4-fs: Ignoring removed nobh option [ 37.998241][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.014102][ T3682] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.033634][ T3682] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.052127][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 38.052208][ T30] audit: type=1326 audit(1742028963.168:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1fb2d169 code=0x7ffc0000 [ 38.081884][ T30] audit: type=1326 audit(1742028963.168:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1fb2d169 code=0x7ffc0000 [ 38.120564][ T30] audit: type=1400 audit(1742028963.238:303): avc: denied { add_name } for pid=3675 comm="syz.0.61" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.141084][ T30] audit: type=1326 audit(1742028963.238:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f2b1fb2d169 code=0x7ffc0000 [ 38.164415][ T30] audit: type=1326 audit(1742028963.238:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1fb2d169 code=0x7ffc0000 [ 38.187816][ T30] audit: type=1400 audit(1742028963.238:306): avc: denied { create } for pid=3675 comm="syz.0.61" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.207967][ T30] audit: type=1400 audit(1742028963.238:307): avc: denied { read write open } for pid=3675 comm="syz.0.61" path="/9/mnt/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.272957][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.284219][ T30] audit: type=1326 audit(1742028963.258:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1fb2d169 code=0x7ffc0000 [ 38.285269][ T3703] loop3: detected capacity change from 0 to 1024 [ 38.323537][ T3703] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 38.353730][ T3538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.383532][ T3706] loop0: detected capacity change from 0 to 128 [ 38.390838][ T3706] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 38.401135][ T3709] program syz.4.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.419274][ T3703] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 38.437255][ T3703] System zones: 0-1, 3-36 [ 38.438566][ T3706] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.445671][ T3703] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.463424][ T3703] EXT4-fs (loop3): 1 orphan inode deleted [ 38.469632][ T3706] ext2 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.517871][ T3703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.575258][ T3728] loop4: detected capacity change from 0 to 512 [ 38.582759][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.589174][ T3728] EXT4-fs: Ignoring removed orlov option [ 38.592258][ T3378] IPVS: starting estimator thread 0... [ 38.603166][ T30] audit: type=1400 audit(1742028963.708:309): avc: denied { mounton } for pid=3726 comm="syz.4.67" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.647267][ T3728] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.676197][ T3538] veth0_vlan: entered promiscuous mode [ 38.686575][ T3730] IPVS: using max 2400 ests per chain, 120000 per kthread [ 38.709316][ T3728] EXT4-fs (loop4): 1 orphan inode deleted [ 38.730957][ T3315] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 38.740897][ T3315] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 38.762947][ T3538] veth1_vlan: entered promiscuous mode [ 38.774072][ T3728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.813654][ T3538] veth0_macvtap: entered promiscuous mode [ 38.822939][ T3538] veth1_macvtap: entered promiscuous mode [ 38.831645][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.843038][ T3728] ext4 filesystem being mounted at /syzcgroup/unified/syz4 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.863798][ T3538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.874406][ T3538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.884283][ T3538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.894835][ T3538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.904726][ T3538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.915259][ T3538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.925238][ T3538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.935807][ T3538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.938836][ T3728] devpts: called with bogus options [ 38.988160][ T3728] syz.4.67 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.000328][ T3742] loop0: detected capacity change from 0 to 4096 [ 39.012834][ T3742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.040517][ T3538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.063732][ T3538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.074366][ T3538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.084232][ T3538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.094709][ T3538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.104585][ T3538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.115459][ T3538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.125355][ T3538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.136011][ T3538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.201102][ T3747] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 39.207047][ T3538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.228811][ T3538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.237659][ T3538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.246464][ T3538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.255282][ T3538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.267667][ T3753] loop2: detected capacity change from 0 to 128 [ 39.279317][ T3753] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 39.298021][ T3753] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.315401][ T3753] ext2 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.386717][ T3742] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 39.417810][ T3753] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 39.455233][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.483893][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.591048][ T3792] program syz.5.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.632233][ T3781] ALSA: seq fatal error: cannot create timer (-22) [ 39.982552][ T3737] syz.3.68 (3737) used greatest stack depth: 7288 bytes left [ 40.065779][ T3821] loop3: detected capacity change from 0 to 256 [ 40.167194][ T3831] loop0: detected capacity change from 0 to 1024 [ 40.189714][ T3797] netlink: 'syz.5.79': attribute type 13 has an invalid length. [ 40.233989][ T3831] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 40.265741][ T3831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 40.284985][ T3831] System zones: 0-1, 3-36 [ 40.290086][ T3797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.315974][ T3831] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.328065][ T3831] EXT4-fs (loop0): 1 orphan inode deleted [ 40.334447][ T3831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.357599][ T3835] loop3: detected capacity change from 0 to 8192 [ 40.437414][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.529147][ T3847] syz.3.83 uses obsolete (PF_INET,SOCK_PACKET) [ 40.529181][ T3849] FAULT_INJECTION: forcing a failure. [ 40.529181][ T3849] name failslab, interval 1, probability 0, space 0, times 0 [ 40.548170][ T3849] CPU: 0 UID: 0 PID: 3849 Comm: syz.2.86 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 40.548197][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.548211][ T3849] Call Trace: [ 40.548219][ T3849] [ 40.548228][ T3849] dump_stack_lvl+0xf2/0x150 [ 40.548257][ T3849] dump_stack+0x15/0x1a [ 40.548385][ T3849] should_fail_ex+0x24a/0x260 [ 40.548417][ T3849] should_failslab+0x8f/0xb0 [ 40.548452][ T3849] kmem_cache_alloc_node_noprof+0x59/0x320 [ 40.548478][ T3849] ? __alloc_skb+0x10b/0x310 [ 40.548522][ T3849] __alloc_skb+0x10b/0x310 [ 40.548543][ T3849] ? audit_log_start+0x34c/0x6b0 [ 40.548576][ T3849] audit_log_start+0x368/0x6b0 [ 40.548668][ T3849] audit_seccomp+0x4b/0x130 [ 40.548697][ T3849] __seccomp_filter+0x6fa/0x1180 [ 40.548724][ T3849] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 40.548755][ T3849] ? vfs_write+0x644/0x920 [ 40.548803][ T3849] __secure_computing+0x9f/0x1c0 [ 40.548841][ T3849] syscall_trace_enter+0xd1/0x1f0 [ 40.548868][ T3849] ? fpregs_assert_state_consistent+0x83/0xa0 [ 40.548920][ T3849] do_syscall_64+0xaa/0x1c0 [ 40.548957][ T3849] ? clear_bhb_loop+0x55/0xb0 [ 40.549009][ T3849] ? clear_bhb_loop+0x55/0xb0 [ 40.549041][ T3849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.549069][ T3849] RIP: 0033:0x7fa8328bd169 [ 40.549084][ T3849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.549141][ T3849] RSP: 002b:00007fa830f21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 40.549163][ T3849] RAX: ffffffffffffffda RBX: 00007fa832ad5fa0 RCX: 00007fa8328bd169 [ 40.549177][ T3849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 40.549188][ T3849] RBP: 00007fa830f21090 R08: 0000000000000000 R09: 0000000000000000 [ 40.549199][ T3849] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 40.549211][ T3849] R13: 0000000000000000 R14: 00007fa832ad5fa0 R15: 00007fffb8afca38 [ 40.549249][ T3849] [ 40.775965][ T3854] loop0: detected capacity change from 0 to 128 [ 40.804671][ T3854] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 40.830223][ T3854] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.842470][ T3856] loop5: detected capacity change from 0 to 128 [ 40.856944][ T3856] EXT4-fs: Ignoring removed nobh option [ 40.863164][ T3854] ext2 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.912279][ T3856] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.912466][ T3856] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.029121][ T3859] loop2: detected capacity change from 0 to 8192 [ 41.041528][ T3859] ======================================================= [ 41.041528][ T3859] WARNING: The mand mount option has been deprecated and [ 41.041528][ T3859] and is ignored by this kernel. Remove the mand [ 41.041528][ T3859] option from the mount to silence this warning. [ 41.041528][ T3859] ======================================================= [ 41.074988][ T3538] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.097813][ T3864] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 41.151105][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.215102][ T3859] bio_check_eod: 4039 callbacks suppressed [ 41.215118][ T3859] syz.2.89: attempt to access beyond end of device [ 41.215118][ T3859] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 41.234470][ T3859] Buffer I/O error on dev loop2, logical block 57847, async page read [ 41.306713][ T3876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.93'. [ 41.365808][ T3880] loop2: detected capacity change from 0 to 256 [ 41.377611][ T3878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 41.463513][ T3883] loop5: detected capacity change from 0 to 128 [ 41.484213][ T3883] EXT4-fs: Ignoring removed nobh option [ 41.506935][ T3885] pimreg: entered allmulticast mode [ 41.514304][ T3885] pimreg: left allmulticast mode [ 41.532626][ T3883] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.561861][ T3883] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.597846][ T3891] loop0: detected capacity change from 0 to 128 [ 41.616133][ T3538] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.642474][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 41.689816][ T3891] +}[@: attempt to access beyond end of device [ 41.689816][ T3891] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 41.719905][ T3901] loop5: detected capacity change from 0 to 128 [ 41.794837][ T3905] netlink: 'syz.2.105': attribute type 21 has an invalid length. [ 41.802710][ T3905] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.857855][ T3908] devpts: called with bogus options [ 41.864560][ T3901] +}[@: attempt to access beyond end of device [ 41.864560][ T3901] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 41.900368][ T3891] +}[@: attempt to access beyond end of device [ 41.900368][ T3891] loop0: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 41.938465][ T3901] +}[@: attempt to access beyond end of device [ 41.938465][ T3901] loop5: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 41.965961][ T3891] +}[@: attempt to access beyond end of device [ 41.965961][ T3891] loop0: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 41.982509][ T3914] loop2: detected capacity change from 0 to 4096 [ 41.987081][ T3901] +}[@: attempt to access beyond end of device [ 41.987081][ T3901] loop5: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 42.005499][ T3914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.008958][ T3919] FAULT_INJECTION: forcing a failure. [ 42.008958][ T3919] name failslab, interval 1, probability 0, space 0, times 0 [ 42.030882][ T3919] CPU: 1 UID: 0 PID: 3919 Comm: syz.4.109 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 42.030912][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.030926][ T3919] Call Trace: [ 42.030933][ T3919] [ 42.031001][ T3919] dump_stack_lvl+0xf2/0x150 [ 42.031036][ T3919] dump_stack+0x15/0x1a [ 42.031063][ T3919] should_fail_ex+0x24a/0x260 [ 42.031100][ T3919] should_failslab+0x8f/0xb0 [ 42.031198][ T3919] kmem_cache_alloc_noprof+0x52/0x320 [ 42.031220][ T3919] ? getname_flags+0x81/0x3b0 [ 42.031287][ T3919] getname_flags+0x81/0x3b0 [ 42.031331][ T3919] user_path_at+0x26/0x120 [ 42.031361][ T3919] __se_sys_move_mount+0xfd/0x730 [ 42.031401][ T3919] ? fput+0x1c4/0x200 [ 42.031487][ T3919] __x64_sys_move_mount+0x67/0x80 [ 42.031526][ T3919] x64_sys_call+0x2608/0x2dc0 [ 42.031572][ T3919] do_syscall_64+0xc9/0x1c0 [ 42.031679][ T3919] ? clear_bhb_loop+0x55/0xb0 [ 42.031706][ T3919] ? clear_bhb_loop+0x55/0xb0 [ 42.031756][ T3919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.031789][ T3919] RIP: 0033:0x7f2b1fb2d169 [ 42.031808][ T3919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.031827][ T3919] RSP: 002b:00007f2b1e191038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 42.031920][ T3919] RAX: ffffffffffffffda RBX: 00007f2b1fd45fa0 RCX: 00007f2b1fb2d169 [ 42.031935][ T3919] RDX: ffffffffffffff9c RSI: 0000400000000140 RDI: 0000000000000007 [ 42.031994][ T3919] RBP: 00007f2b1e191090 R08: 0000000000000107 R09: 0000000000000000 [ 42.032010][ T3919] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000001 [ 42.032090][ T3919] R13: 0000000000000000 R14: 00007f2b1fd45fa0 R15: 00007ffdcf5bf018 [ 42.032112][ T3919] [ 42.196891][ T3901] +}[@: attempt to access beyond end of device [ 42.196891][ T3901] loop5: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 42.229224][ T3914] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 42.243465][ T3922] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 42.254402][ T3889] syz.0.100: attempt to access beyond end of device [ 42.254402][ T3889] loop0: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 42.332088][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.429587][ T3932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.513080][ T3932] loop2: detected capacity change from 0 to 2048 [ 42.614752][ T3932] netlink: 'syz.2.111': attribute type 11 has an invalid length. [ 42.622687][ T3932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.111'. [ 42.703904][ T3953] FAULT_INJECTION: forcing a failure. [ 42.703904][ T3953] name failslab, interval 1, probability 0, space 0, times 0 [ 42.716646][ T3953] CPU: 1 UID: 0 PID: 3953 Comm: syz.0.116 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 42.716676][ T3953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.716691][ T3953] Call Trace: [ 42.716699][ T3953] [ 42.716707][ T3953] dump_stack_lvl+0xf2/0x150 [ 42.716742][ T3953] dump_stack+0x15/0x1a [ 42.716782][ T3953] should_fail_ex+0x24a/0x260 [ 42.716817][ T3953] ? alloc_pipe_info+0xb0/0x360 [ 42.716866][ T3953] should_failslab+0x8f/0xb0 [ 42.716946][ T3953] __kmalloc_cache_noprof+0x4e/0x320 [ 42.716973][ T3953] alloc_pipe_info+0xb0/0x360 [ 42.717009][ T3953] splice_direct_to_actor+0x60f/0x670 [ 42.717044][ T3953] ? __pfx_direct_splice_actor+0x10/0x10 [ 42.717147][ T3953] ? 0xffffffff81000000 [ 42.717168][ T3953] ? selinux_file_permission+0x22a/0x360 [ 42.717278][ T3953] ? __rcu_read_unlock+0x4e/0x70 [ 42.717306][ T3953] ? avc_policy_seqno+0x15/0x20 [ 42.717329][ T3953] ? selinux_file_permission+0x22a/0x360 [ 42.717486][ T3953] do_splice_direct+0xd7/0x150 [ 42.717519][ T3953] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 42.717609][ T3953] do_sendfile+0x398/0x660 [ 42.717638][ T3953] __x64_sys_sendfile64+0x110/0x150 [ 42.717713][ T3953] x64_sys_call+0xfbd/0x2dc0 [ 42.717746][ T3953] do_syscall_64+0xc9/0x1c0 [ 42.717781][ T3953] ? clear_bhb_loop+0x55/0xb0 [ 42.717843][ T3953] ? clear_bhb_loop+0x55/0xb0 [ 42.717877][ T3953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.717912][ T3953] RIP: 0033:0x7ff7d3a9d169 [ 42.717929][ T3953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.717951][ T3953] RSP: 002b:00007ff7d2107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 42.717983][ T3953] RAX: ffffffffffffffda RBX: 00007ff7d3cb5fa0 RCX: 00007ff7d3a9d169 [ 42.717995][ T3953] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 42.718047][ T3953] RBP: 00007ff7d2107090 R08: 0000000000000000 R09: 0000000000000000 [ 42.718061][ T3953] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.718075][ T3953] R13: 0000000000000000 R14: 00007ff7d3cb5fa0 R15: 00007fffb0681898 [ 42.718096][ T3953] [ 42.946654][ T3932] infiniband syz0: set active [ 42.951463][ T3932] infiniband syz0: added veth1_to_bridge [ 42.963298][ T3932] RDS/IB: syz0: added [ 42.972053][ T3932] smc: adding ib device syz0 with port count 1 [ 42.978329][ T3932] smc: ib device syz0 port 1 has pnetid [ 43.170992][ T3962] loop0: detected capacity change from 0 to 128 [ 43.178581][ T3962] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 43.244332][ T3964] loop5: detected capacity change from 0 to 4096 [ 43.273839][ T3962] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.291208][ T3964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.306586][ T3962] ext2 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.354737][ T3964] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.374352][ T3964] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 43.409174][ T3964] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 43.432625][ T3538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.489510][ T30] kauditd_printk_skb: 331 callbacks suppressed [ 43.489525][ T30] audit: type=1326 audit(1742028968.608:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.519808][ T30] audit: type=1326 audit(1742028968.608:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.574331][ T30] audit: type=1326 audit(1742028968.668:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.597895][ T30] audit: type=1326 audit(1742028968.668:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.621368][ T30] audit: type=1326 audit(1742028968.668:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.644780][ T30] audit: type=1326 audit(1742028968.668:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.668151][ T30] audit: type=1326 audit(1742028968.668:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.691482][ T30] audit: type=1326 audit(1742028968.668:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.714724][ T30] audit: type=1326 audit(1742028968.668:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.738111][ T30] audit: type=1326 audit(1742028968.668:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.5.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cd25d169 code=0x7ffc0000 [ 43.771632][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.827419][ T3374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 43.845680][ T3979] loop2: detected capacity change from 0 to 1024 [ 43.904560][ T3985] sock: sock_timestamping_bind_phc: sock not bind to device [ 43.926714][ T3979] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 43.959546][ T3987] loop0: detected capacity change from 0 to 128 [ 43.995123][ T3987] +}[@: attempt to access beyond end of device [ 43.995123][ T3987] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 44.001958][ T3979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 44.026569][ T3979] System zones: 0-1, 3-36 [ 44.075821][ T3979] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.123429][ T3979] EXT4-fs (loop2): 1 orphan inode deleted [ 44.137292][ T3979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.151551][ T4002] program syz.4.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.162534][ T4003] program syz.5.134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.220164][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.308348][ T4007] devpts: called with bogus options [ 44.468719][ T3374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 44.468868][ T3374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 44.468990][ T3374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 44.942902][ T4041] SET target dimension over the limit! [ 44.981425][ T4041] loop0: detected capacity change from 0 to 2048 [ 45.097846][ T4041] netlink: 'syz.0.149': attribute type 11 has an invalid length. [ 45.105630][ T4041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'. [ 45.129186][ T4028] netlink: 'syz.4.145': attribute type 13 has an invalid length. [ 45.151836][ T4054] loop5: detected capacity change from 0 to 512 [ 45.176840][ T4054] EXT4-fs: Ignoring removed orlov option [ 45.193217][ T4028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.228819][ T4054] EXT4-fs (loop5): 1 orphan inode deleted [ 45.242301][ T4056] loop0: detected capacity change from 0 to 1024 [ 45.253598][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 45.254078][ T4054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.278264][ T4054] ext4 filesystem being mounted at /syzcgroup/unified/syz5 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.290901][ T4056] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 45.302361][ T4054] devpts: called with bogus options [ 45.324152][ T4056] loop0: detected capacity change from 0 to 512 [ 45.389715][ T4056] EXT4-fs: test_dummy_encryption option not supported [ 45.577763][ T4071] loop0: detected capacity change from 0 to 8192 [ 45.595407][ T4071] Buffer I/O error on dev loop0, logical block 57847, async page read [ 45.625505][ T4081] FAULT_INJECTION: forcing a failure. [ 45.625505][ T4081] name failslab, interval 1, probability 0, space 0, times 0 [ 45.638391][ T4081] CPU: 1 UID: 0 PID: 4081 Comm: syz.5.164 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 45.638417][ T4081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.638429][ T4081] Call Trace: [ 45.638474][ T4081] [ 45.638482][ T4081] dump_stack_lvl+0xf2/0x150 [ 45.638516][ T4081] dump_stack+0x15/0x1a [ 45.638542][ T4081] should_fail_ex+0x24a/0x260 [ 45.638577][ T4081] should_failslab+0x8f/0xb0 [ 45.638641][ T4081] __kmalloc_node_noprof+0xad/0x410 [ 45.638666][ T4081] ? vmemdup_user+0x42/0x1b0 [ 45.638730][ T4081] vmemdup_user+0x42/0x1b0 [ 45.638759][ T4081] map_get_next_key+0x140/0x310 [ 45.638826][ T4081] ? __sys_bpf+0x6c1/0x7a0 [ 45.638905][ T4081] __sys_bpf+0x6cb/0x7a0 [ 45.638951][ T4081] __x64_sys_bpf+0x43/0x50 [ 45.638979][ T4081] x64_sys_call+0x2914/0x2dc0 [ 45.639018][ T4081] do_syscall_64+0xc9/0x1c0 [ 45.639057][ T4081] ? clear_bhb_loop+0x55/0xb0 [ 45.639133][ T4081] ? clear_bhb_loop+0x55/0xb0 [ 45.639232][ T4081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.639260][ T4081] RIP: 0033:0x7f60cd25d169 [ 45.639278][ T4081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.639299][ T4081] RSP: 002b:00007f60cb8c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.639335][ T4081] RAX: ffffffffffffffda RBX: 00007f60cd475fa0 RCX: 00007f60cd25d169 [ 45.639347][ T4081] RDX: 0000000000000020 RSI: 0000400000000100 RDI: 0000000000000004 [ 45.639358][ T4081] RBP: 00007f60cb8c1090 R08: 0000000000000000 R09: 0000000000000000 [ 45.639383][ T4081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.639394][ T4081] R13: 0000000000000000 R14: 00007f60cd475fa0 R15: 00007ffe1626bf38 [ 45.639414][ T4081] [ 45.823894][ T1051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 45.835264][ T1051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 45.846123][ T1051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 45.960812][ T4086] netlink: 'syz.5.165': attribute type 11 has an invalid length. [ 45.968655][ T4086] netlink: 32 bytes leftover after parsing attributes in process `syz.5.165'. [ 45.994780][ T4092] loop0: detected capacity change from 0 to 512 [ 46.001419][ T4092] EXT4-fs: Ignoring removed orlov option [ 46.051169][ T4092] EXT4-fs (loop0): 1 orphan inode deleted [ 46.067190][ T3414] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 46.087055][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.100651][ T4092] ext4 filesystem being mounted at /syzcgroup/unified/syz0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.125965][ T4092] devpts: called with bogus options [ 46.291933][ T4117] loop2: detected capacity change from 0 to 1024 [ 46.313426][ T4118] program syz.5.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.324299][ T4119] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.171'. [ 46.341149][ T4117] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 46.369097][ T4108] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.171'. [ 46.376941][ T4117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 46.386374][ T4117] System zones: 0-1, 3-36 [ 46.393733][ T4117] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.401813][ T4117] EXT4-fs (loop2): 1 orphan inode deleted [ 46.409696][ T4117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.441842][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.593347][ T4130] netlink: 'syz.4.181': attribute type 11 has an invalid length. [ 46.593368][ T4130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.181'. [ 46.631789][ T4134] loop2: detected capacity change from 0 to 128 [ 46.656859][ T4136] devpts: called with bogus options [ 46.724245][ T4134] bio_check_eod: 2 callbacks suppressed [ 46.724262][ T4134] +}[@: attempt to access beyond end of device [ 46.724262][ T4134] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 46.748168][ T4134] +}[@: attempt to access beyond end of device [ 46.748168][ T4134] loop2: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 46.748334][ T4134] +}[@: attempt to access beyond end of device [ 46.748334][ T4134] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 46.748464][ T4134] +}[@: attempt to access beyond end of device [ 46.748464][ T4134] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 46.748507][ T4134] +}[@: attempt to access beyond end of device [ 46.748507][ T4134] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 46.748616][ T4134] +}[@: attempt to access beyond end of device [ 46.748616][ T4134] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 46.748691][ T4134] +}[@: attempt to access beyond end of device [ 46.748691][ T4134] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 46.748776][ T4134] +}[@: attempt to access beyond end of device [ 46.748776][ T4134] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 46.748851][ T4134] +}[@: attempt to access beyond end of device [ 46.748851][ T4134] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 46.748899][ T4134] +}[@: attempt to access beyond end of device [ 46.748899][ T4134] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 47.795283][ T4113] +}[@ (4113) used greatest stack depth: 6368 bytes left [ 47.811962][ T4158] program syz.5.189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.987827][ T4168] netlink: 'syz.0.194': attribute type 11 has an invalid length. [ 47.995708][ T4168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.194'. [ 48.101310][ T4182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 48.129107][ T4174] loop2: detected capacity change from 0 to 8192 [ 48.197263][ T4174] Buffer I/O error on dev loop2, logical block 57847, async page read [ 48.232329][ T4194] program syz.4.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.307514][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 48.342435][ T4202] devpts: called with bogus options [ 48.472620][ T4215] program syz.4.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.669772][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 48.669790][ T30] audit: type=1400 audit(1742028973.788:870): avc: granted { setsecparam } for pid=4226 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 48.748918][ T4240] FAULT_INJECTION: forcing a failure. [ 48.748918][ T4240] name failslab, interval 1, probability 0, space 0, times 0 [ 48.748944][ T4240] CPU: 0 UID: 0 PID: 4240 Comm: syz.5.223 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 48.748966][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.748978][ T4240] Call Trace: [ 48.748986][ T4240] [ 48.748994][ T4240] dump_stack_lvl+0xf2/0x150 [ 48.749027][ T4240] dump_stack+0x15/0x1a [ 48.749052][ T4240] should_fail_ex+0x24a/0x260 [ 48.749082][ T4240] should_failslab+0x8f/0xb0 [ 48.749112][ T4240] kmem_cache_alloc_noprof+0x52/0x320 [ 48.749139][ T4240] ? vm_area_dup+0x98/0x130 [ 48.749174][ T4240] vm_area_dup+0x98/0x130 [ 48.749196][ T4240] __split_vma+0xf7/0x6a0 [ 48.749226][ T4240] vma_modify+0x1a2/0x200 [ 48.749249][ T4240] vma_modify_policy+0xeb/0x120 [ 48.749277][ T4240] mbind_range+0x1d8/0x490 [ 48.749306][ T4240] __se_sys_set_mempolicy_home_node+0x38a/0x580 [ 48.749341][ T4240] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 48.749370][ T4240] x64_sys_call+0x2d10/0x2dc0 [ 48.749402][ T4240] do_syscall_64+0xc9/0x1c0 [ 48.749443][ T4240] ? clear_bhb_loop+0x55/0xb0 [ 48.749474][ T4240] ? clear_bhb_loop+0x55/0xb0 [ 48.749508][ T4240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.749539][ T4240] RIP: 0033:0x7f60cd25d169 [ 48.749556][ T4240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.749575][ T4240] RSP: 002b:00007f60cb8c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 48.749595][ T4240] RAX: ffffffffffffffda RBX: 00007f60cd475fa0 RCX: 00007f60cd25d169 [ 48.749610][ T4240] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000400000ffd000 [ 48.749623][ T4240] RBP: 00007f60cb8c1090 R08: 0000000000000000 R09: 0000000000000000 [ 48.749637][ T4240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.749650][ T4240] R13: 0000000000000000 R14: 00007f60cd475fa0 R15: 00007ffe1626bf38 [ 48.749671][ T4240] [ 48.811338][ T30] audit: type=1400 audit(1742028973.928:871): avc: denied { block_suspend } for pid=4244 comm="syz.5.225" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.909674][ T4250] loop3: detected capacity change from 0 to 512 [ 48.909890][ T4250] EXT4-fs: Ignoring removed orlov option [ 48.924048][ T4250] EXT4-fs (loop3): 1 orphan inode deleted [ 48.924468][ T4250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.924630][ T4250] ext4 filesystem being mounted at /syzcgroup/unified/syz3 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.932420][ T4250] devpts: called with bogus options [ 49.474533][ T30] audit: type=1400 audit(1742028974.588:872): avc: denied { remount } for pid=4261 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.496780][ T4262] binfmt_misc: register: failed to install interpreter file ./file2 [ 49.522586][ T30] audit: type=1400 audit(1742028974.638:873): avc: denied { mount } for pid=4270 comm="syz.3.234" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.556245][ T30] audit: type=1400 audit(1742028974.668:874): avc: denied { unmount } for pid=4270 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.561390][ T4273] program syz.0.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.653779][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.770338][ T30] audit: type=1400 audit(1742028974.888:875): avc: denied { ioctl } for pid=4289 comm="syz.2.242" path="socket:[7099]" dev="sockfs" ino=7099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.795188][ T30] audit: type=1400 audit(1742028974.888:876): avc: denied { sqpoll } for pid=4289 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.895931][ T4292] devpts: called with bogus options [ 49.913408][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.993121][ T30] audit: type=1400 audit(1742028975.098:877): avc: granted { setsecparam } for pid=4309 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 50.090563][ T4308] program syz.0.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.090800][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.110351][ T30] audit: type=1400 audit(1742028975.228:878): avc: denied { mounton } for pid=4317 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.135113][ T4316] SET target dimension over the limit! [ 50.150616][ T4316] loop2: detected capacity change from 0 to 2048 [ 50.185147][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.223505][ T30] audit: type=1400 audit(1742028975.318:879): avc: denied { create } for pid=4322 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 50.255856][ T4331] netlink: 'syz.2.250': attribute type 11 has an invalid length. [ 50.263832][ T4331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.250'. [ 50.280736][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.408435][ T51] bridge_slave_1: left allmulticast mode [ 50.414176][ T51] bridge_slave_1: left promiscuous mode [ 50.419966][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.486723][ T51] bridge_slave_0: left allmulticast mode [ 50.492436][ T51] bridge_slave_0: left promiscuous mode [ 50.498155][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.686778][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.695500][ T4357] loop2: detected capacity change from 0 to 8192 [ 50.703970][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.714587][ T51] bond0 (unregistering): Released all slaves [ 50.724717][ T4357] Buffer I/O error on dev loop2, logical block 57847, async page read [ 50.839357][ T4364] program syz.2.260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.915932][ T51] hsr_slave_0: left promiscuous mode [ 50.924736][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.934079][ T51] hsr_slave_1: left promiscuous mode [ 50.947124][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.954600][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.967172][ T4368] SET target dimension over the limit! [ 50.973233][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.981061][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.027424][ T4369] loop2: detected capacity change from 0 to 2048 [ 51.038175][ T51] veth1_macvtap: left promiscuous mode [ 51.043694][ T51] veth0_macvtap: left promiscuous mode [ 51.049623][ T51] veth1_vlan: left promiscuous mode [ 51.054873][ T51] veth0_vlan: left promiscuous mode [ 51.126834][ T4368] netlink: 'syz.2.264': attribute type 11 has an invalid length. [ 51.134611][ T4368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.264'. [ 51.197421][ T51] team0 (unregistering): Port device team_slave_1 removed [ 51.207940][ T51] team0 (unregistering): Port device team_slave_0 removed [ 51.283621][ T4317] chnl_net:caif_netlink_parms(): no params data found [ 51.387673][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.394808][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.445623][ T4317] bridge_slave_0: entered allmulticast mode [ 51.477110][ T4317] bridge_slave_0: entered promiscuous mode [ 51.485645][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.492824][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.508369][ T4407] devpts: called with bogus options [ 51.536970][ T4317] bridge_slave_1: entered allmulticast mode [ 51.543608][ T4317] bridge_slave_1: entered promiscuous mode [ 51.589306][ T4409] dccp_close: ABORT with 4909 bytes unread [ 51.626699][ T4317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.646040][ T4420] SET target dimension over the limit! [ 51.646077][ T4317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.716705][ T4317] team0: Port device team_slave_0 added [ 51.726595][ T4317] team0: Port device team_slave_1 added [ 51.770470][ T4420] netlink: 'syz.5.275': attribute type 11 has an invalid length. [ 51.778310][ T4420] netlink: 32 bytes leftover after parsing attributes in process `syz.5.275'. [ 51.788861][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.795842][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.821918][ T4317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.843092][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.850112][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.850777][ T51] IPVS: stop unused estimator thread 0... [ 51.876027][ T4317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.958989][ T4317] hsr_slave_0: entered promiscuous mode [ 51.968245][ T4317] hsr_slave_1: entered promiscuous mode [ 51.984628][ T4317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.994132][ T4317] Cannot create hsr debugfs directory [ 52.000942][ T4449] FAULT_INJECTION: forcing a failure. [ 52.000942][ T4449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.014067][ T4449] CPU: 0 UID: 0 PID: 4449 Comm: syz.0.278 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 52.014094][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.014189][ T4449] Call Trace: [ 52.014198][ T4449] [ 52.014207][ T4449] dump_stack_lvl+0xf2/0x150 [ 52.014248][ T4449] dump_stack+0x15/0x1a [ 52.014287][ T4449] should_fail_ex+0x24a/0x260 [ 52.014367][ T4449] should_fail+0xb/0x10 [ 52.014395][ T4449] should_fail_usercopy+0x1a/0x20 [ 52.014427][ T4449] _copy_from_user+0x1c/0xa0 [ 52.014521][ T4449] io_register_rsrc+0x63/0x1f0 [ 52.014556][ T4449] __se_sys_io_uring_register+0x8a6/0x1ef0 [ 52.014583][ T4449] ? kstrtouint_from_user+0xb0/0xe0 [ 52.014685][ T4449] ? 0xffffffff81000000 [ 52.014697][ T4449] ? selinux_file_permission+0x22a/0x360 [ 52.014730][ T4449] ? get_pid_task+0x8e/0xc0 [ 52.014757][ T4449] ? proc_fail_nth_write+0x12a/0x150 [ 52.014825][ T4449] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 52.014855][ T4449] ? vfs_write+0x644/0x920 [ 52.014882][ T4449] ? __fget_files+0x17c/0x1c0 [ 52.014920][ T4449] ? fput+0x1c4/0x200 [ 52.014939][ T4449] ? ksys_write+0x176/0x1b0 [ 52.014966][ T4449] __x64_sys_io_uring_register+0x55/0x70 [ 52.014994][ T4449] x64_sys_call+0x2c52/0x2dc0 [ 52.015020][ T4449] do_syscall_64+0xc9/0x1c0 [ 52.015102][ T4449] ? clear_bhb_loop+0x55/0xb0 [ 52.015129][ T4449] ? clear_bhb_loop+0x55/0xb0 [ 52.015156][ T4449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.015248][ T4449] RIP: 0033:0x7ff7d3a9d169 [ 52.015262][ T4449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.015279][ T4449] RSP: 002b:00007ff7d2107038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 52.015297][ T4449] RAX: ffffffffffffffda RBX: 00007ff7d3cb5fa0 RCX: 00007ff7d3a9d169 [ 52.015309][ T4449] RDX: 0000400000002700 RSI: 000000000000000f RDI: 0000000000000005 [ 52.015321][ T4449] RBP: 00007ff7d2107090 R08: 0000000000000000 R09: 0000000000000000 [ 52.015332][ T4449] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 52.015390][ T4449] R13: 0000000000000000 R14: 00007ff7d3cb5fa0 R15: 00007fffb0681898 [ 52.015407][ T4449] [ 52.017110][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.254596][ T4459] pimreg: entered allmulticast mode [ 52.260128][ T4461] pimreg: left allmulticast mode [ 52.318845][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.462596][ T4483] devpts: called with bogus options [ 52.469550][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.544726][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.628944][ T4317] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.641194][ T4317] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.650536][ T4317] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.684715][ T4317] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.695984][ T4413] chnl_net:caif_netlink_parms(): no params data found [ 52.793951][ T3315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 52.843784][ T4522] loop2: detected capacity change from 0 to 1024 [ 52.873284][ T4522] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 52.894382][ T4522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 52.909156][ T51] bridge_slave_1: left allmulticast mode [ 52.914865][ T51] bridge_slave_1: left promiscuous mode [ 52.920590][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.930009][ T4522] System zones: 0-1, 3-36 [ 52.934521][ T4522] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.957217][ T4522] EXT4-fs (loop2): 1 orphan inode deleted [ 52.963639][ T51] bridge_slave_0: left allmulticast mode [ 52.969430][ T51] bridge_slave_0: left promiscuous mode [ 52.975165][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.984699][ T4522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.045609][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.082074][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.100113][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.122133][ T51] bond0 (unregistering): Released all slaves [ 53.138854][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.138890][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.139019][ T4413] bridge_slave_0: entered allmulticast mode [ 53.139606][ T4413] bridge_slave_0: entered promiscuous mode [ 53.151993][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.152027][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.152191][ T4413] bridge_slave_1: entered allmulticast mode [ 53.152875][ T4413] bridge_slave_1: entered promiscuous mode [ 53.264329][ T4413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.265630][ T4413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.365179][ T4413] team0: Port device team_slave_0 added [ 53.366204][ T4413] team0: Port device team_slave_1 added [ 53.470064][ T4545] netlink: 'syz.2.300': attribute type 13 has an invalid length. [ 53.512358][ T51] hsr_slave_0: left promiscuous mode [ 53.512645][ T51] hsr_slave_1: left promiscuous mode [ 53.512931][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.512964][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.534331][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.567115][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.572781][ T51] veth1_macvtap: left promiscuous mode [ 53.572806][ T51] veth0_macvtap: left promiscuous mode [ 53.572943][ T51] veth1_vlan: left promiscuous mode [ 53.572972][ T51] veth0_vlan: left promiscuous mode [ 53.787682][ T51] team0 (unregistering): Port device team_slave_1 removed [ 53.797792][ T51] team0 (unregistering): Port device team_slave_0 removed [ 53.868252][ T3538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.878042][ T4545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.900262][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.907359][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.933361][ T4413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.953801][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.960941][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.986947][ T4413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.030450][ T4317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.055430][ T4413] hsr_slave_0: entered promiscuous mode [ 54.062157][ T4413] hsr_slave_1: entered promiscuous mode [ 54.069402][ T1051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.081167][ T4413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.096816][ T4413] Cannot create hsr debugfs directory [ 54.111089][ T4317] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.150121][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.157231][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.178226][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 54.178242][ T30] audit: type=1326 audit(1742028979.298:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8328bd169 code=0x7ffc0000 [ 54.207867][ T30] audit: type=1326 audit(1742028979.298:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8328bd169 code=0x7ffc0000 [ 54.254376][ T30] audit: type=1326 audit(1742028979.298:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fa8328bd169 code=0x7ffc0000 [ 54.277665][ T30] audit: type=1326 audit(1742028979.298:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8328bd169 code=0x7ffc0000 [ 54.301069][ T30] audit: type=1326 audit(1742028979.298:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8328bd169 code=0x7ffc0000 [ 54.329652][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.336839][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.372643][ T51] IPVS: stop unused estimator thread 0... [ 54.375783][ T4317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.388875][ T4317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.417935][ T30] audit: type=1326 audit(1742028979.528:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 54.441484][ T30] audit: type=1326 audit(1742028979.528:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 54.535637][ T30] audit: type=1326 audit(1742028979.648:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8328bd169 code=0x7ffc0000 [ 54.559294][ T30] audit: type=1326 audit(1742028979.648:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8328bd169 code=0x7ffc0000 [ 54.582838][ T30] audit: type=1326 audit(1742028979.648:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4599 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 54.596587][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 54.633695][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.659110][ T4413] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 54.680770][ T4413] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 54.695590][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.711893][ T4413] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 54.721176][ T4413] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 54.736111][ T4600] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.313'. [ 54.750450][ T4610] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.313'. [ 54.788980][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.839191][ T4317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.894519][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.944247][ T4413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.959235][ T4413] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.978484][ T4413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.988925][ T4413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.004519][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.011647][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.020346][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.027533][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.048252][ T4596] chnl_net:caif_netlink_parms(): no params data found [ 55.058632][ T4659] loop2: detected capacity change from 0 to 128 [ 55.073798][ T4659] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 55.090990][ T4659] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.118071][ T4659] ext2 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.164829][ T51] bridge_slave_1: left allmulticast mode [ 55.170584][ T51] bridge_slave_1: left promiscuous mode [ 55.176699][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.188749][ T4659] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 55.201466][ T51] bridge_slave_0: left allmulticast mode [ 55.207381][ T51] bridge_slave_0: left promiscuous mode [ 55.213207][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.225603][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.299380][ T4693] loop2: detected capacity change from 0 to 1024 [ 55.306619][ T4693] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 55.317894][ T4693] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 55.325982][ T4693] System zones: 0-1, 3-36 [ 55.332169][ T4693] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.338817][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.349337][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.351092][ T4693] EXT4-fs (loop2): 1 orphan inode deleted [ 55.364421][ T4693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.365001][ T51] bond0 (unregistering): Released all slaves [ 55.393686][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.441147][ T4413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.484855][ T51] hsr_slave_0: left promiscuous mode [ 55.498520][ T51] hsr_slave_1: left promiscuous mode [ 55.505422][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.512991][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.522705][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.530295][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.540339][ T51] veth1_macvtap: left promiscuous mode [ 55.545817][ T51] veth0_macvtap: left promiscuous mode [ 55.551529][ T51] veth1_vlan: left promiscuous mode [ 55.557163][ T51] veth0_vlan: left promiscuous mode [ 55.620367][ T51] team0 (unregistering): Port device team_slave_1 removed [ 55.630223][ T51] team0 (unregistering): Port device team_slave_0 removed [ 55.659821][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.666979][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.674219][ T4596] bridge_slave_0: entered allmulticast mode [ 55.681342][ T4596] bridge_slave_0: entered promiscuous mode [ 55.691835][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.699418][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.723467][ T4596] bridge_slave_1: entered allmulticast mode [ 55.730247][ T4596] bridge_slave_1: entered promiscuous mode [ 55.757076][ T4317] veth0_vlan: entered promiscuous mode [ 55.795248][ T4317] veth1_vlan: entered promiscuous mode [ 55.809856][ T4596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.812251][ T4730] SET target dimension over the limit! [ 55.833392][ T4317] veth0_macvtap: entered promiscuous mode [ 55.859605][ T4730] loop2: detected capacity change from 0 to 2048 [ 55.874857][ T4596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.884970][ T4317] veth1_macvtap: entered promiscuous mode [ 55.905972][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.916625][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.926552][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.937078][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.948446][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.986353][ T4596] team0: Port device team_slave_0 added [ 55.987120][ T4730] netlink: 'syz.2.329': attribute type 11 has an invalid length. [ 55.999728][ T4730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.329'. [ 56.021005][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.031538][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.041410][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.051896][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.063164][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.071873][ T4596] team0: Port device team_slave_1 added [ 56.074041][ T4730] syz0: rxe_newlink: already configured on veth1_to_bridge [ 56.136112][ T4317] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.145186][ T4317] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.147207][ T4755] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 56.154026][ T4317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.166622][ T4755] vhci_hcd: invalid port number 253 [ 56.170128][ T4317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.175266][ T4755] vhci_hcd: default hub control req: 6011 v8001 i00fd l0 [ 56.218150][ T4413] veth0_vlan: entered promiscuous mode [ 56.227608][ T4596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.234573][ T4596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.260662][ T4596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.291156][ T4596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.298214][ T4596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.324191][ T4596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.337295][ T4766] loop2: detected capacity change from 0 to 1024 [ 56.370868][ T4766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.385788][ T4413] veth1_vlan: entered promiscuous mode [ 56.435848][ T4596] hsr_slave_0: entered promiscuous mode [ 56.447250][ T4596] hsr_slave_1: entered promiscuous mode [ 56.464875][ T4596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.482559][ T4766] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.332: Allocating blocks 497-513 which overlap fs metadata [ 56.496840][ T4596] Cannot create hsr debugfs directory [ 56.530270][ T4766] EXT4-fs (loop2): pa ffff888106145070: logic 256, phys. 385, len 8 [ 56.538554][ T4766] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 56.559291][ T4413] veth0_macvtap: entered promiscuous mode [ 56.576069][ T4413] veth1_macvtap: entered promiscuous mode [ 56.630236][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.640816][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.650664][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.661196][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.671332][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.681809][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.698397][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.707025][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.717550][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.727418][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.737928][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.747917][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.758513][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.769156][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.792608][ T4798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 56.819528][ T4413] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.828403][ T4413] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.837172][ T4413] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.845914][ T4413] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.914402][ T4803] netlink: 'syz.6.341': attribute type 2 has an invalid length. [ 56.922151][ T4803] netlink: 'syz.6.341': attribute type 1 has an invalid length. [ 57.034576][ T4596] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 57.064458][ T4596] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 57.077493][ T4828] loop6: detected capacity change from 0 to 128 [ 57.085598][ T4596] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 57.116335][ T4596] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 57.162151][ T4828] bio_check_eod: 584 callbacks suppressed [ 57.162180][ T4828] +}[@: attempt to access beyond end of device [ 57.162180][ T4828] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 57.210998][ T4828] +}[@: attempt to access beyond end of device [ 57.210998][ T4828] loop6: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 57.237570][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.349'. [ 57.264112][ T4828] +}[@: attempt to access beyond end of device [ 57.264112][ T4828] loop6: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 57.273809][ T4596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.312115][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.338051][ T4824] syz.6.346: attempt to access beyond end of device [ 57.338051][ T4824] loop6: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 57.372244][ T4596] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.406802][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.414019][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.555245][ T4870] program syz.0.353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.574793][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.581924][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.591833][ T4870] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 57.617976][ T4877] loop2: detected capacity change from 0 to 128 [ 57.642918][ T4874] 8021q: VLANs not supported on ip6gre0 [ 57.655385][ T4877] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 57.655419][ T4596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.707089][ T4877] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.757769][ T4877] ext2 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.878514][ T4596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.898982][ T4886] program syz.7.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.948445][ T4877] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 58.018428][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.226441][ T4938] program syz.6.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.357310][ T4596] veth0_vlan: entered promiscuous mode [ 58.391561][ T4596] veth1_vlan: entered promiscuous mode [ 58.440985][ T4596] veth0_macvtap: entered promiscuous mode [ 58.453480][ T4596] veth1_macvtap: entered promiscuous mode [ 58.465442][ T4969] program syz.7.367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.487411][ T4596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.497923][ T4596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.507780][ T4596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.518290][ T4596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.528229][ T4596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.538724][ T4596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.548899][ T4596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.549483][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 58.559491][ T4596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.594039][ T4596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.598668][ T4971] loop6: detected capacity change from 0 to 512 [ 58.602855][ T4596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.618253][ T4596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.628148][ T4596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.631756][ T4971] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 58.638614][ T4596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.658323][ T4596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.668791][ T4596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.678728][ T4596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.689193][ T4596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.689291][ T4971] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm wÞ£ÿ: corrupted in-inode xattr: e_name out of bounds [ 58.747547][ T4971] EXT4-fs (loop6): Remounting filesystem read-only [ 58.754325][ T4971] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.767174][ T4596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.769031][ T4971] EXT4-fs (loop6): 1 truncate cleaned up [ 58.784853][ T4971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.805813][ T4596] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.807880][ T4971] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 58.814700][ T4596] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.821937][ T4971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.829798][ T4596] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.847649][ T4596] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.921928][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.371'. [ 59.197524][ T5005] program syz.8.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.220610][ T5012] loop7: detected capacity change from 0 to 128 [ 59.249880][ T5012] +}[@: attempt to access beyond end of device [ 59.249880][ T5012] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 59.315520][ T5013] loop2: detected capacity change from 0 to 128 [ 59.384074][ T5013] +}[@: attempt to access beyond end of device [ 59.384074][ T5013] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 59.403467][ T5017] syz.7.378: attempt to access beyond end of device [ 59.403467][ T5017] loop7: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 59.504291][ T30] kauditd_printk_skb: 432 callbacks suppressed [ 59.504307][ T30] audit: type=1400 audit(1742028984.618:1461): avc: denied { getopt } for pid=5008 comm="syz.6.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.532766][ T5030] FAULT_INJECTION: forcing a failure. [ 59.532766][ T5030] name failslab, interval 1, probability 0, space 0, times 0 [ 59.532793][ T5030] CPU: 1 UID: 0 PID: 5030 Comm: syz.8.381 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 59.532816][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.532827][ T5030] Call Trace: [ 59.532833][ T5030] [ 59.532840][ T5030] dump_stack_lvl+0xf2/0x150 [ 59.532875][ T5030] dump_stack+0x15/0x1a [ 59.532929][ T5030] should_fail_ex+0x24a/0x260 [ 59.532961][ T5030] should_failslab+0x8f/0xb0 [ 59.533004][ T5030] kmem_cache_alloc_node_noprof+0x59/0x320 [ 59.533035][ T5030] ? __alloc_skb+0x10b/0x310 [ 59.533081][ T5030] __alloc_skb+0x10b/0x310 [ 59.533109][ T5030] netlink_alloc_large_skb+0xad/0xe0 [ 59.533147][ T5030] netlink_sendmsg+0x3b4/0x6e0 [ 59.533240][ T5030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.533274][ T5030] __sock_sendmsg+0x140/0x180 [ 59.533313][ T5030] ____sys_sendmsg+0x326/0x4b0 [ 59.533347][ T5030] __sys_sendmsg+0x19d/0x230 [ 59.533467][ T5030] __x64_sys_sendmsg+0x46/0x50 [ 59.533495][ T5030] x64_sys_call+0x2734/0x2dc0 [ 59.533602][ T5030] do_syscall_64+0xc9/0x1c0 [ 59.533640][ T5030] ? clear_bhb_loop+0x55/0xb0 [ 59.533717][ T5030] ? clear_bhb_loop+0x55/0xb0 [ 59.533751][ T5030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.533821][ T5030] RIP: 0033:0x7ff3cca1d169 [ 59.533838][ T5030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.533856][ T5030] RSP: 002b:00007ff3caf97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.533877][ T5030] RAX: ffffffffffffffda RBX: 00007ff3ccc36080 RCX: 00007ff3cca1d169 [ 59.533964][ T5030] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000007 [ 59.533978][ T5030] RBP: 00007ff3caf97090 R08: 0000000000000000 R09: 0000000000000000 [ 59.534000][ T5030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.534014][ T5030] R13: 0000000000000000 R14: 00007ff3ccc36080 R15: 00007fff4f94c458 [ 59.534036][ T5030] [ 59.547111][ T5017] syz.7.378: attempt to access beyond end of device [ 59.547111][ T5017] loop7: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 59.717639][ T5038] loop8: detected capacity change from 0 to 512 [ 59.745209][ T5038] EXT4-fs (loop8): 1 orphan inode deleted [ 59.745575][ T5038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.745867][ T5038] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.759554][ T5038] 9pnet_fd: Insufficient options for proto=fd [ 59.796664][ T168] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.947020][ T168] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 59.999971][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.072673][ T4596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.143327][ T30] audit: type=1400 audit(1742028985.258:1462): avc: denied { create } for pid=5048 comm="syz.8.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.176671][ T51] kworker/u8:3: attempt to access beyond end of device [ 60.176671][ T51] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 60.217384][ T5056] SET target dimension over the limit! [ 60.226534][ T30] audit: type=1326 audit(1742028985.278:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.8.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cca1d169 code=0x7ffc0000 [ 60.250047][ T30] audit: type=1326 audit(1742028985.278:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.8.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cca1d169 code=0x7ffc0000 [ 60.273644][ T30] audit: type=1326 audit(1742028985.278:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.8.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3cca1d169 code=0x7ffc0000 [ 60.297452][ T30] audit: type=1326 audit(1742028985.278:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.8.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cca1d169 code=0x7ffc0000 [ 60.320788][ T30] audit: type=1326 audit(1742028985.278:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.8.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3cca1d169 code=0x7ffc0000 [ 60.344130][ T30] audit: type=1326 audit(1742028985.278:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.8.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cca1d169 code=0x7ffc0000 [ 60.367633][ T30] audit: type=1326 audit(1742028985.278:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.8.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3cca1d169 code=0x7ffc0000 [ 60.416646][ T5056] loop8: detected capacity change from 0 to 2048 [ 60.467452][ T3374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.540976][ T5074] netlink: 'syz.8.386': attribute type 11 has an invalid length. [ 60.548916][ T5074] netlink: 32 bytes leftover after parsing attributes in process `syz.8.386'. [ 60.562807][ T5056] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 60.600438][ T5072] loop2: detected capacity change from 0 to 512 [ 60.600948][ T5011] syz.7.378: attempt to access beyond end of device [ 60.600948][ T5011] loop7: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 60.639096][ T5072] EXT4-fs (loop2): 1 orphan inode deleted [ 60.663240][ T3414] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 60.665849][ T5072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.666009][ T5072] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.741974][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.754758][ T5090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.389'. [ 60.810318][ T5095] dccp_close: ABORT with 4909 bytes unread [ 60.859267][ T5094] hub 1-0:1.0: USB hub found [ 60.859317][ T5094] hub 1-0:1.0: 8 ports detected [ 60.881220][ T5109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.883947][ T5109] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.396'. [ 60.954111][ T5111] dccp_close: ABORT with 4909 bytes unread [ 61.016522][ T5125] program syz.6.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.061010][ T5131] program syz.8.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.121791][ T5132] loop2: detected capacity change from 0 to 512 [ 61.134207][ T5137] pimreg: entered allmulticast mode [ 61.161609][ T5137] pimreg: left allmulticast mode [ 61.175655][ T5139] loop6: detected capacity change from 0 to 512 [ 61.203038][ T5139] EXT4-fs: Ignoring removed orlov option [ 61.237672][ T5132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.260994][ T5132] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.279830][ T5139] EXT4-fs (loop6): 1 orphan inode deleted [ 61.296646][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 61.314062][ T5139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.341386][ T5156] pimreg: entered allmulticast mode [ 61.347959][ T5139] ext4 filesystem being mounted at /syzcgroup/unified/syz6 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.365593][ T5120] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.374554][ T5120] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.380010][ T5139] devpts: called with bogus options [ 61.383384][ T5120] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.389357][ T5159] FAULT_INJECTION: forcing a failure. [ 61.389357][ T5159] name failslab, interval 1, probability 0, space 0, times 0 [ 61.397460][ T5120] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.410073][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: syz.0.407 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 61.410107][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.410169][ T5159] Call Trace: [ 61.410177][ T5159] [ 61.410188][ T5159] dump_stack_lvl+0xf2/0x150 [ 61.410224][ T5159] dump_stack+0x15/0x1a [ 61.410252][ T5159] should_fail_ex+0x24a/0x260 [ 61.410357][ T5159] should_failslab+0x8f/0xb0 [ 61.410394][ T5159] kmem_cache_alloc_noprof+0x52/0x320 [ 61.410424][ T5159] ? dst_alloc+0xc0/0x100 [ 61.410456][ T5159] ? __pfx_ip6_dst_gc+0x10/0x10 [ 61.410488][ T5159] dst_alloc+0xc0/0x100 [ 61.410514][ T5159] ip6_pol_route+0x6ff/0xb90 [ 61.410561][ T5159] ? ip6_pol_route+0x385/0xb90 [ 61.410599][ T5159] ip6_pol_route_output+0x3f/0x50 [ 61.410716][ T5159] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 61.410783][ T5159] fib6_rule_lookup+0x137/0x4e0 [ 61.410827][ T5159] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 61.410922][ T5159] ? ___slab_alloc+0x2b7/0x970 [ 61.411000][ T5159] ? mod_objcg_state+0x2ea/0x4f0 [ 61.411037][ T5159] ip6_route_output_flags+0x1f1/0x2e0 [ 61.411077][ T5159] ip6_dst_lookup_tail+0xae/0xa60 [ 61.411105][ T5159] ? avc_has_perm+0xd4/0x160 [ 61.411131][ T5159] ? __rcu_read_unlock+0x4e/0x70 [ 61.411200][ T5159] ip6_sk_dst_lookup_flow+0x49f/0x5b0 [ 61.411227][ T5159] ? __rcu_read_unlock+0x4e/0x70 [ 61.411329][ T5159] ? __rcu_read_unlock+0x4e/0x70 [ 61.411384][ T5159] udpv6_sendmsg+0x1265/0x15b0 [ 61.411420][ T5159] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 61.411466][ T5159] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 61.411500][ T5159] inet6_sendmsg+0xaf/0xd0 [ 61.411579][ T5159] __sock_sendmsg+0x8b/0x180 [ 61.411622][ T5159] __sys_sendto+0x1a8/0x230 [ 61.411693][ T5159] __x64_sys_sendto+0x78/0x90 [ 61.411742][ T5159] x64_sys_call+0x29fa/0x2dc0 [ 61.411785][ T5159] do_syscall_64+0xc9/0x1c0 [ 61.411866][ T5159] ? clear_bhb_loop+0x55/0xb0 [ 61.411901][ T5159] ? clear_bhb_loop+0x55/0xb0 [ 61.412004][ T5159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.412038][ T5159] RIP: 0033:0x7ff7d3a9d169 [ 61.412059][ T5159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.412081][ T5159] RSP: 002b:00007ff7d20e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 61.412179][ T5159] RAX: ffffffffffffffda RBX: 00007ff7d3cb6080 RCX: 00007ff7d3a9d169 [ 61.412196][ T5159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.412235][ T5159] RBP: 00007ff7d20e6090 R08: 0000400000000300 R09: 000000000000001c [ 61.412250][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.412265][ T5159] R13: 0000000000000001 R14: 00007ff7d3cb6080 R15: 00007fffb0681898 [ 61.412288][ T5159] [ 61.417476][ T5160] program syz.8.406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.430866][ T5120] geneve2: entered promiscuous mode [ 61.550042][ T5150] hub 1-0:1.0: USB hub found [ 61.551939][ T5120] geneve2: entered allmulticast mode [ 61.596595][ T5156] pimreg: left allmulticast mode [ 61.604352][ T5150] hub 1-0:1.0: 8 ports detected [ 61.736168][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.780802][ T5175] program syz.6.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.831737][ T5183] FAULT_INJECTION: forcing a failure. [ 61.831737][ T5183] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.845096][ T5183] CPU: 1 UID: 0 PID: 5183 Comm: syz.7.414 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 61.845126][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.845140][ T5183] Call Trace: [ 61.845149][ T5183] [ 61.845159][ T5183] dump_stack_lvl+0xf2/0x150 [ 61.845228][ T5183] dump_stack+0x15/0x1a [ 61.845254][ T5183] should_fail_ex+0x24a/0x260 [ 61.845319][ T5183] should_fail_alloc_page+0xfd/0x110 [ 61.845354][ T5183] __alloc_frozen_pages_noprof+0x109/0x340 [ 61.845395][ T5183] alloc_pages_mpol+0xb4/0x260 [ 61.845425][ T5183] vma_alloc_folio_noprof+0x1a0/0x310 [ 61.845466][ T5183] handle_mm_fault+0xdd7/0x2ac0 [ 61.845524][ T5183] exc_page_fault+0x3b9/0x650 [ 61.845566][ T5183] asm_exc_page_fault+0x26/0x30 [ 61.845598][ T5183] RIP: 0033:0x7fa770d9a78b [ 61.845616][ T5183] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 61.845636][ T5183] RSP: 002b:00007fa76f454e10 EFLAGS: 00010246 [ 61.845662][ T5183] RAX: 00007fa76f456f30 RBX: 00007fa770fdc620 RCX: 0000000000000000 [ 61.845673][ T5183] RDX: 00007fa76f456f78 RSI: 00007fa770e4cbd8 RDI: 00007fa76f454e30 [ 61.845687][ T5183] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 61.845701][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.845714][ T5183] R13: 0000000000000000 R14: 00007fa771005fa0 R15: 00007ffec5f004b8 [ 61.845735][ T5183] [ 61.845746][ T5183] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 61.986415][ T5180] loop8: detected capacity change from 0 to 2048 [ 62.097065][ T5180] EXT4-fs: dax option not supported [ 62.189672][ T5210] pimreg: entered allmulticast mode [ 62.190010][ T5213] FAULT_INJECTION: forcing a failure. [ 62.190010][ T5213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.208208][ T5213] CPU: 1 UID: 0 PID: 5213 Comm: syz.0.420 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 62.208236][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.208249][ T5213] Call Trace: [ 62.208256][ T5213] [ 62.208265][ T5213] dump_stack_lvl+0xf2/0x150 [ 62.208298][ T5213] dump_stack+0x15/0x1a [ 62.208330][ T5213] should_fail_ex+0x24a/0x260 [ 62.208372][ T5213] should_fail+0xb/0x10 [ 62.208475][ T5213] should_fail_usercopy+0x1a/0x20 [ 62.208508][ T5213] _copy_from_user+0x1c/0xa0 [ 62.208529][ T5213] io_register_rsrc+0x63/0x1f0 [ 62.208629][ T5213] __se_sys_io_uring_register+0x8a6/0x1ef0 [ 62.208660][ T5213] ? kstrtouint_from_user+0xb0/0xe0 [ 62.208704][ T5213] ? 0xffffffff81000000 [ 62.208720][ T5213] ? selinux_file_permission+0x22a/0x360 [ 62.208764][ T5213] ? get_pid_task+0x8e/0xc0 [ 62.208856][ T5213] ? strncpy_from_user_nofault+0xd9/0xe0 [ 62.208882][ T5213] ? bpf_probe_read_user_str+0x49/0x70 [ 62.208916][ T5213] ? __rcu_read_unlock+0x4e/0x70 [ 62.208940][ T5213] ? bpf_trace_run2+0x123/0x1d0 [ 62.209016][ T5213] ? __bpf_trace_sys_enter+0x10/0x30 [ 62.209040][ T5213] ? trace_sys_enter+0xcd/0x110 [ 62.209065][ T5213] __x64_sys_io_uring_register+0x55/0x70 [ 62.209222][ T5213] x64_sys_call+0x2c52/0x2dc0 [ 62.209283][ T5213] do_syscall_64+0xc9/0x1c0 [ 62.209316][ T5213] ? clear_bhb_loop+0x55/0xb0 [ 62.209343][ T5213] ? clear_bhb_loop+0x55/0xb0 [ 62.209371][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.209398][ T5213] RIP: 0033:0x7ff7d3a9d169 [ 62.209454][ T5213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.209473][ T5213] RSP: 002b:00007ff7d2107038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 62.209492][ T5213] RAX: ffffffffffffffda RBX: 00007ff7d3cb5fa0 RCX: 00007ff7d3a9d169 [ 62.209505][ T5213] RDX: 0000400000002700 RSI: 000000000000000f RDI: 0000000000000005 [ 62.209517][ T5213] RBP: 00007ff7d2107090 R08: 0000000000000000 R09: 0000000000000000 [ 62.209558][ T5213] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 62.209571][ T5213] R13: 0000000000000000 R14: 00007ff7d3cb5fa0 R15: 00007fffb0681898 [ 62.209590][ T5213] [ 62.220304][ T5217] pimreg: left allmulticast mode [ 62.319330][ T5180] loop8: detected capacity change from 0 to 8192 [ 62.462422][ T5220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 62.515736][ T5224] program syz.7.423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.527018][ T5180] syz.8.412: attempt to access beyond end of device [ 62.527018][ T5180] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 62.540725][ T5180] Buffer I/O error on dev loop8, logical block 57847, async page read [ 62.695632][ T5229] loop2: detected capacity change from 0 to 2048 [ 62.775217][ T5229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.796643][ T5229] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.022122][ T5261] program syz.8.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.185131][ T5282] program syz.8.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.232982][ T5286] loop7: detected capacity change from 0 to 1024 [ 63.241192][ T5286] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 63.252796][ T5286] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 63.261051][ T5286] System zones: 0-1, 3-36 [ 63.265600][ T5286] EXT4-fs (loop7): orphan cleanup on readonly fs [ 63.277965][ T5286] EXT4-fs (loop7): 1 orphan inode deleted [ 63.294552][ T5260] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.425: bg 0: block 345: padding at end of block bitmap is not set [ 63.304099][ T5286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.330299][ T5260] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 63.342905][ T5260] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.342905][ T5260] [ 63.361994][ T3365] IPVS: starting estimator thread 0... [ 63.418557][ T4413] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.456556][ T5295] IPVS: using max 1968 ests per chain, 98400 per kthread [ 63.472615][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.436'. [ 63.475785][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 63.494316][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.494316][ T51] [ 63.525232][ T5313] FAULT_INJECTION: forcing a failure. [ 63.525232][ T5313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.538476][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.7.437 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 63.538511][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.538526][ T5313] Call Trace: [ 63.538533][ T5313] [ 63.538541][ T5313] dump_stack_lvl+0xf2/0x150 [ 63.538635][ T5313] dump_stack+0x15/0x1a [ 63.538663][ T5313] should_fail_ex+0x24a/0x260 [ 63.538697][ T5313] should_fail+0xb/0x10 [ 63.538778][ T5313] should_fail_usercopy+0x1a/0x20 [ 63.538819][ T5313] _copy_from_user+0x1c/0xa0 [ 63.538844][ T5313] do_sock_getsockopt+0xd3/0x260 [ 63.538984][ T5313] __x64_sys_getsockopt+0x18c/0x200 [ 63.539019][ T5313] x64_sys_call+0x1288/0x2dc0 [ 63.539053][ T5313] do_syscall_64+0xc9/0x1c0 [ 63.539091][ T5313] ? clear_bhb_loop+0x55/0xb0 [ 63.539170][ T5313] ? clear_bhb_loop+0x55/0xb0 [ 63.539219][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.539294][ T5313] RIP: 0033:0x7fa770ded169 [ 63.539310][ T5313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.539330][ T5313] RSP: 002b:00007fa76f457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 63.539390][ T5313] RAX: ffffffffffffffda RBX: 00007fa771005fa0 RCX: 00007fa770ded169 [ 63.539462][ T5313] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 63.539550][ T5313] RBP: 00007fa76f457090 R08: 0000400000000040 R09: 0000000000000000 [ 63.539565][ T5313] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 63.539579][ T5313] R13: 0000000000000000 R14: 00007fa771005fa0 R15: 00007ffec5f004b8 [ 63.539601][ T5313] [ 63.745967][ T168] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 63.758774][ T168] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.758774][ T168] [ 63.768508][ T168] EXT4-fs (loop2): Total free blocks count 0 [ 63.774736][ T168] EXT4-fs (loop2): Free/Dirty block details [ 63.780734][ T168] EXT4-fs (loop2): free_blocks=0 [ 63.922514][ T5340] FAULT_INJECTION: forcing a failure. [ 63.922514][ T5340] name failslab, interval 1, probability 0, space 0, times 0 [ 63.935423][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.7.447 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 63.935546][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.935572][ T5340] Call Trace: [ 63.935581][ T5340] [ 63.935589][ T5340] dump_stack_lvl+0xf2/0x150 [ 63.935618][ T5340] dump_stack+0x15/0x1a [ 63.935643][ T5340] should_fail_ex+0x24a/0x260 [ 63.935674][ T5340] should_failslab+0x8f/0xb0 [ 63.935732][ T5340] kmem_cache_alloc_node_noprof+0x59/0x320 [ 63.935759][ T5340] ? __alloc_skb+0x10b/0x310 [ 63.935785][ T5340] __alloc_skb+0x10b/0x310 [ 63.935806][ T5340] ? audit_log_start+0x34c/0x6b0 [ 63.935849][ T5340] audit_log_start+0x368/0x6b0 [ 63.935896][ T5340] audit_seccomp+0x4b/0x130 [ 63.935982][ T5340] __seccomp_filter+0x6fa/0x1180 [ 63.936010][ T5340] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 63.936045][ T5340] ? vfs_write+0x644/0x920 [ 63.936082][ T5340] __secure_computing+0x9f/0x1c0 [ 63.936162][ T5340] syscall_trace_enter+0xd1/0x1f0 [ 63.936194][ T5340] do_syscall_64+0xaa/0x1c0 [ 63.936232][ T5340] ? clear_bhb_loop+0x55/0xb0 [ 63.936265][ T5340] ? clear_bhb_loop+0x55/0xb0 [ 63.936352][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.936380][ T5340] RIP: 0033:0x7fa770ded169 [ 63.936396][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.936496][ T5340] RSP: 002b:00007fa76f457038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 63.936518][ T5340] RAX: ffffffffffffffda RBX: 00007fa771005fa0 RCX: 00007fa770ded169 [ 63.936532][ T5340] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 63.936546][ T5340] RBP: 00007fa76f457090 R08: 0000000000000000 R09: 0000000000000000 [ 63.936558][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.936569][ T5340] R13: 0000000000000000 R14: 00007fa771005fa0 R15: 00007ffec5f004b8 [ 63.936590][ T5340] [ 64.317438][ T168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.318728][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 64.338422][ T5367] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.393327][ T5374] program syz.7.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.486233][ T5384] SET target dimension over the limit! [ 64.532902][ T5392] loop8: detected capacity change from 0 to 512 [ 64.548708][ T30] kauditd_printk_skb: 444 callbacks suppressed [ 64.548722][ T30] audit: type=1326 audit(1742028989.668:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.581403][ T30] audit: type=1326 audit(1742028989.698:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.603295][ T5392] EXT4-fs (loop8): 1 orphan inode deleted [ 64.608776][ T5404] program syz.7.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.620144][ T3414] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.627759][ T5392] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.630173][ T3414] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 64.643925][ T30] audit: type=1326 audit(1742028989.698:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.675433][ T30] audit: type=1326 audit(1742028989.698:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.698937][ T30] audit: type=1326 audit(1742028989.698:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.722412][ T30] audit: type=1326 audit(1742028989.698:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.722557][ T5405] netlink: 'syz.0.458': attribute type 11 has an invalid length. [ 64.745681][ T30] audit: type=1326 audit(1742028989.698:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.753536][ T5405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.458'. [ 64.776977][ T30] audit: type=1326 audit(1742028989.698:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.809221][ T30] audit: type=1326 audit(1742028989.698:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7d3a9d169 code=0x7ffc0000 [ 64.813633][ T5405] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 64.939929][ T5425] loop7: detected capacity change from 0 to 1024 [ 64.977219][ T5425] EXT4-fs: Ignoring removed orlov option [ 64.982996][ T5425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.134659][ T3315] ================================================================== [ 65.142781][ T3315] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 65.151305][ T3315] [ 65.153631][ T3315] write to 0xffff88810b29c921 of 1 bytes by task 5452 on cpu 1: [ 65.161269][ T3315] tty_set_termios+0x480/0x8b0 [ 65.166045][ T3315] set_termios+0x497/0x4e0 [ 65.170470][ T3315] tty_mode_ioctl+0x391/0x5d0 [ 65.175156][ T3315] n_tty_ioctl_helper+0x8d/0x240 [ 65.180101][ T3315] n_tty_ioctl+0xfd/0x200 [ 65.184446][ T3315] tty_ioctl+0x87a/0xbe0 [ 65.188776][ T3315] __se_sys_ioctl+0xc9/0x140 [ 65.193378][ T3315] __x64_sys_ioctl+0x43/0x50 [ 65.197979][ T3315] x64_sys_call+0x1690/0x2dc0 [ 65.202672][ T3315] do_syscall_64+0xc9/0x1c0 [ 65.207194][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.213097][ T3315] [ 65.215434][ T3315] read to 0xffff88810b29c921 of 1 bytes by task 3315 on cpu 0: [ 65.222975][ T3315] n_tty_receive_char_flow_ctrl+0x22/0x1a0 [ 65.228788][ T3315] n_tty_lookahead_flow_ctrl+0xee/0x130 [ 65.234383][ T3315] tty_port_default_lookahead_buf+0x8a/0xc0 [ 65.240293][ T3315] flush_to_ldisc+0x31c/0x410 [ 65.244984][ T3315] process_scheduled_works+0x4db/0xa20 [ 65.250458][ T3315] worker_thread+0x51d/0x6f0 [ 65.255054][ T3315] kthread+0x4ae/0x520 [ 65.259155][ T3315] ret_from_fork+0x4b/0x60 [ 65.263586][ T3315] ret_from_fork_asm+0x1a/0x30 [ 65.268366][ T3315] [ 65.270693][ T3315] value changed: 0x11 -> 0x00 [ 65.275369][ T3315] [ 65.277870][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 65.284016][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: kworker/u8:6 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 65.295042][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.305101][ T3315] Workqueue: events_unbound flush_to_ldisc [ 65.310929][ T3315] ================================================================== [ 65.491444][ T5452] EXT4-fs (loop7): shut down requested (2) [ 65.512364][ T5425] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 65.526223][ T5425] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 65.588325][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.797374][ T3315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 69.428007][ T3315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 70.078004][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 71.346915][ T3414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.906833][ T3414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration