last executing test programs: 11.294104175s ago: executing program 4 (id=1141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x42, 0x0, "6fcd42ec0222f5b3eed9ee7c757805000000000000bcab371951b2bf889190aa406396de415e124db0b32226b1c1acd7c6bdbb9d4f698bae30daa85e202ef6664ae79c9cab1c4d18795a07f58005cd9e"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x41, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x400000008}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 10.3798139s ago: executing program 4 (id=1153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r1) 10.32202149s ago: executing program 4 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001800018014000200776732000000000000000000000000001c000380"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000dff4d0e0cb1ef03d7b495dee581509d38e750170d1272717aeaac95dc7bb572c17030d7acbe346a443bc90295bbac5ec0a54a3221e1fb67e7cfe0f8b0de38a696084550e07a5a0307ad4353b92a82baeb36d98c77b385cb0998bfb44b20d95d5a8cacafae83849ad7fe9232b457bf09a404522e8e7d52426cfa0b0f4e09093e59ccc02e0d0ab3ca04c9d58a81fab39a95fff0ba2b42b6bc63ba3c22771111facd44c69ecbacb31cf02f56a794b7a39932ee81f4d62e33728256abacb1ad72f1d", @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf25430000000c0058002e000000000000000c00580013000000000000000c0058007a000000000000000c0058005e00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040084}, 0x4011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f00000036c0)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) unshare(0x2040400) r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8, 0x3, 0x2, 0x6669, 0x8, 0x400, 0x7}, 0x1c) 9.130482626s ago: executing program 4 (id=1165): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES16], 0x42, 0x304, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x5}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x2004, @empty, 'gre0\x00'}}, 0x1e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) tgkill(0x0, 0x0, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0), 0x4) sendfile(r2, r4, &(0x7f0000000040), 0x80000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listen(r2, 0x34) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r8}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x7, 0x0) shutdown(r7, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x40) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') 8.823091918s ago: executing program 4 (id=1174): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x200}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="58931a9128a7010050256f699fd2cf0000070000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c020000190005090000000000000000ac1414bb0000000000000000000000002001000000000000000000000000000100000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 8.606288468s ago: executing program 4 (id=1178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r2) 8.605921729s ago: executing program 32 (id=1178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r2) 2.575821258s ago: executing program 1 (id=1265): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000004040000000000000000000009030000000000000061"], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r1}}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/250) r8 = dup2(r0, r0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r1, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0) 2.217355219s ago: executing program 1 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001800018014000200776732000000000000000000000000001c000380"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000dff4d0e0cb1ef03d7b495dee581509d38e750170d1272717aeaac95dc7bb572c17030d7acbe346a443bc90295bbac5ec0a54a3221e1fb67e7cfe0f8b0de38a696084550e07a5a0307ad4353b92a82baeb36d98c77b385cb0998bfb44b20d95d5a8cacafae83849ad7fe9232b457bf09a404522e8e7d52426cfa0b0f4e09093e59ccc02e0d0ab3ca04c9d58a81fab39a95fff0ba2b42b6bc63ba3c22771111facd44c69ecbacb31cf02f56a794b7a39932ee81f4d62e33728256abacb1ad72f1d9866a375b293f3d3cd4a99adf620569f4b4735c8193fb8a46662b4589379bc3cc17c3c41627cd16b87ce23ca24616d704d", @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf25430000000c0058002e000000000000000c00580013000000000000000c0058007a000000000000000c0058005e00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040084}, 0x4011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f00000036c0)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) unshare(0x2040400) r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8, 0x3, 0x2, 0x6669, 0x8, 0x400, 0x7}, 0x1c) 2.21668628s ago: executing program 5 (id=1270): r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xb60c, 0x800}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "000000b72000", "0d07080d004fcfabd5e8ffff1a8600", "aba200fe", "865703b7e43b34e4"}, 0x28) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r5 = io_uring_setup(0x5785, &(0x7f0000000180)={0x0, 0xa53f, 0x40, 0x1, 0x23a}) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x30, r5, 0x8000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@grpquota}, {@nombcache}, {@nobh}]}, 0x1, 0x502, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 2.01718988s ago: executing program 5 (id=1275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x8c040, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x6, 0x5, 0x5, 0x800}, {0x3, 0xa, 0x0, 0xdd6}, {0xffff, 0x3, 0x20, 0x4}, {0x0, 0xf, 0x10, 0x6}, {0xf7, 0x9, 0x1, 0x9}, {0x5e7, 0xe8, 0xd, 0xd01}]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) 1.892292101s ago: executing program 5 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001800018014000200776732000000000000000000000000001c000380"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24040084}, 0x4011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d9581470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b7200"/643], 0x1, 0x120b, &(0x7f00000036c0)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) unshare(0x2040400) r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8, 0x3, 0x2, 0x6669, 0x8, 0x400, 0x7}, 0x1c) 1.744016762s ago: executing program 2 (id=1283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pwritev2(r1, &(0x7f0000000d40)=[{&(0x7f0000000680)="d54fb2f854cd6ed1353ea300003ef73c84dd45af677a2c11f7a18a5ac62a3e390b3fe6936d9f01b162c6edcc3b93292c3b2afbfb958b0da72f3321e16c2d1ed527891f64937c76a7e2f90f37914cf7c90ba511699b3f006c693ff689c83d4419fbfb50b5723f6127d8caad4b4240ce823fcc253d16740f40ed344dc957a5c6a1b526898bf8a6b352548a", 0x8a}, {&(0x7f00000009c0)="6c0117ea69cd05d518000832a80b1acc155159ac6aab56958d3d145d92ac35961f486f5d4be7954542b7dd47a4c0459171db85c699274a2501886d29fe64bb97acccd5840a9abdc1873c76f44661b3db57cc126dc38142d2cbcd060882b166693f1f3c74341313fa507b8197dca7a802e9f84333d4b4fcf7e6caa81da29bcdb1a6cc3a8c9b7e14825a285cafb06de1412e91d4f0e64665b4898c560c5790c051e693fa9ed0e92afe7b75640705e18b0968d17ea8e43efcdff400b34ddd17868c1ffa3938516987", 0xc7}, {&(0x7f0000000040)="6785e6fbf8f0f2044360507ece9185b6273dd8a189272776c07148bf2aed71261dfc08405a6b8d6b50aa8e02ed9e407f997e397f78", 0x35}, {&(0x7f00000001c0)="9446", 0x2}, {&(0x7f0000000500)="59404548923a029b043dc79058fe6932ac864476772210d4", 0x18}, {&(0x7f0000000ac0)="ca7a27e412ddf7725fe6f2d1c8a1d36332834833c1b49b0a14449eb7422a3319ec4ed002d151757151a08d648f5f6da7d5a1c15c0cc5c7fc3112acd7b19fbc96256874ab52aa3e07ce048a3a15ce4705b77862584bfc7cd83eaf9113f827c94544cdfb72aac386e3c68e3ef0181ceda4aeeaaf84ddd23de331ac8f74a745f485b6799cef3f44b25a079ef3823f45fdb246c1", 0x92}, {&(0x7f0000000740)="633a757d396359ea2ce9056cfde5569d4fdf2d3e234d2ed4d38caacf89eb49be55f3f06ba628", 0x26}, {&(0x7f0000000780)="e82e8921a5ffe548be96aec8c73368b36661820058db2dc9ef2288e3e9d47cee95b9a77aa68a9879abe8aecd9f1beca64be22a1e65e1", 0x36}, {&(0x7f0000000b80)="e72741a17294e7fb07d33669680472acf3aeb66dabd9118ce78dc5cbdc57513f1f4b2a933e13086f56a3fea9854936c3dcf74892680ee7f0d5cf12d75bfb7804c7c6dc97ba2cfc6184923f6fc73225c6cf2fda1ec6a3c6f116439013cb41e0e8526461b0c0d13517b662025ff89e8db35a1fe370d6a56a034e0cddf54598ab4cf40dc5f3fa88c5e9c329b8856d46640eb4d7780e4250ff1206f279fbdec10b12b8628a5059ec7e6439267bd58a5a77dfbb0c59e00c5cd4242d3940b2e24d8419884be1bf1ae07aa0c7376b08ffcb18", 0xcf}, {&(0x7f0000000c80)="1b140a282ac8bc1e70680bb46fd514a3065988844e47610053e982d9a93f542a8dc574dde4bf14628bb9a3698c795f368be525a70ca0841a7b87ed66f6ca376d0e3d9a6386ec3f6723b438f98a29d3308757f7d301884d58d685f6cac9775c1b546aeea9a074bf01310096238ab55d5a31c80b941bea841b4c56f0b43cbd4d5900de33be69c4f1dc90a9a273b9693d4652eaf20f7159bb916a7526a938534739", 0xa0}], 0xa, 0x1, 0xc, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x201, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) 1.743312061s ago: executing program 3 (id=1284): ioperm(0x0, 0x3, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) socket$kcm(0x15, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="d80000001b000100feffffff00000000acff07aa0000000000000000000000000a01010100000000000000010000000000000000000000400200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c0015000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000004000000990000000b0000000000003bb87475722d320730e1a9b88310000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "167d591af5982313b9e4d2034b4953a7ab23c8b26df7c38d80f283c081150b632c2192e30c69738767f5c27c2e4131a67ada39ce113306b7cd9e5f3448425dde"}, 0x48, 0xffffffffffffffff) 1.681777012s ago: executing program 2 (id=1286): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0xd, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = dup(r3) bind$l2tp(r4, &(0x7f00000001c0)={0x2, 0x0, @loopback, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r8}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8}, 0x20) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000180)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000002a00000000000000010000008520000002000000380100000000000000001000002020207b1af8ff00000000bfa100000000004007010000f8ffffff00937b0b756e894bf08748d80085000000060000009500000000000000721ee6512c4fc5e600"/115], &(0x7f00000000c0)='syzkaller\x00', 0xd, 0xbc, &(0x7f0000000240)=""/188, 0x40f00, 0x41, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x8, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.675405982s ago: executing program 3 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x6, 0xfffffffc, 0x2, 0x5, 0x200, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3cb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$cont(0x7, r2, 0x8a2e, 0x7fffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001280)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000074dfa725f614099d3b26e0b80000000000000000000000000000000000000000008a7cd61537", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe, 0x0, 0x4800}, 0x850) pidfd_send_signal(r3, 0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = msgget$private(0x0, 0x3a9) setreuid(0x0, 0xee01) msgrcv(r8, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000280)={{0x2, 0xee00, 0x0, 0x0, 0xee01, 0x82}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1213, &(0x7f0000003680)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000400)={0x0, 0x8000000000000001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(&(0x7f00000001c0)={0x20071026}, 0x0) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) 1.363790424s ago: executing program 2 (id=1289): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) accept$packet(r0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f7, 0x0, "10120dfe0ef7f0200000ff490a0080002a00"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @empty}]}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) (async) getsockopt$bt_hci(r1, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x123042, 0x42) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x123042, 0x42) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000305000000000000000000000700", @ANYRES32=r2, @ANYBLOB="000c00ff000000002400120000008000000000000008000300000000cb7754ec303ebaab00000010", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xa) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xa) 1.348740944s ago: executing program 1 (id=1290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x42, 0x0, "6fcd42ec0222f5b3eed9ee7c757805000000000000bcab371951b2bf889190aa406396de415e124db0b32226b1c1acd7c6bdbb9d4f698bae30daa85e202ef6664ae79c9cab1c4d18795a07f58005cd9e"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x41, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x400000008}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 1.262044614s ago: executing program 2 (id=1292): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24d8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9135}, 0x18) unshare(0x62040200) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) getrandom(&(0x7f0000000540)=""/228, 0xe4, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000680)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x31}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e21, 0x8}}}, 0x2a) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000400)=0x3d) syz_open_pts(r8, 0x0) 1.120592084s ago: executing program 3 (id=1294): ioperm(0x0, 0x3, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) socket$kcm(0x15, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="d80000001b000100feffffff00000000acff07aa0000000000000000000000000a01010100000000000000010000000000000000000000400200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c0015000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000004000000990000000b0000000000003bb87475722d320730e1a9b88310000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x1016c7, 0x8, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "167d591af5982313b9e4d2034b4953a7ab23c8b26df7c38d80f283c081150b632c2192e30c69738767f5c27c2e4131a67ada39ce113306b7cd9e5f3448425dde"}, 0x48, 0xffffffffffffffff) 1.015524585s ago: executing program 3 (id=1295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x7d7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f0000000300)='(', 0x1) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000020240)='./file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="820a9082c850f913e11b146ee59d75153f7a65038db39ad5ec5429fa02731b28570e9cb221738dfb73c559cb7570e9f95c9775037ea7", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000800)={'vlan0\x00', @link_local={0x1, 0x32}}) 1.012321585s ago: executing program 5 (id=1296): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x1, @ANYBLOB="000000000000000000000000fd86cd0000ffee00000000", @ANYRES16=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001a006daa00000000000000001c000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="c3180fe969be14e8839357325a04deee7b20db55bf57c21fb401047b5e3d13930888523dae28e733c8d6f54d8420e81543bc9e7ad61c118c376c730a53e48d7420b7d9d0857f2dbc63aa908c9e37ab297948956b5f2ec871a021621177f12805ab2f12b0642647d8905ea52f90c128ba391216ab4f7321f22899c9c63cdf455b51a9ea77"], 0x24}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b000000"], 0x48) r9 = syz_open_dev$sg(&(0x7f0000000200), 0x682e, 0x212a02) r10 = fcntl$dupfd(r9, 0x0, r9) write$sndseq(r10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r10, 0x227d, &(0x7f00000018c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r8, @ANYBLOB="30d02002af08b948c1fef23b6d26f4e4d392e2be5fc68cd25c7fbb7a933248e9c855a5c0b50a54110b008ecd52b717f2007e0ee4d46bf9c4df9654efe06fd5237cbeebfb25477f8bf8ae2e8d6b8479a9ed29c4538d30d7676eea065a6acf4897cbfe51752240ab91e1a5cf4dcfc479c285ec93c86e9998854a58035d4f521f2fbf54b2f4303fcb09d818f1a636e9d8ccaff4021da74cb15981459167ad12261a013778d7e0d3f15f63b393e852a800490e1477d9a0198a1c79311a2208c5119105180913d180a1aec62557dc34d95e5160af287670abeff69eeefab2beb0ce", @ANYRES16=r0, @ANYRESOCT=r8, @ANYRES32=r3, @ANYRES64], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r8, @ANYRES32=r11, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r13 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r13, 0xffffffffffffffff, 0x7, 0x3) 924.353286ms ago: executing program 0 (id=1297): ioperm(0x0, 0x3, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) socket$kcm(0x15, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="d80000001b000100feffffff00000000acff07aa0000000000000000000000000a01010100000000000000010000000000000000000000400200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c0015000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000004000000990000000b0000000000003bb87475722d320730e1a9b88310000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "167d591af5982313b9e4d2034b4953a7ab23c8b26df7c38d80f283c081150b632c2192e30c69738767f5c27c2e4131a67ada39ce113306b7cd9e5f3448425dde"}, 0x48, 0xffffffffffffffff) 879.469646ms ago: executing program 3 (id=1298): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pwritev2(r1, &(0x7f0000000d40)=[{&(0x7f0000000680)="d54fb2f854cd6ed1353ea300003ef73c84dd45af677a2c11f7a18a5ac62a3e390b3fe6936d9f01b162c6edcc3b93292c3b2afbfb958b0da72f3321e16c2d1ed527891f64937c76a7e2f90f37914cf7c90ba511699b3f006c693ff689c83d4419fbfb50b5723f6127d8caad4b4240ce823fcc253d16740f40ed344dc957a5c6a1b526898bf8a6b352548a", 0x8a}, {&(0x7f00000009c0)="6c0117ea69cd05d518000832a80b1acc155159ac6aab56958d3d145d92ac35961f486f5d4be7954542b7dd47a4c0459171db85c699274a2501886d29fe64bb97acccd5840a9abdc1873c76f44661b3db57cc126dc38142d2cbcd060882b166693f1f3c74341313fa507b8197dca7a802e9f84333d4b4fcf7e6caa81da29bcdb1a6cc3a8c9b7e14825a285cafb06de1412e91d4f0e64665b4898c560c5790c051e693fa9ed0e92afe7b75640705e18b0968d17ea8e43efcdff400b34ddd17868c1ffa3938516987", 0xc7}, {&(0x7f0000000040)="6785e6fbf8f0f2044360507ece9185b6273dd8a189272776c07148bf2aed71261dfc08405a6b8d6b50aa8e02ed9e407f997e397f78", 0x35}, {&(0x7f00000001c0)="9446", 0x2}, {&(0x7f0000000500)="59404548923a029b043dc79058fe6932ac864476772210d4", 0x18}, {&(0x7f0000000ac0)="ca7a27e412ddf7725fe6f2d1c8a1d36332834833c1b49b0a14449eb7422a3319ec4ed002d151757151a08d648f5f6da7d5a1c15c0cc5c7fc3112acd7b19fbc96256874ab52aa3e07ce048a3a15ce4705b77862584bfc7cd83eaf9113f827c94544cdfb72aac386e3c68e3ef0181ceda4aeeaaf84ddd23de331ac8f74a745f485b6799cef3f44b25a079ef3823f45fdb246c1", 0x92}, {&(0x7f0000000740)="633a757d396359ea2ce9056cfde5569d4fdf2d3e234d2ed4d38caacf89eb49be55f3f06ba628", 0x26}, {&(0x7f0000000780)="e82e8921a5ffe548be96aec8c73368b36661820058db2dc9ef2288e3e9d47cee95b9a77aa68a9879abe8aecd9f1beca64be22a1e65e1", 0x36}, {&(0x7f0000000b80)="e72741a17294e7fb07d33669680472acf3aeb66dabd9118ce78dc5cbdc57513f1f4b2a933e13086f56a3fea9854936c3dcf74892680ee7f0d5cf12d75bfb7804c7c6dc97ba2cfc6184923f6fc73225c6cf2fda1ec6a3c6f116439013cb41e0e8526461b0c0d13517b662025ff89e8db35a1fe370d6a56a034e0cddf54598ab4cf40dc5f3fa88c5e9c329b8856d46640eb4d7780e4250ff1206f279fbdec10b12b8628a5059ec7e6439267bd58a5a77dfbb0c59e00c5cd4242d3940b2e24d8419884be1bf1ae07aa0c7376b08ffcb18", 0xcf}, {&(0x7f0000000c80)="1b140a282ac8bc1e70680bb46fd514a3065988844e47610053e982d9a93f542a8dc574dde4bf14628bb9a3698c795f368be525a70ca0841a7b87ed66f6ca376d0e3d9a6386ec3f6723b438f98a29d3308757f7d301884d58d685f6cac9775c1b546aeea9a074bf01310096238ab55d5a31c80b941bea841b4c56f0b43cbd4d5900de33be69c4f1dc90a9a273b9693d4652eaf20f7159bb916a7526a938534739", 0xa0}], 0xa, 0x1, 0xc, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x201, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) 842.262586ms ago: executing program 0 (id=1299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) (fail_nth: 8) 454.236458ms ago: executing program 3 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001800018014000200776732000000000000000000000000001c000380"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a396879010187d3ce7b84dd94f77100f4f8c17cd3fa7c86bfd86df0591ab397de730befc33843cfd1c85cb8b50e796f64b76d3e3cb2c6f9d7b6822e32be3d26250d6", 0x81}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000dff4d0e0cb1ef03d7b495dee581509d38e750170d1272717aeaac95dc7bb572c17030d7acbe346a443bc90295bbac5ec0a54a3221e1fb67e7cfe0f8b0de38a696084550e07a5a0307ad4353b92a82baeb36d98c77b385cb0998bfb44b20d95d5a8cacafae83849ad7fe9232b457bf09a404522e8e7d52426cfa0b0f4e09093e59ccc02e0d0ab3ca04c9d58a81fab39a95fff0ba2b42b6bc63ba3c22771111facd44c69ecbacb31cf02f56a794b7a39932ee81f4d62e33728256abacb1ad72f1d9866a375b293f3d3cd4a99adf620569f4b4735c8193fb8a46662b4589379bc3cc17c3c41627cd16b87ce23ca24616d704d", @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf25430000000c0058002e000000000000000c00580013000000000000000c0058007a000000000000000c0058005e00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040084}, 0x4011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d9581470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b7200"/643], 0x1, 0x120b, &(0x7f00000036c0)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) unshare(0x2040400) r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8, 0x3, 0x2, 0x6669, 0x8, 0x400, 0x7}, 0x1c) 453.779918ms ago: executing program 5 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, r1, 0x2) 453.521638ms ago: executing program 0 (id=1302): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r3) 265.162099ms ago: executing program 1 (id=1303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000010000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=',fscontext=s']) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}], 0x10) 234.858259ms ago: executing program 0 (id=1305): r0 = open(&(0x7f0000000000)='./file0\x00', 0x8e040, 0x0) readahead(r0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYBLOB, @ANYRESDEC=r5, @ANYBLOB="84a0b78e753eb288a2da246bc41abd3807354b2ef82540a01449378a7572e03088501551eb52950ff80c958e297366a203b5bb7740155d736c708fd4d54543763ee445372c472455d84494803dac5d947c5d4804f6c13a37e324ecb854f3fc9505ce820b940f8a985f7a8af0c0cf453e274bec0e165cc6044140a68961458b543d07594188410f61464d6f41888f24f1978b86cf97d041c81a90c173c274246a4fb6e2ccc684427d37748a5187aa2d194f", @ANYRES8], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x111, 0x8}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r12], 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0xa000000, {0x0, 0x0, 0x0, r12, 0x192}}, 0x20}}, 0x0) 126.05237ms ago: executing program 1 (id=1306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pwritev2(r1, &(0x7f0000000d40)=[{&(0x7f0000000680)="d54fb2f854cd6ed1353ea300003ef73c84dd45af677a2c11f7a18a5ac62a3e390b3fe6936d9f01b162c6edcc3b93292c3b2afbfb958b0da72f3321e16c2d1ed527891f64937c76a7e2f90f37914cf7c90ba511699b3f006c693ff689c83d4419fbfb50b5723f6127d8caad4b4240ce823fcc253d16740f40ed344dc957a5c6a1b526898bf8a6b352548a", 0x8a}, {&(0x7f00000009c0)="6c0117ea69cd05d518000832a80b1acc155159ac6aab56958d3d145d92ac35961f486f5d4be7954542b7dd47a4c0459171db85c699274a2501886d29fe64bb97acccd5840a9abdc1873c76f44661b3db57cc126dc38142d2cbcd060882b166693f1f3c74341313fa507b8197dca7a802e9f84333d4b4fcf7e6caa81da29bcdb1a6cc3a8c9b7e14825a285cafb06de1412e91d4f0e64665b4898c560c5790c051e693fa9ed0e92afe7b75640705e18b0968d17ea8e43efcdff400b34ddd17868c1ffa3938516987", 0xc7}, {&(0x7f0000000040)="6785e6fbf8f0f2044360507ece9185b6273dd8a189272776c07148bf2aed71261dfc08405a6b8d6b50aa8e02ed9e407f997e397f78", 0x35}, {&(0x7f00000001c0)="9446", 0x2}, {&(0x7f0000000500)="59404548923a029b043dc79058fe6932ac864476772210d4", 0x18}, {&(0x7f0000000ac0)="ca7a27e412ddf7725fe6f2d1c8a1d36332834833c1b49b0a14449eb7422a3319ec4ed002d151757151a08d648f5f6da7d5a1c15c0cc5c7fc3112acd7b19fbc96256874ab52aa3e07ce048a3a15ce4705b77862584bfc7cd83eaf9113f827c94544cdfb72aac386e3c68e3ef0181ceda4aeeaaf84ddd23de331ac8f74a745f485b6799cef3f44b25a079ef3823f45fdb246c1", 0x92}, {&(0x7f0000000740)="633a757d396359ea2ce9056cfde5569d4fdf2d3e234d2ed4d38caacf89eb49be55f3f06ba628", 0x26}, {&(0x7f0000000780)="e82e8921a5ffe548be96aec8c73368b36661820058db2dc9ef2288e3e9d47cee95b9a77aa68a9879abe8aecd9f1beca64be22a1e65e1", 0x36}, {&(0x7f0000000b80)="e72741a17294e7fb07d33669680472acf3aeb66dabd9118ce78dc5cbdc57513f1f4b2a933e13086f56a3fea9854936c3dcf74892680ee7f0d5cf12d75bfb7804c7c6dc97ba2cfc6184923f6fc73225c6cf2fda1ec6a3c6f116439013cb41e0e8526461b0c0d13517b662025ff89e8db35a1fe370d6a56a034e0cddf54598ab4cf40dc5f3fa88c5e9c329b8856d46640eb4d7780e4250ff1206f279fbdec10b12b8628a5059ec7e6439267bd58a5a77dfbb0c59e00c5cd4242d3940b2e24d8419884be1bf1ae07aa0c7376b08ffcb18", 0xcf}, {&(0x7f0000000c80)="1b140a282ac8bc1e70680bb46fd514a3065988844e47610053e982d9a93f542a8dc574dde4bf14628bb9a3698c795f368be525a70ca0841a7b87ed66f6ca376d0e3d9a6386ec3f6723b438f98a29d3308757f7d301884d58d685f6cac9775c1b546aeea9a074bf01310096238ab55d5a31c80b941bea841b4c56f0b43cbd4d5900de33be69c4f1dc90a9a273b9693d4652eaf20f7159bb916a7526a938534739", 0xa0}], 0xa, 0x1, 0xc, 0x14) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) 125.55979ms ago: executing program 2 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x5, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) 125.276ms ago: executing program 1 (id=1308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x8000000000000000}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x11, &(0x7f0000000380)={@local, @remote, @void, {@x25={0x805, {0x2, 0x2, 0xb}}}}, 0x0) 10.34875ms ago: executing program 5 (id=1309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x7d7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f0000000300)='(', 0x1) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000020240)='./file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="820a9082c850f913e11b146ee59d75153f7a65038db39ad5ec5429fa02731b28570e9cb221738dfb73c559cb7570e9f95c9775037ea7", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000800)={'vlan0\x00', @link_local={0x1, 0x32}}) 9.65627ms ago: executing program 0 (id=1310): r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xb60c, 0x800}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "000000b72000", "0d07080d004fcfabd5e8ffff1a8600", "aba200fe", "865703b7e43b34e4"}, 0x28) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r5 = io_uring_setup(0x5785, &(0x7f0000000180)={0x0, 0xa53f, 0x40, 0x1, 0x23a}) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x30, r5, 0x8000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@grpquota}, {@nombcache}, {@nobh}]}, 0x1, 0x502, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 8.27988ms ago: executing program 2 (id=1311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pwritev2(r1, &(0x7f0000000d40)=[{&(0x7f0000000680)="d54fb2f854cd6ed1353ea300003ef73c84dd45af677a2c11f7a18a5ac62a3e390b3fe6936d9f01b162c6edcc3b93292c3b2afbfb958b0da72f3321e16c2d1ed527891f64937c76a7e2f90f37914cf7c90ba511699b3f006c693ff689c83d4419fbfb50b5723f6127d8caad4b4240ce823fcc253d16740f40ed344dc957a5c6a1b526898bf8a6b352548a", 0x8a}, {&(0x7f00000009c0)="6c0117ea69cd05d518000832a80b1acc155159ac6aab56958d3d145d92ac35961f486f5d4be7954542b7dd47a4c0459171db85c699274a2501886d29fe64bb97acccd5840a9abdc1873c76f44661b3db57cc126dc38142d2cbcd060882b166693f1f3c74341313fa507b8197dca7a802e9f84333d4b4fcf7e6caa81da29bcdb1a6cc3a8c9b7e14825a285cafb06de1412e91d4f0e64665b4898c560c5790c051e693fa9ed0e92afe7b75640705e18b0968d17ea8e43efcdff400b34ddd17868c1ffa3938516987", 0xc7}, {&(0x7f0000000040)="6785e6fbf8f0f2044360507ece9185b6273dd8a189272776c07148bf2aed71261dfc08405a6b8d6b50aa8e02ed9e407f997e397f78", 0x35}, {&(0x7f00000001c0)="9446", 0x2}, {&(0x7f0000000500)="59404548923a029b043dc79058fe6932ac864476772210d4", 0x18}, {&(0x7f0000000ac0)="ca7a27e412ddf7725fe6f2d1c8a1d36332834833c1b49b0a14449eb7422a3319ec4ed002d151757151a08d648f5f6da7d5a1c15c0cc5c7fc3112acd7b19fbc96256874ab52aa3e07ce048a3a15ce4705b77862584bfc7cd83eaf9113f827c94544cdfb72aac386e3c68e3ef0181ceda4aeeaaf84ddd23de331ac8f74a745f485b6799cef3f44b25a079ef3823f45fdb246c1", 0x92}, {&(0x7f0000000740)="633a757d396359ea2ce9056cfde5569d4fdf2d3e234d2ed4d38caacf89eb49be55f3f06ba628", 0x26}, {&(0x7f0000000780)="e82e8921a5ffe548be96aec8c73368b36661820058db2dc9ef2288e3e9d47cee95b9a77aa68a9879abe8aecd9f1beca64be22a1e65e1", 0x36}, {&(0x7f0000000b80)="e72741a17294e7fb07d33669680472acf3aeb66dabd9118ce78dc5cbdc57513f1f4b2a933e13086f56a3fea9854936c3dcf74892680ee7f0d5cf12d75bfb7804c7c6dc97ba2cfc6184923f6fc73225c6cf2fda1ec6a3c6f116439013cb41e0e8526461b0c0d13517b662025ff89e8db35a1fe370d6a56a034e0cddf54598ab4cf40dc5f3fa88c5e9c329b8856d46640eb4d7780e4250ff1206f279fbdec10b12b8628a5059ec7e6439267bd58a5a77dfbb0c59e00c5cd4242d3940b2e24d8419884be1bf1ae07aa0c7376b08ffcb18", 0xcf}, {&(0x7f0000000c80)="1b140a282ac8bc1e70680bb46fd514a3065988844e47610053e982d9a93f542a8dc574dde4bf14628bb9a3698c795f368be525a70ca0841a7b87ed66f6ca376d0e3d9a6386ec3f6723b438f98a29d3308757f7d301884d58d685f6cac9775c1b546aeea9a074bf01310096238ab55d5a31c80b941bea841b4c56f0b43cbd4d5900de33be69c4f1dc90a9a273b9693d4652eaf20f7159bb916a7526a938534739", 0xa0}], 0xa, 0x1, 0xc, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x201, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=1312): prctl$PR_SET_NAME(0xf, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x73, 0x101301) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe87a, 0x500) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x80089203, 0x200000000000000) kernel console output (not intermixed with test programs): 000000000001200 R11: 0000000000000246 R12: 0000000000000001 [ 101.527065][ T6066] R13: 0000000000000000 R14: 00007fd9df3c5fa0 R15: 00007ffcdab00d18 [ 101.535065][ T6066] [ 101.565691][ T6074] loop2: detected capacity change from 0 to 512 [ 101.588657][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.608875][ T6074] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.808: bg 0: block 5: invalid block bitmap [ 101.651554][ T6079] FAULT_INJECTION: forcing a failure. [ 101.651554][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 101.662970][ T6074] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 101.664236][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.3.810 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 101.683183][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.689741][ T6074] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.808: attempt to clear invalid blocks 9508352 len 1 [ 101.693249][ T6079] Call Trace: [ 101.693260][ T6079] [ 101.712710][ T6079] dump_stack_lvl+0xf2/0x150 [ 101.717349][ T6079] dump_stack+0x15/0x1a [ 101.721548][ T6079] should_fail_ex+0x223/0x230 [ 101.726272][ T6079] should_failslab+0x8f/0xb0 [ 101.730906][ T6079] kmem_cache_alloc_node_noprof+0x59/0x320 [ 101.730950][ T6071] loop1: detected capacity change from 0 to 8192 [ 101.736739][ T6079] ? __alloc_skb+0x10b/0x310 [ 101.736779][ T6079] __alloc_skb+0x10b/0x310 [ 101.743981][ T6074] EXT4-fs (loop2): 1 orphan inode deleted [ 101.747671][ T6079] inet_netconf_notify_devconf+0x15a/0x210 [ 101.754962][ T6074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.757873][ T6079] inetdev_event+0x63d/0xac0 [ 101.780870][ T6079] ? cfg802154_netdev_notifier_call+0xa8/0x560 [ 101.787054][ T6079] ? __pfx_arp_netdev_event+0x10/0x10 [ 101.792468][ T6079] ? __pfx_inetdev_event+0x10/0x10 [ 101.797618][ T6079] raw_notifier_call_chain+0x6f/0x1d0 [ 101.802076][ T6081] netlink: 'syz.4.811': attribute type 3 has an invalid length. [ 101.803014][ T6079] ? up_write+0x30/0xf0 [ 101.810772][ T6081] netlink: 'syz.4.811': attribute type 3 has an invalid length. [ 101.814844][ T6079] ? mutex_is_locked+0x12/0x30 [ 101.825800][ T6081] __nla_validate_parse: 6 callbacks suppressed [ 101.825822][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.811'. [ 101.827216][ T6079] call_netdevice_notifiers_info+0xae/0x100 [ 101.848251][ T6079] unregister_netdevice_many_notify+0x8b7/0x11b0 [ 101.854665][ T6079] ? __flush_work+0x495/0x570 [ 101.859409][ T6079] ? detach_if_pending+0x94/0x200 [ 101.864635][ T6079] unregister_netdevice_queue+0x1f4/0x220 [ 101.870404][ T6079] unregister_netdev+0x1c/0x30 [ 101.875211][ T6079] slip_close+0xe5/0x100 [ 101.879488][ T6079] ? __pfx_slip_close+0x10/0x10 [ 101.884380][ T6079] tty_ldisc_close+0x77/0xa0 [ 101.889010][ T6079] tty_set_ldisc+0x1e2/0x3b0 [ 101.893698][ T6079] tiocsetd+0x52/0x60 [ 101.897767][ T6079] tty_ioctl+0xa94/0xbe0 [ 101.902052][ T6079] ? __pfx_tty_ioctl+0x10/0x10 [ 101.906946][ T6079] __se_sys_ioctl+0xc9/0x140 [ 101.911655][ T6079] __x64_sys_ioctl+0x43/0x50 [ 101.916286][ T6079] x64_sys_call+0x1690/0x2dc0 [ 101.921135][ T6079] do_syscall_64+0xc9/0x1c0 [ 101.925677][ T6079] ? clear_bhb_loop+0x55/0xb0 [ 101.930610][ T6079] ? clear_bhb_loop+0x55/0xb0 [ 101.935415][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.941335][ T6079] RIP: 0033:0x7fcfd3520849 [ 101.945759][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.965389][ T6079] RSP: 002b:00007fcfd1b97058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.974029][ T6079] RAX: ffffffffffffffda RBX: 00007fcfd36e5fa0 RCX: 00007fcfd3520849 [ 101.982061][ T6079] RDX: 0000000020000140 RSI: 0000000000005423 RDI: 0000000000000006 [ 101.990044][ T6079] RBP: 00007fcfd1b970a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.998054][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.006034][ T6079] R13: 0000000000000000 R14: 00007fcfd36e5fa0 R15: 00007fff4e368b88 [ 102.014070][ T6079] [ 102.109898][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.267938][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 103.193760][ T6105] loop3: detected capacity change from 0 to 8192 [ 103.743381][ T6119] serio: Serial port ptm0 [ 103.792871][ T6115] loop1: detected capacity change from 0 to 512 [ 103.808563][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.817411][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.826488][ T6115] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 103.866820][ T6115] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 103.873743][ T6115] EXT4-fs (loop1): mount failed [ 103.881170][ T6130] FAULT_INJECTION: forcing a failure. [ 103.881170][ T6130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.894418][ T6130] CPU: 1 UID: 0 PID: 6130 Comm: syz.0.826 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 103.904694][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.914794][ T6130] Call Trace: [ 103.918115][ T6130] [ 103.921068][ T6130] dump_stack_lvl+0xf2/0x150 [ 103.925827][ T6130] dump_stack+0x15/0x1a [ 103.930091][ T6130] should_fail_ex+0x223/0x230 [ 103.934793][ T6130] should_fail+0xb/0x10 [ 103.938972][ T6130] should_fail_usercopy+0x1a/0x20 [ 103.944035][ T6130] _copy_from_user+0x1e/0xb0 [ 103.948783][ T6130] copy_msghdr_from_user+0x54/0x2a0 [ 103.954026][ T6130] ? __fget_files+0x17c/0x1c0 [ 103.958894][ T6130] __sys_sendmsg+0x13e/0x230 [ 103.963557][ T6130] __x64_sys_sendmsg+0x46/0x50 [ 103.968378][ T6130] x64_sys_call+0x2734/0x2dc0 [ 103.973097][ T6130] do_syscall_64+0xc9/0x1c0 [ 103.977741][ T6130] ? clear_bhb_loop+0x55/0xb0 [ 103.982549][ T6130] ? clear_bhb_loop+0x55/0xb0 [ 103.987282][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.993269][ T6130] RIP: 0033:0x7f20b0e00849 [ 103.996741][ T6135] netlink: 100 bytes leftover after parsing attributes in process `syz.4.828'. [ 103.997695][ T6130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.997722][ T6130] RSP: 002b:00007f20af477058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.034887][ T6130] RAX: ffffffffffffffda RBX: 00007f20b0fc5fa0 RCX: 00007f20b0e00849 [ 104.042979][ T6130] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 104.051006][ T6130] RBP: 00007f20af4770a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.058996][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.066981][ T6130] R13: 0000000000000000 R14: 00007f20b0fc5fa0 R15: 00007ffc28402d18 [ 104.075146][ T6130] [ 104.156378][ T6141] syz.4.831[6141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.156519][ T6141] syz.4.831[6141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.169866][ T6141] syz.4.831[6141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.302283][ T6149] Â: renamed from vlan0 (while UP) [ 104.372096][ T6153] loop1: detected capacity change from 0 to 512 [ 104.422065][ T6153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.463433][ T6153] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.486040][ T6175] FAULT_INJECTION: forcing a failure. [ 104.486040][ T6175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.499394][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz.2.843 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 104.509663][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.519791][ T6175] Call Trace: [ 104.523090][ T6175] [ 104.526128][ T6175] dump_stack_lvl+0xf2/0x150 [ 104.530874][ T6175] dump_stack+0x15/0x1a [ 104.535094][ T6175] should_fail_ex+0x223/0x230 [ 104.539879][ T6175] should_fail_alloc_page+0xfd/0x110 [ 104.545289][ T6175] __alloc_pages_noprof+0x109/0x340 [ 104.550530][ T6175] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 104.555966][ T6175] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 104.561386][ T6175] do_wp_page+0x64b/0x2340 [ 104.565891][ T6175] ? __rcu_read_lock+0x36/0x50 [ 104.570698][ T6175] handle_mm_fault+0xc63/0x2ac0 [ 104.575717][ T6175] exc_page_fault+0x3b9/0x650 [ 104.580425][ T6175] asm_exc_page_fault+0x26/0x30 [ 104.585472][ T6175] RIP: 0033:0x7fe5a5c11990 [ 104.590082][ T6175] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 104.609792][ T6175] RSP: 002b:00007fe5a43c64c0 EFLAGS: 00010202 [ 104.615945][ T6175] RAX: 0000000000011005 RBX: 00007fe5a43c6560 RCX: 0000000000000021 [ 104.623997][ T6175] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007fe5a43c6600 [ 104.631994][ T6175] RBP: 0000000000000022 R08: 00007fe59bfa7000 R09: 0000000000000008 [ 104.639992][ T6175] R10: 0000000020001702 R11: 0000000000000791 R12: 0000000000000601 [ 104.647982][ T6175] R13: 00007fe5a5dd8320 R14: 0000000000000015 R15: 00007fe5a43c6600 [ 104.655984][ T6175] [ 104.659281][ T6175] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 104.707179][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.724431][ T6175] loop2: detected capacity change from 0 to 2048 [ 104.751668][ T6185] syz.0.847[6185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.751754][ T6185] syz.0.847[6185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.763677][ T6185] syz.0.847[6185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.764756][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.802441][ T6183] loop1: detected capacity change from 0 to 1024 [ 104.809820][ T6183] EXT4-fs: Ignoring removed nobh option [ 104.815449][ T6183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.822982][ T6183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.838476][ T6175] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.929991][ T6183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.001990][ T6183] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 105.014390][ T6209] Â: renamed from vlan0 (while UP) [ 105.125078][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.360640][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 105.360656][ T29] audit: type=1400 audit(2000000047.280:8114): avc: denied { connect } for pid=6234 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.401945][ T29] audit: type=1400 audit(2000000047.310:8115): avc: denied { getopt } for pid=6234 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.466781][ T6238] loop1: detected capacity change from 0 to 512 [ 105.503514][ T6238] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.864: corrupted in-inode xattr: invalid ea_ino [ 105.527447][ T6238] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.864: couldn't read orphan inode 15 (err -117) [ 105.609209][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.635422][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.733630][ T6256] Â: renamed from vlan0 (while UP) [ 105.782015][ T6261] loop1: detected capacity change from 0 to 164 [ 105.800852][ T6261] Unable to read rock-ridge attributes [ 105.821619][ T6259] loop2: detected capacity change from 0 to 1024 [ 105.835724][ T6261] Unable to read rock-ridge attributes [ 105.840282][ T6259] EXT4-fs: Ignoring removed nobh option [ 105.846828][ T6259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.855127][ T6259] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.855132][ T6261] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 105.855444][ T6261] Unable to read rock-ridge attributes [ 105.879215][ T6259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.906647][ T6261] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 105.906654][ T6259] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 105.946144][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.015618][ T6272] loop4: detected capacity change from 0 to 128 [ 106.220261][ T29] audit: type=1400 audit(2000000048.140:8116): avc: denied { create } for pid=6284 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 106.270688][ T29] audit: type=1400 audit(2000000048.190:8117): avc: denied { wake_alarm } for pid=6291 comm="syz.1.883" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.361012][ T29] audit: type=1326 audit(2000000048.280:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 106.384480][ T29] audit: type=1326 audit(2000000048.280:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 106.407855][ T29] audit: type=1326 audit(2000000048.280:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 106.487572][ T6286] Process accounting resumed [ 106.502575][ T29] audit: type=1326 audit(2000000048.340:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 106.526091][ T29] audit: type=1326 audit(2000000048.340:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 106.549718][ T29] audit: type=1326 audit(2000000048.340:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 106.602239][ T6315] xt_hashlimit: max too large, truncated to 1048576 [ 106.638014][ T6315] Cannot find set identified by id 0 to match [ 106.818363][ T6322] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 106.929747][ T6280] FAULT_INJECTION: forcing a failure. [ 106.929747][ T6280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.943021][ T6280] CPU: 0 UID: 0 PID: 6280 Comm: syz.4.875 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 106.953388][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.963503][ T6280] Call Trace: [ 106.966848][ T6280] [ 106.969789][ T6280] dump_stack_lvl+0xf2/0x150 [ 106.974421][ T6280] dump_stack+0x15/0x1a [ 106.978691][ T6280] should_fail_ex+0x223/0x230 [ 106.983390][ T6280] should_fail_alloc_page+0xfd/0x110 [ 106.988818][ T6280] __alloc_pages_noprof+0x109/0x340 [ 106.994106][ T6280] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 106.999519][ T6280] folio_alloc_noprof+0xee/0x130 [ 107.004494][ T6280] filemap_alloc_folio_noprof+0x69/0x220 [ 107.010288][ T6280] __filemap_get_folio+0x298/0x5b0 [ 107.015580][ T6280] ? ktime_get+0x1e5/0x210 [ 107.020241][ T6280] cont_write_begin+0x512/0x860 [ 107.025200][ T6280] fat_write_begin+0x51/0xe0 [ 107.029811][ T6280] ? __pfx_fat_get_block+0x10/0x10 [ 107.035401][ T6280] cont_write_begin+0x18b/0x860 [ 107.040305][ T6280] fat_write_begin+0x51/0xe0 [ 107.044997][ T6280] ? __pfx_fat_get_block+0x10/0x10 [ 107.050156][ T6280] generic_cont_expand_simple+0xaa/0x150 [ 107.056215][ T6280] fat_cont_expand+0x3a/0x160 [ 107.061060][ T6280] fat_fallocate+0x17c/0x1d0 [ 107.065908][ T6280] vfs_fallocate+0x368/0x3b0 [ 107.070716][ T6280] __x64_sys_fallocate+0x78/0xc0 [ 107.075720][ T6280] x64_sys_call+0x43c/0x2dc0 [ 107.080524][ T6280] do_syscall_64+0xc9/0x1c0 [ 107.085108][ T6280] ? clear_bhb_loop+0x55/0xb0 [ 107.089822][ T6280] ? clear_bhb_loop+0x55/0xb0 [ 107.094624][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.100639][ T6280] RIP: 0033:0x7fd9df200849 [ 107.105108][ T6280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.124768][ T6280] RSP: 002b:00007fd9dd835058 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 107.133252][ T6280] RAX: ffffffffffffffda RBX: 00007fd9df3c6160 RCX: 00007fd9df200849 [ 107.141252][ T6280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 107.149252][ T6280] RBP: 00007fd9dd8350a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.157335][ T6280] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000001 [ 107.165425][ T6280] R13: 0000000000000001 R14: 00007fd9df3c6160 R15: 00007ffcdab00d18 [ 107.173493][ T6280] [ 107.180521][ T6322] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.461518][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.482899][ T6337] Â: renamed from vlan0 (while UP) [ 107.602996][ T6341] loop2: detected capacity change from 0 to 1024 [ 107.610442][ T6341] EXT4-fs: Ignoring removed orlov option [ 107.616196][ T6341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.675249][ T6341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.698261][ T6344] loop1: detected capacity change from 0 to 1764 [ 107.876803][ T6361] loop3: detected capacity change from 0 to 2048 [ 107.941642][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.963016][ T6367] SELinux: Context system_u:object_r:su_exec_t:s0 is not valid (left unmapped). [ 108.033174][ T6372] loop1: detected capacity change from 0 to 512 [ 108.071795][ T6372] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.904: iget: bogus i_mode (0) [ 108.138440][ T6372] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.904: couldn't read orphan inode 17 (err -117) [ 108.203577][ T6372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.355948][ T6387] dvmrp0: entered allmulticast mode [ 108.395187][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.911'. [ 108.419464][ T6387] dvmrp0: left allmulticast mode [ 108.429615][ T6364] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 7: invalid block bitmap [ 108.559785][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.682327][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.716560][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.019213][ T6406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.919'. [ 109.107480][ T6408] netlink: 256 bytes leftover after parsing attributes in process `syz.1.912'. [ 109.172591][ T6411] netlink: 830 bytes leftover after parsing attributes in process `syz.3.921'. [ 109.299629][ T6409] loop4: detected capacity change from 0 to 8192 [ 109.334579][ T6419] loop1: detected capacity change from 0 to 256 [ 109.366625][ T6421] FAULT_INJECTION: forcing a failure. [ 109.366625][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 109.379435][ T6421] CPU: 0 UID: 0 PID: 6421 Comm: syz.0.925 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 109.387399][ T6425] dvmrp0: entered allmulticast mode [ 109.389912][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.389931][ T6421] Call Trace: [ 109.389940][ T6421] [ 109.389949][ T6421] dump_stack_lvl+0xf2/0x150 [ 109.398958][ T6425] dvmrp0: left allmulticast mode [ 109.405232][ T6421] dump_stack+0x15/0x1a [ 109.425362][ T6421] should_fail_ex+0x223/0x230 [ 109.430198][ T6421] should_failslab+0x8f/0xb0 [ 109.434899][ T6421] kmem_cache_alloc_noprof+0x52/0x320 [ 109.440324][ T6421] ? getname_kernel+0x3d/0x1e0 [ 109.445126][ T6421] getname_kernel+0x3d/0x1e0 [ 109.449743][ T6421] kern_path+0x21/0x120 [ 109.453918][ T6421] lookup_bdev+0x62/0x140 [ 109.458283][ T6421] __se_sys_quotactl+0x1b3/0x660 [ 109.463251][ T6421] __x64_sys_quotactl+0x55/0x70 [ 109.468119][ T6421] x64_sys_call+0x826/0x2dc0 [ 109.472721][ T6421] do_syscall_64+0xc9/0x1c0 [ 109.477413][ T6421] ? clear_bhb_loop+0x55/0xb0 [ 109.482126][ T6421] ? clear_bhb_loop+0x55/0xb0 [ 109.486912][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.492848][ T6421] RIP: 0033:0x7f20b0e00849 [ 109.497707][ T6421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.517338][ T6421] RSP: 002b:00007f20af477058 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 109.525865][ T6421] RAX: ffffffffffffffda RBX: 00007f20b0fc5fa0 RCX: 00007f20b0e00849 [ 109.533858][ T6421] RDX: 000000000000ee00 RSI: 0000000020000040 RDI: ffffffff80000701 [ 109.541930][ T6421] RBP: 00007f20af4770a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.549908][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.557939][ T6421] R13: 0000000000000000 R14: 00007f20b0fc5fa0 R15: 00007ffc28402d18 [ 109.565930][ T6421] [ 109.626406][ T6423] dvmrp0: entered allmulticast mode [ 109.633554][ T6423] dvmrp0: left allmulticast mode [ 109.802470][ T6435] FAULT_INJECTION: forcing a failure. [ 109.802470][ T6435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.815876][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.0.931 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 109.826179][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.836288][ T6435] Call Trace: [ 109.839583][ T6435] [ 109.842525][ T6435] dump_stack_lvl+0xf2/0x150 [ 109.847262][ T6435] dump_stack+0x15/0x1a [ 109.851463][ T6435] should_fail_ex+0x223/0x230 [ 109.856181][ T6435] should_fail+0xb/0x10 [ 109.860451][ T6435] should_fail_usercopy+0x1a/0x20 [ 109.865502][ T6435] _copy_from_user+0x1e/0xb0 [ 109.870246][ T6435] dev_ethtool+0x53/0x14c0 [ 109.874769][ T6435] dev_ioctl+0x854/0xab0 [ 109.879128][ T6435] sock_do_ioctl+0x11c/0x260 [ 109.883775][ T6435] sock_ioctl+0x40f/0x600 [ 109.888130][ T6435] ? __pfx_sock_ioctl+0x10/0x10 [ 109.893017][ T6435] __se_sys_ioctl+0xc9/0x140 [ 109.897727][ T6435] __x64_sys_ioctl+0x43/0x50 [ 109.902355][ T6435] x64_sys_call+0x1690/0x2dc0 [ 109.907119][ T6435] do_syscall_64+0xc9/0x1c0 [ 109.911665][ T6435] ? clear_bhb_loop+0x55/0xb0 [ 109.916377][ T6435] ? clear_bhb_loop+0x55/0xb0 [ 109.921149][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.927081][ T6435] RIP: 0033:0x7f20b0e00849 [ 109.931602][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.951242][ T6435] RSP: 002b:00007f20af477058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.959810][ T6435] RAX: ffffffffffffffda RBX: 00007f20b0fc5fa0 RCX: 00007f20b0e00849 [ 109.967806][ T6435] RDX: 0000000020000340 RSI: 0000000000008946 RDI: 0000000000000005 [ 109.975816][ T6435] RBP: 00007f20af4770a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.983840][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.991841][ T6435] R13: 0000000000000000 R14: 00007f20b0fc5fa0 R15: 00007ffc28402d18 [ 109.999865][ T6435] [ 110.018538][ T6446] loop1: detected capacity change from 0 to 1024 [ 110.026398][ T6446] EXT4-fs: Ignoring removed orlov option [ 110.032178][ T6446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.068549][ T6446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.101122][ T6455] FAULT_INJECTION: forcing a failure. [ 110.101122][ T6455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.101154][ T6455] CPU: 1 UID: 0 PID: 6455 Comm: syz.2.939 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 110.101231][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.101247][ T6455] Call Trace: [ 110.101256][ T6455] [ 110.101264][ T6455] dump_stack_lvl+0xf2/0x150 [ 110.101307][ T6455] dump_stack+0x15/0x1a [ 110.101405][ T6455] should_fail_ex+0x223/0x230 [ 110.101503][ T6455] should_fail+0xb/0x10 [ 110.101531][ T6455] should_fail_usercopy+0x1a/0x20 [ 110.101565][ T6455] _copy_to_user+0x20/0xa0 [ 110.101665][ T6455] simple_read_from_buffer+0xa0/0x110 [ 110.101706][ T6455] proc_fail_nth_read+0xf9/0x140 [ 110.101761][ T6455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.101799][ T6455] vfs_read+0x1a2/0x700 [ 110.101831][ T6455] ? __rcu_read_unlock+0x4e/0x70 [ 110.101902][ T6455] ? __fget_files+0x17c/0x1c0 [ 110.101952][ T6455] ksys_read+0xe8/0x1b0 [ 110.102015][ T6455] __x64_sys_read+0x42/0x50 [ 110.102048][ T6455] x64_sys_call+0x2874/0x2dc0 [ 110.102075][ T6455] do_syscall_64+0xc9/0x1c0 [ 110.102111][ T6455] ? clear_bhb_loop+0x55/0xb0 [ 110.102192][ T6455] ? clear_bhb_loop+0x55/0xb0 [ 110.102259][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.102355][ T6455] RIP: 0033:0x7fe5a5d4f25c [ 110.102375][ T6455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 110.102449][ T6455] RSP: 002b:00007fe5a43c7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.102530][ T6455] RAX: ffffffffffffffda RBX: 00007fe5a5f15fa0 RCX: 00007fe5a5d4f25c [ 110.102547][ T6455] RDX: 000000000000000f RSI: 00007fe5a43c70b0 RDI: 0000000000000005 [ 110.102564][ T6455] RBP: 00007fe5a43c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.102580][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.102596][ T6455] R13: 0000000000000000 R14: 00007fe5a5f15fa0 R15: 00007ffe60508688 [ 110.102660][ T6455] [ 110.160533][ T6458] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 110.213361][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.302217][ T6465] dvmrp0: entered allmulticast mode [ 110.306512][ T6465] dvmrp0: left allmulticast mode [ 110.396396][ T6469] dvmrp0: entered allmulticast mode [ 110.399805][ T6469] dvmrp0: left allmulticast mode [ 110.434189][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 110.485222][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 110.485241][ T29] audit: type=1326 audit(2000000052.400:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d50849 code=0x7ffc0000 [ 110.644606][ T29] audit: type=1326 audit(2000000052.480:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d50849 code=0x7ffc0000 [ 110.696701][ T29] audit: type=1326 audit(2000000052.610:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe5a5d526dc code=0x7ffc0000 [ 110.696742][ T29] audit: type=1326 audit(2000000052.610:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe5a5d52614 code=0x7ffc0000 [ 110.696777][ T29] audit: type=1326 audit(2000000052.610:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d50849 code=0x7ffc0000 [ 110.696862][ T29] audit: type=1326 audit(2000000052.610:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d50849 code=0x7ffc0000 [ 110.696979][ T29] audit: type=1326 audit(2000000052.610:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe5a5d50849 code=0x7ffc0000 [ 110.697022][ T29] audit: type=1326 audit(2000000052.610:8603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d50849 code=0x7ffc0000 [ 110.697162][ T29] audit: type=1326 audit(2000000052.610:8604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d50849 code=0x7ffc0000 [ 110.697198][ T29] audit: type=1326 audit(2000000052.610:8605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.2.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe5a5d50849 code=0x7ffc0000 [ 110.792095][ T6481] loop3: detected capacity change from 0 to 512 [ 110.847071][ T6481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.847285][ T6481] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.865189][ T6482] loop1: detected capacity change from 0 to 512 [ 110.876428][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.891421][ T6482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.891491][ T6482] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.904669][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.035638][ T6497] netlink: 'syz.4.952': attribute type 10 has an invalid length. [ 111.220120][ T6500] loop3: detected capacity change from 0 to 1024 [ 111.249842][ T8] hid-generic 0000:0101:7BF6BA72.0004: hidraw0: HID vd129d6.5f Device [syz0] on syz1 [ 111.343159][ T6500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.366762][ T6497] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.807637][ T6513] dvmrp0: entered allmulticast mode [ 111.828886][ T6516] loop4: detected capacity change from 0 to 512 [ 111.839304][ T6517] dvmrp0: left allmulticast mode [ 111.864528][ T6516] EXT4-fs: Ignoring removed nobh option [ 111.901310][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.925707][ T6516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.942746][ T6516] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.976207][ T6524] loop3: detected capacity change from 0 to 1024 [ 111.994431][ T6524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.023000][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.036960][ T6529] loop1: detected capacity change from 0 to 512 [ 112.072310][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.085854][ T6529] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.097803][ T6529] FAULT_INJECTION: forcing a failure. [ 112.097803][ T6529] name failslab, interval 1, probability 0, space 0, times 0 [ 112.110492][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz.1.962 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 112.120755][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.130842][ T6529] Call Trace: [ 112.134144][ T6529] [ 112.137158][ T6529] dump_stack_lvl+0xf2/0x150 [ 112.141810][ T6529] dump_stack+0x15/0x1a [ 112.146022][ T6529] should_fail_ex+0x223/0x230 [ 112.150758][ T6529] should_failslab+0x8f/0xb0 [ 112.155399][ T6529] kmem_cache_alloc_noprof+0x52/0x320 [ 112.160828][ T6529] ? getname_kernel+0x3d/0x1e0 [ 112.165610][ T6529] getname_kernel+0x3d/0x1e0 [ 112.170213][ T6529] kern_path+0x21/0x120 [ 112.174394][ T6529] lookup_bdev+0x62/0x140 [ 112.178928][ T6529] __se_sys_quotactl+0x1b3/0x660 [ 112.184141][ T6529] __x64_sys_quotactl+0x55/0x70 [ 112.189043][ T6529] x64_sys_call+0x826/0x2dc0 [ 112.193709][ T6529] do_syscall_64+0xc9/0x1c0 [ 112.198319][ T6529] ? clear_bhb_loop+0x55/0xb0 [ 112.203039][ T6529] ? clear_bhb_loop+0x55/0xb0 [ 112.207902][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.213814][ T6529] RIP: 0033:0x7fd61ed60849 [ 112.218279][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.237919][ T6529] RSP: 002b:00007fd61d3d7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 112.246355][ T6529] RAX: ffffffffffffffda RBX: 00007fd61ef25fa0 RCX: 00007fd61ed60849 [ 112.254415][ T6529] RDX: 000000000000ee00 RSI: 0000000020000040 RDI: ffffffff80000701 [ 112.262400][ T6529] RBP: 00007fd61d3d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.270390][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.278523][ T6529] R13: 0000000000000000 R14: 00007fd61ef25fa0 R15: 00007ffd79bcc708 [ 112.286526][ T6529] [ 112.329195][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.357860][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'. [ 112.409181][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 112.419911][ T6544] loop4: detected capacity change from 0 to 128 [ 112.460085][ T6547] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 112.467783][ T6547] netlink: 224 bytes leftover after parsing attributes in process `syz.4.968'. [ 112.657045][ T6552] loop1: detected capacity change from 0 to 1024 [ 112.692287][ T6552] EXT4-fs: Ignoring removed nobh option [ 112.697937][ T6552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.738797][ T6558] dvmrp0: entered allmulticast mode [ 112.740612][ T6552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.770091][ T6558] dvmrp0: left allmulticast mode [ 112.782694][ T6552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.848640][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.989547][ T6567] loop1: detected capacity change from 0 to 512 [ 112.999887][ T6569] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.974'. [ 113.024503][ T6567] EXT4-fs: Ignoring removed nobh option [ 113.062038][ T6567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.096418][ T6567] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.257116][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.267856][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.315063][ T6577] pim6reg1: entered promiscuous mode [ 113.320613][ T6577] pim6reg1: entered allmulticast mode [ 113.366698][ T6586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6586 comm=syz.1.978 [ 113.411172][ T6586] netlink: 'syz.1.978': attribute type 1 has an invalid length. [ 113.444540][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.454401][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.978'. [ 113.542988][ T6602] FAULT_INJECTION: forcing a failure. [ 113.542988][ T6602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.556374][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.3.984 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 113.558645][ T6597] netlink: 'syz.0.982': attribute type 27 has an invalid length. [ 113.566718][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.566739][ T6602] Call Trace: [ 113.566746][ T6602] [ 113.566755][ T6602] dump_stack_lvl+0xf2/0x150 [ 113.595393][ T6602] dump_stack+0x15/0x1a [ 113.599631][ T6602] should_fail_ex+0x223/0x230 [ 113.604328][ T6602] should_fail_alloc_page+0xfd/0x110 [ 113.609730][ T6602] __alloc_pages_noprof+0x109/0x340 [ 113.615063][ T6602] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 113.620467][ T6602] folio_alloc_noprof+0xee/0x130 [ 113.625421][ T6602] filemap_alloc_folio_noprof+0x69/0x220 [ 113.631072][ T6602] __filemap_get_folio+0x298/0x5b0 [ 113.636195][ T6602] ? aio_setup_ring+0x1e4/0x6a0 [ 113.641074][ T6602] aio_setup_ring+0x263/0x6a0 [ 113.645816][ T6602] ioctx_alloc+0x2b2/0x4c0 [ 113.650363][ T6602] __se_sys_io_setup+0x6b/0x1b0 [ 113.655229][ T6602] __x64_sys_io_setup+0x31/0x40 [ 113.660106][ T6602] x64_sys_call+0x160f/0x2dc0 [ 113.664834][ T6602] do_syscall_64+0xc9/0x1c0 [ 113.669396][ T6602] ? clear_bhb_loop+0x55/0xb0 [ 113.674111][ T6602] ? clear_bhb_loop+0x55/0xb0 [ 113.678862][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.684779][ T6602] RIP: 0033:0x7fcfd3520849 [ 113.689306][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.709024][ T6602] RSP: 002b:00007fcfd1b97058 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 113.717471][ T6602] RAX: ffffffffffffffda RBX: 00007fcfd36e5fa0 RCX: 00007fcfd3520849 [ 113.725454][ T6602] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000002004 [ 113.733505][ T6602] RBP: 00007fcfd1b970a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.741480][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.749479][ T6602] R13: 0000000000000000 R14: 00007fcfd36e5fa0 R15: 00007fff4e368b88 [ 113.757467][ T6602] [ 113.836402][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.987'. [ 114.044610][ T6614] loop4: detected capacity change from 0 to 8192 [ 114.349318][ T6625] capability: warning: `syz.0.993' uses 32-bit capabilities (legacy support in use) [ 114.413020][ T6624] FAULT_INJECTION: forcing a failure. [ 114.413020][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 114.425802][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz.1.992 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 114.436078][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.446209][ T6624] Call Trace: [ 114.449508][ T6624] [ 114.452458][ T6624] dump_stack_lvl+0xf2/0x150 [ 114.457162][ T6624] dump_stack+0x15/0x1a [ 114.461429][ T6624] should_fail_ex+0x223/0x230 [ 114.466146][ T6624] ? tipc_nametbl_lookup_group+0x450/0x620 [ 114.472159][ T6624] should_failslab+0x8f/0xb0 [ 114.476790][ T6624] __kmalloc_cache_noprof+0x4e/0x320 [ 114.482147][ T6624] tipc_nametbl_lookup_group+0x450/0x620 [ 114.487818][ T6624] __tipc_sendmsg+0x1103/0x1c40 [ 114.492749][ T6624] ? __local_bh_enable_ip+0x6e/0x70 [ 114.498023][ T6624] ? _raw_spin_unlock_bh+0x36/0x40 [ 114.503190][ T6624] ? lock_sock_nested+0x10f/0x140 [ 114.508332][ T6624] ? __pfx_tipc_sendmsg+0x10/0x10 [ 114.513382][ T6624] tipc_sendmsg+0x3e/0x60 [ 114.517762][ T6624] __sock_sendmsg+0x140/0x180 [ 114.522462][ T6624] ____sys_sendmsg+0x312/0x410 [ 114.527332][ T6624] __sys_sendmsg+0x19d/0x230 [ 114.532000][ T6624] __x64_sys_sendmsg+0x46/0x50 [ 114.536805][ T6624] x64_sys_call+0x2734/0x2dc0 [ 114.541494][ T6624] do_syscall_64+0xc9/0x1c0 [ 114.546086][ T6624] ? clear_bhb_loop+0x55/0xb0 [ 114.550844][ T6624] ? clear_bhb_loop+0x55/0xb0 [ 114.555618][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.561553][ T6624] RIP: 0033:0x7fd61ed60849 [ 114.566063][ T6624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.585767][ T6624] RSP: 002b:00007fd61d3d7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.594391][ T6624] RAX: ffffffffffffffda RBX: 00007fd61ef25fa0 RCX: 00007fd61ed60849 [ 114.602382][ T6624] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000007 [ 114.610390][ T6624] RBP: 00007fd61d3d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.618454][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.626437][ T6624] R13: 0000000000000000 R14: 00007fd61ef25fa0 R15: 00007ffd79bcc708 [ 114.634446][ T6624] [ 114.861513][ T6634] FAULT_INJECTION: forcing a failure. [ 114.861513][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 114.874190][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.0.997 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 114.884528][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.894607][ T6634] Call Trace: [ 114.897901][ T6634] [ 114.900848][ T6634] dump_stack_lvl+0xf2/0x150 [ 114.905488][ T6634] dump_stack+0x15/0x1a [ 114.909729][ T6634] should_fail_ex+0x223/0x230 [ 114.914529][ T6634] should_failslab+0x8f/0xb0 [ 114.919245][ T6634] __kmalloc_node_noprof+0xad/0x410 [ 114.924467][ T6634] ? __kvmalloc_node_noprof+0x72/0x170 [ 114.929996][ T6634] __kvmalloc_node_noprof+0x72/0x170 [ 114.935305][ T6634] nf_hook_entries_grow+0x1bd/0x470 [ 114.940716][ T6634] __nf_register_net_hook+0x16b/0x480 [ 114.946137][ T6634] nf_register_net_hook+0x88/0x130 [ 114.951377][ T6634] nf_register_net_hooks+0x41/0x140 [ 114.956645][ T6634] nf_defrag_ipv4_enable+0x6c/0xc0 [ 114.961855][ T6634] tproxy_tg4_check+0x2d/0x100 [ 114.966657][ T6634] xt_check_target+0x266/0x480 [ 114.971564][ T6634] ? strnlen+0x28/0x50 [ 114.975678][ T6634] ? strcmp+0x21/0x50 [ 114.979754][ T6634] ? xt_find_target+0x1bd/0x1e0 [ 114.984630][ T6634] translate_table+0xc1e/0xf70 [ 114.989445][ T6634] do_ipt_set_ctl+0x7bd/0x8b0 [ 114.994148][ T6634] ? tcp_release_cb+0xfe/0x380 [ 114.999004][ T6634] nf_setsockopt+0x195/0x1b0 [ 115.003685][ T6634] ip_setsockopt+0xea/0x100 [ 115.008287][ T6634] tcp_setsockopt+0x93/0xb0 [ 115.012858][ T6634] sock_common_setsockopt+0x64/0x80 [ 115.018091][ T6634] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 115.024053][ T6634] __sys_setsockopt+0x187/0x200 [ 115.028928][ T6634] __x64_sys_setsockopt+0x66/0x80 [ 115.033973][ T6634] x64_sys_call+0x282e/0x2dc0 [ 115.038880][ T6634] do_syscall_64+0xc9/0x1c0 [ 115.043481][ T6634] ? clear_bhb_loop+0x55/0xb0 [ 115.048242][ T6634] ? clear_bhb_loop+0x55/0xb0 [ 115.052940][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.058929][ T6634] RIP: 0033:0x7f20b0e00849 [ 115.063362][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.082983][ T6634] RSP: 002b:00007f20af477058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.091544][ T6634] RAX: ffffffffffffffda RBX: 00007f20b0fc5fa0 RCX: 00007f20b0e00849 [ 115.099632][ T6634] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 115.107755][ T6634] RBP: 00007f20af4770a0 R08: 0000000000000570 R09: 0000000000000000 [ 115.115751][ T6634] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000001 [ 115.123753][ T6634] R13: 0000000000000000 R14: 00007f20b0fc5fa0 R15: 00007ffc28402d18 [ 115.132006][ T6634] [ 115.157311][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.999'. [ 115.166491][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.999'. [ 115.190881][ T6637] gretap0: entered promiscuous mode [ 115.198271][ T6637] batadv_slave_1: entered promiscuous mode [ 115.205882][ T6637] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 115.274839][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 115.285520][ T6652] SELinux: policydb version -260118842 does not match my version range 15-33 [ 115.302698][ T6652] SELinux: failed to load policy [ 115.371126][ T6656] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1005'. [ 115.401185][ T6656] FAULT_INJECTION: forcing a failure. [ 115.401185][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 115.413932][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.4.1005 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 115.424291][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.434372][ T6656] Call Trace: [ 115.437684][ T6656] [ 115.440639][ T6656] dump_stack_lvl+0xf2/0x150 [ 115.445415][ T6656] dump_stack+0x15/0x1a [ 115.449671][ T6656] should_fail_ex+0x223/0x230 [ 115.454419][ T6656] should_failslab+0x8f/0xb0 [ 115.459051][ T6656] kmem_cache_alloc_noprof+0x52/0x320 [ 115.464518][ T6656] ? radix_tree_node_alloc+0x8b/0x1e0 [ 115.469927][ T6656] radix_tree_node_alloc+0x8b/0x1e0 [ 115.475165][ T6656] idr_get_free+0x1f5/0x550 [ 115.479711][ T6656] idr_alloc_u32+0xcb/0x180 [ 115.484307][ T6656] tcf_idr_check_alloc+0x171/0x270 [ 115.489449][ T6656] tcf_ct_init+0x233/0xe60 [ 115.489884][ T29] kauditd_printk_skb: 642 callbacks suppressed [ 115.489900][ T29] audit: type=1326 audit(2000000057.400:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20b0df77e7 code=0x7ffc0000 [ 115.493935][ T6656] ? _raw_spin_unlock+0x26/0x50 [ 115.500171][ T29] audit: type=1326 audit(2000000057.400:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20b0d9c189 code=0x7ffc0000 [ 115.523344][ T6656] ? finish_task_switch+0xb5/0x2b0 [ 115.523376][ T6656] ? ___slab_alloc+0x2b7/0x980 [ 115.528256][ T29] audit: type=1326 audit(2000000057.400:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f20b0e00849 code=0x7ffc0000 [ 115.551473][ T6656] ? tcf_action_init_1+0x121/0x490 [ 115.551516][ T6656] tcf_action_init_1+0x339/0x490 [ 115.563909][ T6662] loop1: detected capacity change from 0 to 2048 [ 115.584992][ T6656] tcf_action_init+0x1cc/0x610 [ 115.585067][ T6656] tc_ctl_action+0x292/0x840 [ 115.610910][ T6656] ? __pfx_tc_ctl_action+0x10/0x10 [ 115.616116][ T6656] rtnetlink_rcv_msg+0x6aa/0x710 [ 115.621103][ T6656] ? ref_tracker_free+0x3a5/0x410 [ 115.626153][ T6656] ? __dev_queue_xmit+0x186/0x2090 [ 115.630015][ T29] audit: type=1326 audit(2000000057.510:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20b0df77e7 code=0x7ffc0000 [ 115.631339][ T6656] netlink_rcv_skb+0x12c/0x230 [ 115.631384][ T6656] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.631425][ T6656] rtnetlink_rcv+0x1c/0x30 [ 115.654748][ T29] audit: type=1326 audit(2000000057.510:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20b0d9c189 code=0x7ffc0000 [ 115.659519][ T6656] netlink_unicast+0x599/0x670 [ 115.665051][ T29] audit: type=1326 audit(2000000057.510:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f20b0e00849 code=0x7ffc0000 [ 115.669363][ T6656] netlink_sendmsg+0x5cc/0x6e0 [ 115.692642][ T29] audit: type=1326 audit(2000000057.510:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20b0df77e7 code=0x7ffc0000 [ 115.697374][ T6656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.720868][ T29] audit: type=1326 audit(2000000057.510:9255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20b0d9c189 code=0x7ffc0000 [ 115.725546][ T6656] __sock_sendmsg+0x140/0x180 [ 115.748836][ T29] audit: type=1326 audit(2000000057.510:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f20b0e00849 code=0x7ffc0000 [ 115.754051][ T6656] ____sys_sendmsg+0x312/0x410 [ 115.777358][ T29] audit: type=1326 audit(2000000057.520:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20b0df77e7 code=0x7ffc0000 [ 115.782073][ T6656] __sys_sendmsg+0x19d/0x230 [ 115.838458][ T6656] __x64_sys_sendmsg+0x46/0x50 [ 115.843338][ T6656] x64_sys_call+0x2734/0x2dc0 [ 115.848039][ T6656] do_syscall_64+0xc9/0x1c0 [ 115.852683][ T6656] ? clear_bhb_loop+0x55/0xb0 [ 115.857450][ T6656] ? clear_bhb_loop+0x55/0xb0 [ 115.862167][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.868099][ T6656] RIP: 0033:0x7fd9df200849 [ 115.872621][ T6656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.892337][ T6656] RSP: 002b:00007fd9dd877058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.900774][ T6656] RAX: ffffffffffffffda RBX: 00007fd9df3c5fa0 RCX: 00007fd9df200849 [ 115.908771][ T6656] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000006 [ 115.916793][ T6656] RBP: 00007fd9dd8770a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.924783][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.932760][ T6656] R13: 0000000000000000 R14: 00007fd9df3c5fa0 R15: 00007ffcdab00d18 [ 115.940795][ T6656] [ 115.953042][ T3376] IPVS: starting estimator thread 0... [ 115.995553][ T6656] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 116.008023][ T6656] netlink: 'syz.4.1005': attribute type 29 has an invalid length. [ 116.037028][ T6662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.049214][ T6663] IPVS: using max 2448 ests per chain, 122400 per kthread [ 116.080240][ T6674] FAULT_INJECTION: forcing a failure. [ 116.080240][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.083149][ T6664] loop3: detected capacity change from 0 to 8192 [ 116.093451][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.4.1010 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 116.110352][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.115395][ T6660] EXT4-fs error (device loop1): ext4_ext_precache:648: inode #2: comm syz.1.1006: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 116.120595][ T6674] Call Trace: [ 116.120607][ T6674] [ 116.120618][ T6674] dump_stack_lvl+0xf2/0x150 [ 116.120664][ T6674] dump_stack+0x15/0x1a [ 116.120702][ T6674] should_fail_ex+0x223/0x230 [ 116.120730][ T6674] should_fail+0xb/0x10 [ 116.158232][ T6660] EXT4-fs (loop1): Remounting filesystem read-only [ 116.161008][ T6674] should_fail_usercopy+0x1a/0x20 [ 116.161048][ T6674] _copy_to_user+0x20/0xa0 [ 116.177023][ T6674] simple_read_from_buffer+0xa0/0x110 [ 116.181007][ T6676] 9pnet_fd: Insufficient options for proto=fd [ 116.182593][ T6674] proc_fail_nth_read+0xf9/0x140 [ 116.193800][ T6674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.199443][ T6674] vfs_read+0x1a2/0x700 [ 116.203631][ T6674] ? __rcu_read_unlock+0x4e/0x70 [ 116.208636][ T6674] ? __fget_files+0x17c/0x1c0 [ 116.213380][ T6674] ksys_read+0xe8/0x1b0 [ 116.217603][ T6674] __x64_sys_read+0x42/0x50 [ 116.222165][ T6674] x64_sys_call+0x2874/0x2dc0 [ 116.226872][ T6674] do_syscall_64+0xc9/0x1c0 [ 116.231440][ T6674] ? clear_bhb_loop+0x55/0xb0 [ 116.236165][ T6674] ? clear_bhb_loop+0x55/0xb0 [ 116.240889][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.246836][ T6674] RIP: 0033:0x7fd9df1ff25c [ 116.251267][ T6674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 116.270910][ T6674] RSP: 002b:00007fd9dd877050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.279427][ T6674] RAX: ffffffffffffffda RBX: 00007fd9df3c5fa0 RCX: 00007fd9df1ff25c [ 116.289684][ T6674] RDX: 000000000000000f RSI: 00007fd9dd8770b0 RDI: 0000000000000004 [ 116.297774][ T6674] RBP: 00007fd9dd8770a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.305811][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.313876][ T6674] R13: 0000000000000000 R14: 00007fd9df3c5fa0 R15: 00007ffcdab00d18 [ 116.321887][ T6674] [ 116.364600][ T6660] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.443190][ T6660] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.484382][ T6660] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.538980][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1022'. [ 116.556010][ T6660] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.589550][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'. [ 116.629941][ T6709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 116.673801][ T6660] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.680697][ T6711] loop4: detected capacity change from 0 to 8192 [ 116.693659][ T6660] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.706758][ T6660] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.723879][ T6660] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.743619][ T6712] loop3: detected capacity change from 0 to 8192 [ 116.750423][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.314097][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'. [ 117.563839][ T6750] loop3: detected capacity change from 0 to 1024 [ 117.572202][ T6750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.584159][ T6750] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.703317][ T6750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 117.711641][ T6750] System zones: 0-1, 3-36 [ 117.717523][ T6750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.181066][ T6768] netlink: 'syz.4.1044': attribute type 10 has an invalid length. [ 118.249021][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.263964][ T6768] team0: Port device batadv0 added [ 118.269605][ T6771] SELinux: policydb version -260118842 does not match my version range 15-33 [ 118.282584][ T6771] SELinux: failed to load policy [ 118.468878][ T6776] loop1: detected capacity change from 0 to 8192 [ 118.517738][ T6781] dvmrp0: entered allmulticast mode [ 118.627208][ T6787] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.653055][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.712876][ T6787] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.856400][ T6787] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.901996][ T6787] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.033501][ T6787] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.067715][ T6787] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.162635][ T6804] SELinux: policydb version -260118842 does not match my version range 15-33 [ 119.173249][ T6787] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.243914][ T6804] SELinux: failed to load policy [ 119.261033][ T6787] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.417936][ T6808] __nla_validate_parse: 2 callbacks suppressed [ 119.417961][ T6808] netlink: 632 bytes leftover after parsing attributes in process `syz.1.1060'. [ 119.652266][ T6814] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1062'. [ 119.757308][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1065'. [ 119.857058][ T6826] loop1: detected capacity change from 0 to 512 [ 119.889957][ T6826] ext4: Unknown parameter 'noacl' [ 119.899777][ T6826] FAULT_INJECTION: forcing a failure. [ 119.899777][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 119.912450][ T6826] CPU: 0 UID: 0 PID: 6826 Comm: syz.1.1068 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 119.922820][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.932950][ T6826] Call Trace: [ 119.936249][ T6826] [ 119.939259][ T6826] dump_stack_lvl+0xf2/0x150 [ 119.943973][ T6826] dump_stack+0x15/0x1a [ 119.948212][ T6826] should_fail_ex+0x223/0x230 [ 119.952935][ T6826] should_failslab+0x8f/0xb0 [ 119.957557][ T6826] kmem_cache_alloc_node_noprof+0x59/0x320 [ 119.963454][ T6826] ? __alloc_skb+0x10b/0x310 [ 119.968143][ T6826] __alloc_skb+0x10b/0x310 [ 119.972775][ T6826] ? audit_log_start+0x34c/0x6b0 [ 119.977815][ T6826] audit_log_start+0x368/0x6b0 [ 119.982623][ T6826] audit_seccomp+0x4b/0x130 [ 119.987155][ T6826] __seccomp_filter+0x6fa/0x1180 [ 119.992157][ T6826] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.997885][ T6826] ? vfs_write+0x596/0x920 [ 120.002361][ T6826] __secure_computing+0x9f/0x1c0 [ 120.007350][ T6826] syscall_trace_enter+0xd1/0x1f0 [ 120.012444][ T6826] ? fpregs_assert_state_consistent+0x83/0xa0 [ 120.018631][ T6826] do_syscall_64+0xaa/0x1c0 [ 120.023220][ T6826] ? clear_bhb_loop+0x55/0xb0 [ 120.024621][ T6834] SELinux: policydb version -260118842 does not match my version range 15-33 [ 120.027973][ T6826] ? clear_bhb_loop+0x55/0xb0 [ 120.038639][ T6834] SELinux: failed to load policy [ 120.041560][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.041599][ T6826] RIP: 0033:0x7fd61ed60849 [ 120.056943][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.076869][ T6826] RSP: 002b:00007fd61d3d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.085312][ T6826] RAX: ffffffffffffffda RBX: 00007fd61ef25fa0 RCX: 00007fd61ed60849 [ 120.093316][ T6826] RDX: 0000000000000001 RSI: 0000000020002980 RDI: 0000000000000006 [ 120.101495][ T6826] RBP: 00007fd61d3d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.109504][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.117580][ T6826] R13: 0000000000000000 R14: 00007fd61ef25fa0 R15: 00007ffd79bcc708 [ 120.125593][ T6826] [ 120.398558][ T6847] dvmrp0: left allmulticast mode [ 120.579749][ T29] kauditd_printk_skb: 1533 callbacks suppressed [ 120.579764][ T29] audit: type=1326 audit(2000000062.400:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20b0df77e7 code=0x7ffc0000 [ 120.609777][ T29] audit: type=1326 audit(2000000062.400:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20b0d9c189 code=0x7ffc0000 [ 120.633256][ T29] audit: type=1326 audit(2000000062.400:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f20b0e00849 code=0x7ffc0000 [ 120.656775][ T29] audit: type=1326 audit(2000000062.400:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20b0df77e7 code=0x7ffc0000 [ 120.680566][ T29] audit: type=1326 audit(2000000062.400:10793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20b0d9c189 code=0x7ffc0000 [ 120.704047][ T29] audit: type=1326 audit(2000000062.400:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f20b0e00849 code=0x7ffc0000 [ 120.727707][ T29] audit: type=1326 audit(2000000062.410:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20b0df77e7 code=0x7ffc0000 [ 120.751342][ T29] audit: type=1326 audit(2000000062.410:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20b0d9c189 code=0x7ffc0000 [ 120.774842][ T29] audit: type=1326 audit(2000000062.410:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f20b0e00849 code=0x7ffc0000 [ 120.798367][ T29] audit: type=1326 audit(2000000062.420:10798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20b0df77e7 code=0x7ffc0000 [ 121.097949][ T6860] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 121.288182][ T6876] FAULT_INJECTION: forcing a failure. [ 121.288182][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 121.300990][ T6876] CPU: 1 UID: 0 PID: 6876 Comm: syz.2.1085 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 121.311423][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.321501][ T6876] Call Trace: [ 121.324906][ T6876] [ 121.327861][ T6876] dump_stack_lvl+0xf2/0x150 [ 121.332609][ T6876] dump_stack+0x15/0x1a [ 121.336805][ T6876] should_fail_ex+0x223/0x230 [ 121.341562][ T6876] should_failslab+0x8f/0xb0 [ 121.346193][ T6876] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 121.352074][ T6876] ? shmem_alloc_inode+0x34/0x50 [ 121.357093][ T6876] shmem_alloc_inode+0x34/0x50 [ 121.361889][ T6876] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 121.367404][ T6876] alloc_inode+0x3c/0x160 [ 121.367718][ T6880] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1088'. [ 121.371749][ T6876] new_inode+0x1e/0x100 [ 121.371776][ T6876] shmem_get_inode+0x24e/0x730 [ 121.389760][ T6876] __shmem_file_setup+0x127/0x1f0 [ 121.394833][ T6876] shmem_file_setup+0x3b/0x50 [ 121.399569][ T6876] __se_sys_memfd_create+0x31d/0x5c0 [ 121.404954][ T6876] __x64_sys_memfd_create+0x31/0x40 [ 121.410178][ T6876] x64_sys_call+0x2d4c/0x2dc0 [ 121.414908][ T6876] do_syscall_64+0xc9/0x1c0 [ 121.419527][ T6876] ? clear_bhb_loop+0x55/0xb0 [ 121.424234][ T6876] ? clear_bhb_loop+0x55/0xb0 [ 121.428959][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.434891][ T6876] RIP: 0033:0x7fe5a5d50849 [ 121.439388][ T6876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.459122][ T6876] RSP: 002b:00007fe5a43c6e38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 121.467577][ T6876] RAX: ffffffffffffffda RBX: 0000000000000613 RCX: 00007fe5a5d50849 [ 121.475642][ T6876] RDX: 00007fe5a43c6f10 RSI: 0000000000000000 RDI: 00007fe5a5dc4209 [ 121.483627][ T6876] RBP: 0000000020000d80 R08: 00007fe5a43c6bd7 R09: 00007fe5a43c6e60 [ 121.491738][ T6876] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000040 [ 121.499731][ T6876] R13: 00007fe5a43c6f10 R14: 00007fe5a43c6ed0 R15: 0000000020000200 [ 121.507742][ T6876] [ 121.514468][ T6883] netlink: 'syz.1.1084': attribute type 5 has an invalid length. [ 121.531664][ T6885] syz.3.1090[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.531745][ T6885] syz.3.1090[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.543758][ T6885] syz.3.1090[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.661551][ T6878] FAULT_INJECTION: forcing a failure. [ 121.661551][ T6878] name failslab, interval 1, probability 0, space 0, times 0 [ 121.685657][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.0.1087 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 121.696012][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.706148][ T6878] Call Trace: [ 121.709439][ T6878] [ 121.712428][ T6878] dump_stack_lvl+0xf2/0x150 [ 121.717057][ T6878] dump_stack+0x15/0x1a [ 121.721283][ T6878] should_fail_ex+0x223/0x230 [ 121.725992][ T6878] should_failslab+0x8f/0xb0 [ 121.730613][ T6878] kmem_cache_alloc_noprof+0x52/0x320 [ 121.736011][ T6878] ? vm_area_dup+0x2c/0x130 [ 121.740659][ T6878] vm_area_dup+0x2c/0x130 [ 121.745037][ T6878] __split_vma+0xf7/0x6a0 [ 121.749476][ T6878] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 121.754928][ T6878] __mmap_region+0x306/0x13f0 [ 121.759739][ T6878] ? __rcu_read_unlock+0x4e/0x70 [ 121.764753][ T6878] ? mntput_no_expire+0x70/0x3c0 [ 121.769751][ T6878] mmap_region+0x18c/0x1e0 [ 121.774256][ T6878] do_mmap+0x718/0xb60 [ 121.778355][ T6878] vm_mmap_pgoff+0x133/0x290 [ 121.783058][ T6878] ksys_mmap_pgoff+0x286/0x330 [ 121.787930][ T6878] x64_sys_call+0x1940/0x2dc0 [ 121.792638][ T6878] do_syscall_64+0xc9/0x1c0 [ 121.797181][ T6878] ? clear_bhb_loop+0x55/0xb0 [ 121.801899][ T6878] ? clear_bhb_loop+0x55/0xb0 [ 121.806604][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.812521][ T6878] RIP: 0033:0x7f20b0e00849 [ 121.816947][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.836791][ T6878] RSP: 002b:00007f20af477058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 121.845219][ T6878] RAX: ffffffffffffffda RBX: 00007f20b0fc5fa0 RCX: 00007f20b0e00849 [ 121.853278][ T6878] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020002000 [ 121.861268][ T6878] RBP: 00007f20af4770a0 R08: 0000000000000006 R09: 0000000000000000 [ 121.869318][ T6878] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 121.877294][ T6878] R13: 0000000000000000 R14: 00007f20b0fc5fa0 R15: 00007ffc28402d18 [ 121.885284][ T6878] [ 122.158796][ T6915] SELinux: policydb version -260118842 does not match my version range 15-33 [ 122.171056][ T6915] SELinux: failed to load policy [ 122.957028][ T6936] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1110'. [ 123.001881][ T6934] loop4: detected capacity change from 0 to 512 [ 123.008872][ T6934] EXT4-fs: Ignoring removed nobh option [ 123.011911][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'. [ 123.060745][ T6934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.073690][ T6934] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.151976][ T6942] loop1: detected capacity change from 0 to 8192 [ 123.171587][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.178060][ T6952] SELinux: policydb version -260118842 does not match my version range 15-33 [ 123.254105][ T6952] SELinux: failed to load policy [ 123.444036][ T6974] loop4: detected capacity change from 0 to 128 [ 123.453773][ T6974] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.593243][ T6974] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.706637][ T6974] FAULT_INJECTION: forcing a failure. [ 123.706637][ T6974] name failslab, interval 1, probability 0, space 0, times 0 [ 123.719360][ T6974] CPU: 1 UID: 0 PID: 6974 Comm: syz.4.1120 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 123.729842][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.740007][ T6974] Call Trace: [ 123.743309][ T6974] [ 123.746282][ T6974] dump_stack_lvl+0xf2/0x150 [ 123.750913][ T6974] dump_stack+0x15/0x1a [ 123.755110][ T6974] should_fail_ex+0x223/0x230 [ 123.759950][ T6974] should_failslab+0x8f/0xb0 [ 123.764628][ T6974] __kmalloc_noprof+0xab/0x3f0 [ 123.769414][ T6974] ? ext4_find_extent+0x172/0x7c0 [ 123.774467][ T6974] ext4_find_extent+0x172/0x7c0 [ 123.779350][ T6974] ext4_swap_extents+0x172/0xf00 [ 123.784347][ T6974] ? free_buffer_head+0x1ae/0x1c0 [ 123.789417][ T6974] ? try_to_free_buffers+0x132/0x170 [ 123.794909][ T6974] ? ext4_release_folio+0xb7/0x190 [ 123.800039][ T6974] move_extent_per_page+0x113a/0x16e0 [ 123.805462][ T6974] ? finish_task_switch+0xb5/0x2b0 [ 123.810603][ T6974] ? __kmalloc_noprof+0x1e3/0x3f0 [ 123.815729][ T6974] ? ext4_find_extent+0x172/0x7c0 [ 123.820810][ T6974] ext4_move_extents+0x57d/0x6b0 [ 123.825777][ T6974] ext4_ioctl+0x1e10/0x2dd0 [ 123.830348][ T6974] ? ioctl_has_perm+0x286/0x2e0 [ 123.835228][ T6974] ? do_vfs_ioctl+0x1166/0x1530 [ 123.840110][ T6974] ? sysvec_reschedule_ipi+0x21/0x110 [ 123.845576][ T6974] ? __pfx_ext4_ioctl+0x10/0x10 [ 123.850444][ T6974] ? __pfx_ext4_ioctl+0x10/0x10 [ 123.855321][ T6974] ? __se_sys_ioctl+0xba/0x140 [ 123.860174][ T6974] ? __pfx_ext4_ioctl+0x10/0x10 [ 123.865044][ T6974] __se_sys_ioctl+0xc9/0x140 [ 123.869715][ T6974] __x64_sys_ioctl+0x43/0x50 [ 123.874329][ T6974] x64_sys_call+0x1690/0x2dc0 [ 123.879026][ T6974] do_syscall_64+0xc9/0x1c0 [ 123.883554][ T6974] ? clear_bhb_loop+0x55/0xb0 [ 123.888264][ T6974] ? clear_bhb_loop+0x55/0xb0 [ 123.893053][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.898967][ T6974] RIP: 0033:0x7fd9df200849 [ 123.903394][ T6974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.923121][ T6974] RSP: 002b:00007fd9dd877058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.931559][ T6974] RAX: ffffffffffffffda RBX: 00007fd9df3c5fa0 RCX: 00007fd9df200849 [ 123.939625][ T6974] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000006 [ 123.947699][ T6974] RBP: 00007fd9dd8770a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.955687][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.963682][ T6974] R13: 0000000000000000 R14: 00007fd9df3c5fa0 R15: 00007ffcdab00d18 [ 123.971682][ T6974] [ 124.222219][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 124.353214][ T6991] syz.0.1125[6991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.353324][ T6991] syz.0.1125[6991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.400716][ T6991] syz.0.1125[6991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.429994][ T6994] FAULT_INJECTION: forcing a failure. [ 124.429994][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 124.454145][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.0.1125 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 124.464503][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.473765][ T6993] loop1: detected capacity change from 0 to 512 [ 124.474562][ T6994] Call Trace: [ 124.474572][ T6994] [ 124.487207][ T6994] dump_stack_lvl+0xf2/0x150 [ 124.491836][ T6994] dump_stack+0x15/0x1a [ 124.496084][ T6994] should_fail_ex+0x223/0x230 [ 124.500836][ T6994] should_failslab+0x8f/0xb0 [ 124.505519][ T6994] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 124.511260][ T6994] ? __d_alloc+0x3d/0x340 [ 124.515708][ T6994] __d_alloc+0x3d/0x340 [ 124.519896][ T6994] d_make_root+0x2a/0xb0 [ 124.524162][ T6994] mqueue_fill_super+0x17a/0x1b0 [ 124.529127][ T6994] ? __pfx_mqueue_fill_super+0x10/0x10 [ 124.534613][ T6994] get_tree_nodev+0x7d/0xf0 [ 124.539139][ T6994] mqueue_get_tree+0x6b/0x90 [ 124.543947][ T6994] vfs_get_tree+0x56/0x1e0 [ 124.548384][ T6994] fc_mount+0x16/0x70 [ 124.552383][ T6994] mq_init_ns+0x253/0x300 [ 124.556833][ T6994] copy_ipcs+0x218/0x3b0 [ 124.561220][ T6994] create_new_namespaces+0x135/0x430 [ 124.566588][ T6994] ? security_capable+0x81/0x90 [ 124.571525][ T6994] unshare_nsproxy_namespaces+0xe6/0x120 [ 124.577274][ T6994] ksys_unshare+0x3c9/0x6e0 [ 124.581794][ T6994] __x64_sys_unshare+0x1f/0x30 [ 124.586658][ T6994] x64_sys_call+0x1a3e/0x2dc0 [ 124.591394][ T6994] do_syscall_64+0xc9/0x1c0 [ 124.595914][ T6994] ? clear_bhb_loop+0x55/0xb0 [ 124.600704][ T6994] ? clear_bhb_loop+0x55/0xb0 [ 124.605564][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.611563][ T6994] RIP: 0033:0x7f20b0e00849 [ 124.616070][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.635805][ T6994] RSP: 002b:00007f20af456058 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.644233][ T6994] RAX: ffffffffffffffda RBX: 00007f20b0fc6080 RCX: 00007f20b0e00849 [ 124.652386][ T6994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000e000480 [ 124.660386][ T6994] RBP: 00007f20af4560a0 R08: 0000000000000000 R09: 0000000000000000 [ 124.668362][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.676397][ T6994] R13: 0000000000000000 R14: 00007f20b0fc6080 R15: 00007ffc28402d18 [ 124.684489][ T6994] [ 124.699207][ T6996] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 124.746389][ T6999] SELinux: policydb version -260118842 does not match my version range 15-33 [ 124.755598][ T6999] SELinux: failed to load policy [ 124.783288][ T7003] 9pnet_fd: Insufficient options for proto=fd [ 124.820868][ T6993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.852620][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.875331][ T6993] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.011280][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 125.079104][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.104532][ T7027] loop3: detected capacity change from 0 to 512 [ 125.124321][ T7033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1142'. [ 125.134063][ T7027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.155221][ T7027] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.172053][ T7027] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1140: bg 0: block 248: padding at end of block bitmap is not set [ 125.188501][ T7027] EXT4-fs (loop3): Remounting filesystem read-only [ 125.195795][ T7027] EXT4-fs (loop3): 1 truncate cleaned up [ 125.203156][ T7027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.216481][ T7027] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 125.224655][ T7027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.294401][ T7040] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 125.302236][ T7040] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1144'. [ 125.592626][ T7050] syz.2.1147[7050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.592762][ T7050] syz.2.1147[7050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.594107][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 125.594147][ T29] audit: type=1326 audit(2000000067.510:11417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd61ed577e7 code=0x7ffc0000 [ 125.611912][ T7050] syz.2.1147[7050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.615539][ T29] audit: type=1326 audit(2000000067.510:11418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd61ecfc189 code=0x7ffc0000 [ 125.680038][ T29] audit: type=1326 audit(2000000067.510:11419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd61ed60849 code=0x7ffc0000 [ 125.745867][ T29] audit: type=1326 audit(2000000067.580:11420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd61ed577e7 code=0x7ffc0000 [ 125.769432][ T29] audit: type=1326 audit(2000000067.580:11421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd61ecfc189 code=0x7ffc0000 [ 125.793376][ T29] audit: type=1326 audit(2000000067.580:11422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd61ed60849 code=0x7ffc0000 [ 125.817117][ T29] audit: type=1326 audit(2000000067.580:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfd35177e7 code=0x7ffc0000 [ 125.840685][ T29] audit: type=1326 audit(2000000067.580:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcfd34bc189 code=0x7ffc0000 [ 125.864155][ T29] audit: type=1326 audit(2000000067.580:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 125.887854][ T29] audit: type=1326 audit(2000000067.580:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd61ed577e7 code=0x7ffc0000 [ 126.045737][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1158'. [ 126.205974][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'. [ 126.224787][ T7080] loop4: detected capacity change from 0 to 8192 [ 127.273979][ T7092] syz.3.1166[7092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.274196][ T7092] syz.3.1166[7092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.341391][ T7096] loop4: detected capacity change from 0 to 128 [ 127.349226][ T7092] syz.3.1166[7092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.368657][ T7096] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 127.376979][ T7100] 9pnet_fd: Insufficient options for proto=fd [ 127.559015][ T7113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1173'. [ 127.640677][ T7105] bond0: (slave syz_tun): Releasing backup interface [ 127.677777][ T7119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1176'. [ 127.809990][ T7128] loop3: detected capacity change from 0 to 256 [ 127.934069][ T7129] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.942881][ T7129] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.951680][ T7129] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.960599][ T7129] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.962306][ T7126] loop1: detected capacity change from 0 to 8192 [ 128.008028][ T7137] 9pnet_fd: Insufficient options for proto=fd [ 128.333692][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 128.381643][ T7153] loop3: detected capacity change from 0 to 2048 [ 128.395060][ T7155] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1187'. [ 128.433590][ T7153] EXT4-fs (loop3): failed to initialize system zone (-117) [ 128.465750][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.472939][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.489292][ T7153] EXT4-fs (loop3): mount failed [ 128.522730][ T7130] bridge_slave_0: entered allmulticast mode [ 128.529277][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.553982][ T7130] bridge_slave_0: entered promiscuous mode [ 128.570094][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.581176][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.588293][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.635286][ T7130] bridge_slave_1: entered allmulticast mode [ 128.644510][ T7130] bridge_slave_1: entered promiscuous mode [ 128.672962][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.690999][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.729290][ T7130] team0: Port device team_slave_0 added [ 128.743758][ T7130] team0: Port device team_slave_1 added [ 128.774087][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.781131][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.807195][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.830443][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.837509][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.854934][ T7184] syz.1.1195[7184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.863885][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.878534][ T7184] syz.1.1195[7184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.893088][ T7184] syz.1.1195[7184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.913508][ T7130] hsr_slave_0: entered promiscuous mode [ 128.931484][ T7130] hsr_slave_1: entered promiscuous mode [ 128.937916][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.945545][ T7130] Cannot create hsr debugfs directory [ 129.007244][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 129.033489][ T7130] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.042617][ T7130] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.053813][ T7130] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.063693][ T7130] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.110183][ T7195] loop1: detected capacity change from 0 to 8192 [ 129.115203][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.156589][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.170949][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.178096][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.211217][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.218339][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.306892][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.332068][ T7209] FAULT_INJECTION: forcing a failure. [ 129.332068][ T7209] name failslab, interval 1, probability 0, space 0, times 0 [ 129.344816][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.3.1203 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 129.355179][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.365256][ T7209] Call Trace: [ 129.368567][ T7209] [ 129.371523][ T7209] dump_stack_lvl+0xf2/0x150 [ 129.376207][ T7209] dump_stack+0x15/0x1a [ 129.380414][ T7209] should_fail_ex+0x223/0x230 [ 129.385142][ T7209] should_failslab+0x8f/0xb0 [ 129.389885][ T7209] __kmalloc_cache_node_noprof+0x56/0x320 [ 129.395668][ T7209] ? __get_vm_area_node+0xfb/0x1c0 [ 129.400875][ T7209] __get_vm_area_node+0xfb/0x1c0 [ 129.405881][ T7209] __vmalloc_node_range_noprof+0x280/0xe80 [ 129.411748][ T7209] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 129.417330][ T7209] ? mntput_no_expire+0x70/0x3c0 [ 129.422345][ T7209] ? avc_has_perm_noaudit+0x1cc/0x210 [ 129.427825][ T7209] ? selinux_capable+0x1f2/0x260 [ 129.432805][ T7209] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 129.438382][ T7209] __vmalloc_noprof+0x5e/0x70 [ 129.443103][ T7209] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 129.448701][ T7209] bpf_prog_alloc_no_stats+0x49/0x380 [ 129.454152][ T7209] ? bpf_prog_alloc+0x28/0x150 [ 129.459128][ T7209] bpf_prog_alloc+0x3a/0x150 [ 129.463804][ T7209] bpf_prog_load+0x4d1/0x1070 [ 129.468507][ T7209] ? __rcu_read_unlock+0x4e/0x70 [ 129.473504][ T7209] __sys_bpf+0x463/0x7a0 [ 129.477789][ T7209] __x64_sys_bpf+0x43/0x50 [ 129.482316][ T7209] x64_sys_call+0x2914/0x2dc0 [ 129.487154][ T7209] do_syscall_64+0xc9/0x1c0 [ 129.490001][ T7130] veth0_vlan: entered promiscuous mode [ 129.491679][ T7209] ? clear_bhb_loop+0x55/0xb0 [ 129.501851][ T7209] ? clear_bhb_loop+0x55/0xb0 [ 129.506577][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.512560][ T7209] RIP: 0033:0x7fcfd3520849 [ 129.517010][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.518771][ T7130] veth1_vlan: entered promiscuous mode [ 129.536662][ T7209] RSP: 002b:00007fcfd1b97058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.536690][ T7209] RAX: ffffffffffffffda RBX: 00007fcfd36e5fa0 RCX: 00007fcfd3520849 [ 129.536706][ T7209] RDX: 0000000000000090 RSI: 00000000200002c0 RDI: 0000000000000005 [ 129.536722][ T7209] RBP: 00007fcfd1b970a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.574605][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.582595][ T7209] R13: 0000000000000000 R14: 00007fcfd36e5fa0 R15: 00007fff4e368b88 [ 129.590676][ T7209] [ 129.594052][ T7209] syz.3.1203: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 129.610200][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.3.1203 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 129.620586][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.630656][ T7209] Call Trace: [ 129.633940][ T7209] [ 129.636875][ T7209] dump_stack_lvl+0xf2/0x150 [ 129.641578][ T7209] dump_stack+0x15/0x1a [ 129.645793][ T7209] warn_alloc+0x145/0x1b0 [ 129.650248][ T7209] __vmalloc_node_range_noprof+0x2a5/0xe80 [ 129.656075][ T7209] ? mntput_no_expire+0x70/0x3c0 [ 129.661029][ T7209] ? avc_has_perm_noaudit+0x1cc/0x210 [ 129.666527][ T7209] ? selinux_capable+0x1f2/0x260 [ 129.671533][ T7209] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 129.677099][ T7209] __vmalloc_noprof+0x5e/0x70 [ 129.681795][ T7209] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 129.687505][ T7209] bpf_prog_alloc_no_stats+0x49/0x380 [ 129.692898][ T7209] ? bpf_prog_alloc+0x28/0x150 [ 129.697729][ T7209] bpf_prog_alloc+0x3a/0x150 [ 129.702386][ T7209] bpf_prog_load+0x4d1/0x1070 [ 129.707073][ T7209] ? __rcu_read_unlock+0x4e/0x70 [ 129.712061][ T7209] __sys_bpf+0x463/0x7a0 [ 129.716341][ T7209] __x64_sys_bpf+0x43/0x50 [ 129.720870][ T7209] x64_sys_call+0x2914/0x2dc0 [ 129.725719][ T7209] do_syscall_64+0xc9/0x1c0 [ 129.730328][ T7209] ? clear_bhb_loop+0x55/0xb0 [ 129.735023][ T7209] ? clear_bhb_loop+0x55/0xb0 [ 129.739805][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.745731][ T7209] RIP: 0033:0x7fcfd3520849 [ 129.750157][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.769825][ T7209] RSP: 002b:00007fcfd1b97058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.778335][ T7209] RAX: ffffffffffffffda RBX: 00007fcfd36e5fa0 RCX: 00007fcfd3520849 [ 129.787010][ T7209] RDX: 0000000000000090 RSI: 00000000200002c0 RDI: 0000000000000005 [ 129.795058][ T7209] RBP: 00007fcfd1b970a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.803069][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.811047][ T7209] R13: 0000000000000000 R14: 00007fcfd36e5fa0 R15: 00007fff4e368b88 [ 129.819038][ T7209] [ 129.822150][ T7209] Mem-Info: [ 129.825274][ T7209] active_anon:5993 inactive_anon:0 isolated_anon:0 [ 129.825274][ T7209] active_file:18278 inactive_file:2239 isolated_file:0 [ 129.825274][ T7209] unevictable:0 dirty:372 writeback:0 [ 129.825274][ T7209] slab_reclaimable:2939 slab_unreclaimable:15442 [ 129.825274][ T7209] mapped:28725 shmem:1301 pagetables:871 [ 129.825274][ T7209] sec_pagetables:0 bounce:0 [ 129.825274][ T7209] kernel_misc_reclaimable:0 [ 129.825274][ T7209] free:1880443 free_pcp:10760 free_cma:0 [ 129.836007][ T7130] veth0_macvtap: entered promiscuous mode [ 129.870246][ T7209] Node 0 active_anon:23972kB inactive_anon:0kB active_file:73112kB inactive_file:8956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114900kB dirty:1488kB writeback:0kB shmem:5204kB writeback_tmp:0kB kernel_stack:3040kB pagetables:3484kB sec_pagetables:0kB all_unreclaimable? no [ 129.903710][ T7209] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.926012][ T7226] syz.0.1205[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.930970][ T7209] lowmem_reserve[]: 0 2866 7844 0 [ 129.931011][ T7209] Node 0 DMA32 free:2950276kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 129.959980][ T7130] veth1_macvtap: entered promiscuous mode [ 129.975955][ T7209] lowmem_reserve[]: 0 0 4978 0 [ 129.982189][ T7226] syz.0.1205[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.986647][ T7209] Node 0 Normal free:4549992kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:23856kB inactive_anon:0kB active_file:73112kB inactive_file:8956kB unevictable:0kB writepending:1488kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:39324kB local_pcp:7784kB free_cma:0kB [ 130.003812][ T7226] syz.0.1205[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.028131][ T7209] lowmem_reserve[]: 0 0 0 0 [ 130.028171][ T7209] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 130.044789][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.056783][ T7209] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) [ 130.067510][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.073775][ T7209] 3*32kB (M) [ 130.083704][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.083725][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.086997][ T7209] 2*64kB (M) [ 130.097437][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.107328][ T7209] 3*128kB (M) [ 130.110698][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.121106][ T7209] 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950276kB [ 130.140883][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.143707][ T7209] Node 0 Normal: 21*4kB (E) 0*8kB 1*16kB (E) 337*32kB (ME) 232*64kB (UME) 61*128kB (ME) 24*256kB (ME) 11*512kB (UME) 37*1024kB (UME) 17*2048kB (UME) 1082*4096kB (UM) = 4549892kB [ 130.166538][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.168876][ T7209] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 130.179303][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.188814][ T7209] 21816 total pagecache pages [ 130.188823][ T7209] 1 pages in swap cache [ 130.188828][ T7209] Free swap = 124484kB [ 130.188839][ T7209] Total swap = 124996kB [ 130.188848][ T7209] 2097051 pages RAM [ 130.188855][ T7209] 0 pages HighMem/MovableOnly [ 130.188863][ T7209] 80182 pages reserved [ 130.228929][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.239459][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.249397][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.259901][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.350516][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.360408][ T7130] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.369143][ T7130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.378011][ T7130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.386831][ T7130] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.487798][ T7242] loop1: detected capacity change from 0 to 1024 [ 130.505924][ T7242] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 130.528392][ T7240] loop5: detected capacity change from 0 to 512 [ 130.535412][ T7242] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.550904][ T7242] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: inode #32: comm syz.1.1208: iget: special inode unallocated [ 130.575129][ T7242] EXT4-fs (loop1): no journal found [ 130.580418][ T7242] EXT4-fs (loop1): can't get journal size [ 130.596378][ T7246] loop3: detected capacity change from 0 to 1024 [ 130.609833][ T7242] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.1208: iget: special inode unallocated [ 130.630039][ T7240] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1179: bg 0: block 393: padding at end of block bitmap is not set [ 130.648614][ T7242] EXT4-fs (loop1): failed to initialize system zone (-117) [ 130.656371][ T7240] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 130.665279][ T7242] EXT4-fs (loop1): mount failed [ 130.671250][ T7240] EXT4-fs (loop5): 2 truncates cleaned up [ 130.677441][ T7240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.702226][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.715605][ T7258] syz.2.1215[7258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.725157][ T29] kauditd_printk_skb: 1031 callbacks suppressed [ 130.725176][ T29] audit: type=1400 audit(2000000072.640:12458): avc: denied { setattr } for pid=7243 comm="syz.3.1212" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.793048][ T7130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.803754][ T7242] lo speed is unknown, defaulting to 1000 [ 130.809563][ T7242] lo speed is unknown, defaulting to 1000 [ 130.817645][ T7242] lo speed is unknown, defaulting to 1000 [ 130.824752][ T7242] infiniband s‘z0: RDMA CMA: cma_listen_on_dev, error -98 [ 130.841244][ T7242] lo speed is unknown, defaulting to 1000 [ 130.847518][ T7242] lo speed is unknown, defaulting to 1000 [ 130.861261][ T29] audit: type=1400 audit(2000000072.780:12459): avc: denied { write } for pid=7260 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.893400][ T7261] netlink: 'syz.2.1216': attribute type 3 has an invalid length. [ 130.902015][ T7242] lo speed is unknown, defaulting to 1000 [ 130.909642][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1217'. [ 130.927419][ T7242] lo speed is unknown, defaulting to 1000 [ 130.934679][ T7242] lo speed is unknown, defaulting to 1000 [ 130.942585][ T29] audit: type=1326 audit(2000000072.860:12460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee7d00849 code=0x7ffc0000 [ 130.972244][ T7242] lo speed is unknown, defaulting to 1000 [ 130.978916][ T29] audit: type=1326 audit(2000000072.890:12461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2ee7d00849 code=0x7ffc0000 [ 131.002553][ T29] audit: type=1326 audit(2000000072.890:12462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee7d00849 code=0x7ffc0000 [ 131.026212][ T29] audit: type=1326 audit(2000000072.890:12463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2ee7d00849 code=0x7ffc0000 [ 131.049800][ T29] audit: type=1326 audit(2000000072.890:12464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee7d00849 code=0x7ffc0000 [ 131.073401][ T29] audit: type=1326 audit(2000000072.890:12465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2ee7d00849 code=0x7ffc0000 [ 131.097207][ T29] audit: type=1326 audit(2000000072.890:12466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee7d00849 code=0x7ffc0000 [ 131.121460][ T29] audit: type=1326 audit(2000000072.890:12467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.5.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2ee7d00849 code=0x7ffc0000 [ 131.247317][ T7264] loop5: detected capacity change from 0 to 8192 [ 131.346654][ T7281] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1224'. [ 131.352632][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.367843][ T7283] wireguard0: entered promiscuous mode [ 131.373573][ T7283] wireguard0: entered allmulticast mode [ 131.571488][ T7301] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1232'. [ 131.611629][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 131.633701][ T7301] 1ªX¹¦À: renamed from 60ªX¹¦À [ 131.663354][ T7301] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 131.689131][ T7305] wireguard0: entered promiscuous mode [ 131.694760][ T7305] wireguard0: entered allmulticast mode [ 131.708068][ T7303] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 131.750570][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7310 comm=syz.0.1234 [ 131.766616][ T7312] loop3: detected capacity change from 0 to 1024 [ 131.779264][ T7312] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 131.811348][ T7312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.848496][ T7321] dummy0: entered promiscuous mode [ 131.868797][ T7321] macvtap1: entered promiscuous mode [ 131.879545][ T7323] loop1: detected capacity change from 0 to 512 [ 131.890513][ T7312] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.1236: corrupted in-inode xattr: bad magic number in in-inode xattr [ 131.919935][ T7321] dummy0: left promiscuous mode [ 131.925609][ T7323] EXT4-fs: Ignoring removed nobh option [ 131.961111][ T7323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.030205][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.039344][ T7323] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.063727][ T7336] netlink: 'syz.0.1245': attribute type 27 has an invalid length. [ 132.071850][ T7333] wireguard0: entered promiscuous mode [ 132.077378][ T7333] wireguard0: entered allmulticast mode [ 132.112769][ T7336] lo: left promiscuous mode [ 132.114392][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.150553][ T7338] FAULT_INJECTION: forcing a failure. [ 132.150553][ T7338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.163944][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: syz.5.1246 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 132.174373][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.184502][ T7338] Call Trace: [ 132.187804][ T7338] [ 132.190820][ T7338] dump_stack_lvl+0xf2/0x150 [ 132.195537][ T7338] dump_stack+0x15/0x1a [ 132.199758][ T7338] should_fail_ex+0x223/0x230 [ 132.204459][ T7338] should_fail_alloc_page+0xfd/0x110 [ 132.209786][ T7338] __alloc_pages_noprof+0x109/0x340 [ 132.212160][ T7344] loop3: detected capacity change from 0 to 164 [ 132.215110][ T7338] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 132.226798][ T7338] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 132.232206][ T7338] do_wp_page+0x64b/0x2340 [ 132.236711][ T7338] ? __rcu_read_lock+0x36/0x50 [ 132.241516][ T7338] handle_mm_fault+0xc63/0x2ac0 [ 132.246566][ T7338] exc_page_fault+0x3b9/0x650 [ 132.251272][ T7338] asm_exc_page_fault+0x26/0x30 [ 132.256205][ T7338] RIP: 0033:0x7f2ee7bc18e3 [ 132.260746][ T7338] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 132.280410][ T7338] RSP: 002b:00007f2ee63764c0 EFLAGS: 00010202 [ 132.286490][ T7338] RAX: 0000000000005005 RBX: 00007f2ee6376560 RCX: 00007f2eddf57000 [ 132.294474][ T7338] RDX: 00007f2ee6376700 RSI: 0000000000000043 RDI: 00007f2ee6376600 [ 132.302464][ T7338] RBP: 00000000000000cf R08: 0000000000000008 R09: 00000000000000a7 [ 132.310458][ T7338] R10: 00000000000000c6 R11: 00007f2ee6376560 R12: 0000000000000001 [ 132.318441][ T7338] R13: 00007f2ee7d88320 R14: 0000000000000010 R15: 00007f2ee6376600 [ 132.326502][ T7338] [ 132.329829][ T7338] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 132.369070][ T7344] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 132.380389][ T7338] loop5: detected capacity change from 0 to 512 [ 132.386969][ T7338] EXT4-fs: Ignoring removed bh option [ 132.392548][ T7338] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.441444][ T7338] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 132.490498][ T7338] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 132.503138][ T7338] EXT4-fs (loop5): orphan cleanup on readonly fs [ 132.516331][ T7338] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1246: Failed to acquire dquot type 1 [ 132.552157][ T7338] EXT4-fs (loop5): Remounting filesystem read-only [ 132.568211][ T7338] EXT4-fs (loop5): 1 orphan inode deleted [ 132.584408][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.584932][ T7338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.610202][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.657813][ T7336] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.666699][ T7336] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.675168][ T7336] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.678794][ T7338] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 132.683649][ T7336] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.704656][ T7336] geneve1: left promiscuous mode [ 132.719857][ T7349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1248'. [ 132.721247][ T7338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.745626][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.757555][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.795904][ T7353] loop1: detected capacity change from 0 to 8192 [ 132.805940][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.841355][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.861632][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.882070][ T7350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.892552][ T7350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.916444][ T7350] veth1_vlan: left promiscuous mode [ 132.925603][ T7350] veth0_vlan: left promiscuous mode [ 132.932436][ T7358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7358 comm=syz.2.1249 [ 132.946034][ T7350] veth0_vlan: entered promiscuous mode [ 132.961345][ T7350] veth1_vlan: entered promiscuous mode [ 132.970656][ T7350] veth1_macvtap: left promiscuous mode [ 132.977784][ T7350] veth0_macvtap: entered promiscuous mode [ 132.985845][ T7350] veth1_macvtap: entered promiscuous mode [ 132.993938][ T7350] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.002393][ T7350] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.010655][ T7350] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.018843][ T7350] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.087139][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 133.096161][ T7355] tipc: Invalid UDP bearer configuration [ 133.096183][ T7355] tipc: Enabling of bearer rejected, failed to enable media [ 133.235703][ T7376] ref_ctr_offset mismatch. inode: 0x532 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 133.266532][ T7360] loop5: detected capacity change from 0 to 8192 [ 133.439189][ T7385] FAULT_INJECTION: forcing a failure. [ 133.439189][ T7385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.452572][ T7385] CPU: 1 UID: 0 PID: 7385 Comm: syz.3.1261 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 133.462929][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.473050][ T7385] Call Trace: [ 133.476345][ T7385] [ 133.479289][ T7385] dump_stack_lvl+0xf2/0x150 [ 133.484079][ T7385] dump_stack+0x15/0x1a [ 133.488348][ T7385] should_fail_ex+0x223/0x230 [ 133.493082][ T7385] should_fail+0xb/0x10 [ 133.497251][ T7385] should_fail_usercopy+0x1a/0x20 [ 133.502370][ T7385] _copy_from_user+0x1e/0xb0 [ 133.507083][ T7385] io_submit_one+0x54/0x1230 [ 133.511719][ T7385] ? __rcu_read_unlock+0x4e/0x70 [ 133.516713][ T7385] __se_sys_io_submit+0xf5/0x280 [ 133.521764][ T7385] __x64_sys_io_submit+0x43/0x50 [ 133.526843][ T7385] x64_sys_call+0x2c20/0x2dc0 [ 133.531567][ T7385] do_syscall_64+0xc9/0x1c0 [ 133.536187][ T7385] ? clear_bhb_loop+0x55/0xb0 [ 133.540900][ T7385] ? clear_bhb_loop+0x55/0xb0 [ 133.545695][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.551625][ T7385] RIP: 0033:0x7fcfd3520849 [ 133.556054][ T7385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.575696][ T7385] RSP: 002b:00007fcfd1b97058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 133.584132][ T7385] RAX: ffffffffffffffda RBX: 00007fcfd36e5fa0 RCX: 00007fcfd3520849 [ 133.592144][ T7385] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 00007fcfd36bf000 [ 133.600262][ T7385] RBP: 00007fcfd1b970a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.608266][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.616272][ T7385] R13: 0000000000000000 R14: 00007fcfd36e5fa0 R15: 00007fff4e368b88 [ 133.624424][ T7385] [ 133.703555][ T7389] tmpfs: Unknown parameter '00000000000000000005' [ 133.756579][ T7394] FAULT_INJECTION: forcing a failure. [ 133.756579][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.769871][ T7394] CPU: 0 UID: 0 PID: 7394 Comm: syz.3.1264 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 133.780225][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.790381][ T7394] Call Trace: [ 133.793678][ T7394] [ 133.796722][ T7394] dump_stack_lvl+0xf2/0x150 [ 133.801370][ T7394] dump_stack+0x15/0x1a [ 133.805644][ T7394] should_fail_ex+0x223/0x230 [ 133.810362][ T7394] should_fail+0xb/0x10 [ 133.814576][ T7394] should_fail_usercopy+0x1a/0x20 [ 133.819728][ T7394] strncpy_from_user+0x25/0x210 [ 133.824652][ T7394] ? 0xffffffff81000000 [ 133.828821][ T7394] ? selinux_file_permission+0x22a/0x360 [ 133.834577][ T7394] ? __rcu_read_unlock+0x4e/0x70 [ 133.839553][ T7394] strncpy_from_user_nofault+0x66/0xe0 [ 133.845095][ T7394] bpf_probe_read_user_str+0x2a/0x70 [ 133.850415][ T7394] bpf_prog_860dce4575eb4f0a+0x3e/0x40 [ 133.855926][ T7394] bpf_trace_run2+0x104/0x1d0 [ 133.860679][ T7394] __bpf_trace_sys_enter+0x10/0x30 [ 133.865874][ T7394] trace_sys_enter+0x85/0x110 [ 133.870578][ T7394] syscall_trace_enter+0x13f/0x1f0 [ 133.875759][ T7394] ? fpregs_assert_state_consistent+0x83/0xa0 [ 133.881889][ T7394] do_syscall_64+0xaa/0x1c0 [ 133.886539][ T7394] ? clear_bhb_loop+0x55/0xb0 [ 133.891233][ T7394] ? clear_bhb_loop+0x55/0xb0 [ 133.895926][ T7394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.901836][ T7394] RIP: 0033:0x7fcfd351f25c [ 133.906332][ T7394] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 133.925947][ T7394] RSP: 002b:00007fcfd1b97050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.934455][ T7394] RAX: ffffffffffffffda RBX: 00007fcfd36e5fa0 RCX: 00007fcfd351f25c [ 133.942444][ T7394] RDX: 000000000000000f RSI: 00007fcfd1b970b0 RDI: 0000000000000005 [ 133.950447][ T7394] RBP: 00007fcfd1b970a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.958424][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.966406][ T7394] R13: 0000000000000000 R14: 00007fcfd36e5fa0 R15: 00007fff4e368b88 [ 133.974524][ T7394] [ 134.070726][ T7402] SELinux: policydb version -260118842 does not match my version range 15-33 [ 134.092676][ T7402] SELinux: failed to load policy [ 134.123579][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1269'. [ 134.165214][ T7406] loop3: detected capacity change from 0 to 2048 [ 134.186995][ T7408] loop5: detected capacity change from 0 to 512 [ 134.197522][ T7408] EXT4-fs: Ignoring removed nobh option [ 134.241920][ T7408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.252918][ T7411] loop1: detected capacity change from 0 to 8192 [ 134.255973][ T7408] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.341798][ T7130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.477730][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1278'. [ 134.688619][ T7440] loop5: detected capacity change from 0 to 8192 [ 134.722727][ T7457] FAULT_INJECTION: forcing a failure. [ 134.722727][ T7457] name failslab, interval 1, probability 0, space 0, times 0 [ 134.735622][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: +}[@ Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 134.745459][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.755638][ T7457] Call Trace: [ 134.758933][ T7457] [ 134.761901][ T7457] dump_stack_lvl+0xf2/0x150 [ 134.766667][ T7457] dump_stack+0x15/0x1a [ 134.770920][ T7457] should_fail_ex+0x223/0x230 [ 134.775697][ T7457] ? qdisc_get_rtab+0x1a3/0x2c0 [ 134.780594][ T7457] should_failslab+0x8f/0xb0 [ 134.785296][ T7457] __kmalloc_cache_noprof+0x4e/0x320 [ 134.790612][ T7457] qdisc_get_rtab+0x1a3/0x2c0 [ 134.795329][ T7457] tcf_police_init+0x389/0xc80 [ 134.800138][ T7457] tcf_action_init_1+0x339/0x490 [ 134.805109][ T7457] ? tc_action_load_ops+0x1a9/0x410 [ 134.810449][ T7457] tcf_action_init+0x1cc/0x610 [ 134.815477][ T7457] tc_ctl_action+0x292/0x840 [ 134.820170][ T7457] ? __pfx_tc_ctl_action+0x10/0x10 [ 134.825402][ T7457] rtnetlink_rcv_msg+0x6aa/0x710 [ 134.830487][ T7457] ? ref_tracker_free+0x3a5/0x410 [ 134.835584][ T7457] ? __dev_queue_xmit+0x186/0x2090 [ 134.840759][ T7457] netlink_rcv_skb+0x12c/0x230 [ 134.845568][ T7457] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.851152][ T7457] rtnetlink_rcv+0x1c/0x30 [ 134.855674][ T7457] netlink_unicast+0x599/0x670 [ 134.860501][ T7457] netlink_sendmsg+0x5cc/0x6e0 [ 134.865353][ T7457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.870774][ T7457] __sock_sendmsg+0x140/0x180 [ 134.875554][ T7457] ____sys_sendmsg+0x312/0x410 [ 134.880448][ T7457] __sys_sendmsg+0x19d/0x230 [ 134.885153][ T7457] __x64_sys_sendmsg+0x46/0x50 [ 134.889987][ T7457] x64_sys_call+0x2734/0x2dc0 [ 134.894762][ T7457] do_syscall_64+0xc9/0x1c0 [ 134.899333][ T7457] ? clear_bhb_loop+0x55/0xb0 [ 134.904067][ T7457] ? clear_bhb_loop+0x55/0xb0 [ 134.908776][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.914709][ T7457] RIP: 0033:0x7f20b0e00849 [ 134.919183][ T7457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.938847][ T7457] RSP: 002b:00007f20af477058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.947291][ T7457] RAX: ffffffffffffffda RBX: 00007f20b0fc5fa0 RCX: 00007f20b0e00849 [ 134.955282][ T7457] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000003 [ 134.963266][ T7457] RBP: 00007f20af4770a0 R08: 0000000000000000 R09: 0000000000000000 [ 134.971342][ T7457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.979365][ T7457] R13: 0000000000000000 R14: 00007f20b0fc5fa0 R15: 00007ffc28402d18 [ 134.987353][ T7457] [ 135.048364][ T7455] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1287'. [ 135.067853][ T7466] bpf_get_probe_write_proto: 5 callbacks suppressed [ 135.067869][ T7466] syz.2.1292[7466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.081019][ T7466] syz.2.1292[7466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.116124][ T7466] syz.2.1292[7466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.203584][ T7472] vlan0: entered allmulticast mode [ 135.276500][ T7475] lo speed is unknown, defaulting to 1000 [ 135.323365][ T7472] syzkaller1: entered promiscuous mode [ 135.328875][ T7472] syzkaller1: entered allmulticast mode [ 135.448055][ T7482] pim6reg1: entered promiscuous mode [ 135.453469][ T7482] pim6reg1: entered allmulticast mode [ 135.522160][ T7490] FAULT_INJECTION: forcing a failure. [ 135.522160][ T7490] name failslab, interval 1, probability 0, space 0, times 0 [ 135.534951][ T7490] CPU: 1 UID: 0 PID: 7490 Comm: syz.0.1299 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 135.545326][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.555436][ T7490] Call Trace: [ 135.558831][ T7490] [ 135.561781][ T7490] dump_stack_lvl+0xf2/0x150 [ 135.566414][ T7490] dump_stack+0x15/0x1a [ 135.570632][ T7490] should_fail_ex+0x223/0x230 [ 135.575354][ T7490] should_failslab+0x8f/0xb0 [ 135.580213][ T7490] __kmalloc_noprof+0xab/0x3f0 [ 135.585006][ T7490] ? mqprio_init+0x479/0xc30 [ 135.589630][ T7490] mqprio_init+0x479/0xc30 [ 135.594238][ T7490] ? qdisc_alloc+0x3d1/0x450 [ 135.598959][ T7490] ? __pfx_mqprio_init+0x10/0x10 [ 135.604013][ T7490] qdisc_create+0x6c1/0xae0 [ 135.608626][ T7490] ? __nla_parse+0x40/0x60 [ 135.613153][ T7490] tc_modify_qdisc+0x65f/0x1050 [ 135.618309][ T7490] ? ns_capable+0x7d/0xb0 [ 135.622672][ T7490] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 135.628032][ T7490] rtnetlink_rcv_msg+0x6aa/0x710 [ 135.633016][ T7490] ? ref_tracker_free+0x3a5/0x410 [ 135.638326][ T7490] ? __dev_queue_xmit+0x186/0x2090 [ 135.643509][ T7490] netlink_rcv_skb+0x12c/0x230 [ 135.648324][ T7490] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.653885][ T7490] rtnetlink_rcv+0x1c/0x30 [ 135.658340][ T7490] netlink_unicast+0x599/0x670 [ 135.663226][ T7490] netlink_sendmsg+0x5cc/0x6e0 [ 135.668024][ T7490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.673503][ T7490] __sock_sendmsg+0x140/0x180 [ 135.678207][ T7490] ____sys_sendmsg+0x312/0x410 [ 135.683019][ T7490] __sys_sendmsg+0x19d/0x230 [ 135.687731][ T7490] __x64_sys_sendmsg+0x46/0x50 [ 135.693226][ T7490] x64_sys_call+0x2734/0x2dc0 [ 135.697935][ T7490] do_syscall_64+0xc9/0x1c0 [ 135.702471][ T7490] ? clear_bhb_loop+0x55/0xb0 [ 135.707261][ T7490] ? clear_bhb_loop+0x55/0xb0 [ 135.712066][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.718038][ T7490] RIP: 0033:0x7f20b0e00849 [ 135.722468][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.742229][ T7490] RSP: 002b:00007f20af477058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.750671][ T7490] RAX: ffffffffffffffda RBX: 00007f20b0fc5fa0 RCX: 00007f20b0e00849 [ 135.758666][ T7490] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 135.766670][ T7490] RBP: 00007f20af4770a0 R08: 0000000000000000 R09: 0000000000000000 [ 135.774707][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.782700][ T7490] R13: 0000000000000000 R14: 00007f20b0fc5fa0 R15: 00007ffc28402d18 [ 135.790703][ T7490] [ 135.821743][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1300'. [ 135.831795][ T29] kauditd_printk_skb: 1275 callbacks suppressed [ 135.831882][ T29] audit: type=1326 audit(2000000077.750:13741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 135.899598][ T29] audit: type=1326 audit(2000000077.750:13742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 135.923246][ T29] audit: type=1326 audit(2000000077.750:13743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 135.947218][ T29] audit: type=1326 audit(2000000077.750:13744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 135.970961][ T29] audit: type=1326 audit(2000000077.750:13745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 135.994846][ T29] audit: type=1326 audit(2000000077.750:13746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 136.018526][ T29] audit: type=1326 audit(2000000077.750:13747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 136.042157][ T29] audit: type=1326 audit(2000000077.750:13748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 136.065760][ T29] audit: type=1326 audit(2000000077.750:13749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 136.065841][ T7498] loop3: detected capacity change from 0 to 8192 [ 136.089440][ T29] audit: type=1326 audit(2000000077.750:13750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7491 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcfd3520849 code=0x7ffc0000 [ 136.139900][ T7500] IPVS: stopping master sync thread 7502 ... [ 136.145975][ T7502] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 136.169999][ T7503] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 136.192275][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.214897][ T7500] batadv_slave_0: entered promiscuous mode [ 136.255922][ T7510] syz.2.1307[7510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.256014][ T7510] syz.2.1307[7510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.268634][ T7510] syz.2.1307[7510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.359413][ T7513] Â: renamed from vlan0 (while UP) [ 136.394974][ C0] ================================================================== [ 136.403159][ C0] BUG: KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb [ 136.410765][ C0] [ 136.413100][ C0] write to 0xffff8881030ac088 of 4 bytes by task 7520 on cpu 1: [ 136.417491][ T7522] FAULT_INJECTION: forcing a failure. [ 136.417491][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 136.420728][ C0] mon_reader_add+0xc7/0x1f0 [ 136.433389][ T7522] CPU: 1 UID: 0 PID: 7522 Comm: syz.0.1313 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 136.437914][ C0] mon_bin_open+0x32b/0x3b0 [ 136.437948][ C0] chrdev_open+0x2f9/0x370 [ 136.448252][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.452747][ C0] do_dentry_open+0x621/0xa20 [ 136.457148][ T7522] Call Trace: [ 136.457159][ T7522] [ 136.467188][ C0] vfs_open+0x38/0x1f0 [ 136.471850][ T7522] dump_stack_lvl+0xf2/0x150 [ 136.475118][ C0] path_openat+0x1ac2/0x1fa0 [ 136.478046][ T7522] dump_stack+0x15/0x1a [ 136.482103][ C0] do_filp_open+0x107/0x230 [ 136.486676][ T7522] should_fail_ex+0x223/0x230 [ 136.491257][ C0] do_sys_openat2+0xab/0x120 [ 136.495401][ T7522] should_failslab+0x8f/0xb0 [ 136.499886][ C0] __x64_sys_openat+0xf3/0x120 [ 136.504633][ T7522] kmem_cache_alloc_node_noprof+0x59/0x320 [ 136.509206][ C0] x64_sys_call+0x2b30/0x2dc0 [ 136.513787][ T7522] ? __alloc_skb+0x10b/0x310 [ 136.518534][ C0] do_syscall_64+0xc9/0x1c0 [ 136.524326][ T7522] __alloc_skb+0x10b/0x310 [ 136.528983][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.533561][ T7522] netlink_alloc_large_skb+0xad/0xe0 [ 136.538044][ C0] [ 136.538052][ C0] read to 0xffff8881030ac088 of 4 bytes by interrupt on cpu 0: [ 136.542445][ T7522] netlink_sendmsg+0x3b4/0x6e0 [ 136.548317][ C0] usb_hcd_submit_urb+0x86/0x1510 [ 136.553594][ T7522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.555902][ C0] usb_submit_urb+0xa80/0xb70 [ 136.563424][ T7522] __sock_sendmsg+0x140/0x180 [ 136.568176][ C0] hub_resubmit_irq_urb+0x5b/0x100 [ 136.573624][ T7522] ____sys_sendmsg+0x312/0x410 [ 136.579065][ C0] hub_irq+0x28d/0x2c0 [ 136.583746][ T7522] __sys_sendmsg+0x19d/0x230 [ 136.588408][ C0] __usb_hcd_giveback_urb+0x290/0x370 [ 136.593536][ T7522] __x64_sys_sendmsg+0x46/0x50 [ 136.598272][ C0] usb_giveback_urb_bh+0x170/0x280 [ 136.602327][ T7522] x64_sys_call+0x2734/0x2dc0 [ 136.606917][ C0] process_scheduled_works+0x483/0x9a0 [ 136.612294][ T7522] do_syscall_64+0xc9/0x1c0 [ 136.617043][ C0] bh_worker+0x21f/0x370 [ 136.622140][ T7522] ? clear_bhb_loop+0x55/0xb0 [ 136.626796][ C0] workqueue_softirq_action+0xaa/0xc0 [ 136.632236][ T7522] ? clear_bhb_loop+0x55/0xb0 [ 136.636739][ C0] tasklet_hi_action+0xe/0x30 [ 136.641069][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.645725][ C0] handle_softirqs+0xbf/0x280 [ 136.651082][ T7522] RIP: 0033:0x7f20b0e00849 [ 136.655738][ C0] run_ksoftirqd+0x1c/0x30 [ 136.660485][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.666447][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 136.671214][ T7522] RSP: 002b:00007f20af477058 EFLAGS: 00000246 [ 136.675614][ C0] kthread+0x1d1/0x210 [ 136.680010][ T7522] ORIG_RAX: 000000000000002e [ 136.680022][ T7522] RAX: ffffffffffffffda RBX: 00007f20b0fc5fa0 RCX: 00007f20b0e00849 [ 136.699694][ C0] ret_from_fork+0x4b/0x60 [ 136.704622][ T7522] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 136.710671][ C0] ret_from_fork_asm+0x1a/0x30 [ 136.714721][ T7522] RBP: 00007f20af4770a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.719380][ C0] [ 136.719387][ C0] value changed: 0x00000000 -> 0x00000001 [ 136.727339][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.731736][ C0] [ 136.731743][ C0] Reported by Kernel Concurrency Sanitizer on: [ 136.739692][ T7522] R13: 0000000000000000 R14: 00007f20b0fc5fa0 R15: 00007ffc28402d18 [ 136.744437][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 136.744464][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.744476][ C0] ================================================================== [ 136.814584][ T7522]