last executing test programs: 8m3.437838543s ago: executing program 32 (id=490): r0 = memfd_create(&(0x7f0000000200)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xada\xf3[\xf4\xb5\xdbRv\x11\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\x00\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xa9\x7fU\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8PIY\xfc\xff\xff\xff\xfa*8\x13\x9a\x19R\xd9]\xe11We\xc53\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MKd\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa5\x95\xd9F\x17,\nU]\x84dCCu\x02\xd4\xe2esh\x8c\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000800040000"], 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0xc, 0xf, 0x8, 0xe, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_address={0x3, 0x7, 0x3c, 0xa0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2a, 0x3500}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x6, @empty, 0x4}, @in={0x2, 0x4e20, @local}}]}, 0x70}}, 0x40c0) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 7m45.496543615s ago: executing program 2 (id=917): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pause() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x40, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7m44.566387283s ago: executing program 2 (id=941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x8fe, &(0x7f0000000000)={0x0, 0xcbd4, 0x80, 0xffffffff, 0x2d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1083) 7m44.50436894s ago: executing program 2 (id=943): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@user_xattr}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@debug}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) 7m44.096628737s ago: executing program 2 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000ed00000000000000000000000000b8c13779091239d818b12f366536506d81f7d747e7bd41887dff7d53e5af161f97591d2c95763897dc6c41e507c66de2819b9b6a5c81ccb7ca48801cbc68a2323227d0e3f308c372333215181cdf43a884675afabbee8f95711aa6318cf6bf9a27a7caabdae9e985cc2e3c05b3ed07205ffe94b4edf816d12758306e5f5c54041eba4e39470b374106e313db4ed42f4c43959db96fbb26a51d6847bd7d880d8ee6d8d2ec9065e75bdf93557ecd477b8d1166ce603ce7402cc262e95276e5d9ff9a23d5ba8f3e4ea6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x2) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu&\t0&&\t') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180100001c000000000085250e000000000000000000000000d8d6229c77a0a81e362f2507cfc5aa48ab058f9167907902ce771542209ef3d4e7ead636377e7ce10c97d496aee486120983b67f2279d2ee114acdee699cad7c8d0b61ab80c7c1521e99f79ae9e1d5d3fee20efbeb1d4064f5e16bf1c8c97e899f0e51811de12075fbf2dd98392db6936187d52dcda40f85d652f3b3530bb654e5419109c2a4eba33c87dc7e4526e23f25be"], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x28) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 7m43.774033945s ago: executing program 2 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x4, 0x0, &(0x7f0000000600)="61df712b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m43.564407229s ago: executing program 2 (id=954): r0 = timerfd_create(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) chdir(&(0x7f0000000280)='./file0\x00') poll(&(0x7f0000002080)=[{r0}], 0x1, 0x0) sysfs$1(0x1, &(0x7f0000002780)='\x00') 7m43.541779271s ago: executing program 33 (id=954): r0 = timerfd_create(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) chdir(&(0x7f0000000280)='./file0\x00') poll(&(0x7f0000002080)=[{r0}], 0x1, 0x0) sysfs$1(0x1, &(0x7f0000002780)='\x00') 5m1.054559285s ago: executing program 0 (id=4652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="7d2f00000000f2ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="e80000000000000008010000090000008188ffc07b69377a160f64ebba4d6b256b35a0ecc94ebbd9d523013875a4945b79225554fe122061ddd9db1cd3613c691946e079dc9699cef25e9b2730193f695e93fe42cb2be873f82a9fd2744f6a7c4aa03ba377c92343b731ebf562f7ca4e2820c458413291450e4fa116f9bd966887a56e8150f9f2dc4dd82998d67414ba52ef9304d74d3f553b84315f6c2c68c49c5ad2a6622a006ee92980f02a542b7e13934eecaba7d50cf8f7aeccf70c91a76b1c7d00a52d97663ad680fef9ec74f430cde849065c992fa8049a7d69e2ec03a709593ba8a4"], 0xe8}, 0x81) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x40}]}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x2, @remote, 0x5}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8002000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x23c, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0xff, 0x0, 0xffffff]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cda6a02c3728266fd864bc6b04f6c051"}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}, @filter_kind_options=@f_route={{0xa}, {0x14c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xe0, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x30000003}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_nat={0x2c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x23c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/15, 0xf}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x3}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32, @ANYBLOB="4800028044000100240001016d6f64650006000000000000d380000000000000000000000000000000230dd6b90005e80300050000001100047e4cc713dd3b3356ac53e06feed71bb9a5edff72cd1a4fbbd9dbc60aa54ad2448dd8910c17c33b1dfd65cadba45b6ecaa991472bbb5f21a6d7c01e7e1d9b5a483817e56a312ebc642837a9a0ad815afb60b34d58ac4155401bd3bbba4fb9cd748180ab293ab2e2a2321698ab08fd94ee85a6cd725f8bef9df3cda593e3d0351d1a33fc194f21e4ba02fa76788b04a9a48b994e00", @ANYBLOB="ae76d73842790440c42bbd48e3867a30205c6aa32dcb1a7e814d35eab85aedd9b3edf26e05c9d6c317fe4530e08b679d0fffb7054b9787787278ff522d3651f0d17c6b733211a1941dd41941788234e1c4b2d6ec58bbb0ff78b7df02fa0b5fb459210c2b77548529b78752a070cea9b35c1086d1fe20bed9a4f094497eae8a08fde5e1f03f7b0ea11c38", @ANYRES8=0x0, @ANYRESDEC=r0], 0x64}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c65000000001600"/104], 0x68) 5m1.053945795s ago: executing program 0 (id=4653): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="170c000000000d000000040000001c0001800600010000"], 0x30}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020660b, &(0x7f0000000000)={0x3fffffffc00, 0xffffffff004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000000)={r10, 0x1, r6, 0xa, 0x80000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 5m0.900643402s ago: executing program 0 (id=4656): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @private}, &(0x7f00000000c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m0.876999525s ago: executing program 0 (id=4657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00100000000000120000d1850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x880) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") mkdir(0x0, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000080)=r5, 0x1) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x4c02, &(0x7f0000000140)) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000002240)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 5m0.364647014s ago: executing program 0 (id=4660): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @private}, &(0x7f00000000c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4m59.339191873s ago: executing program 0 (id=4672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000089e6ffe7b9a393e0a6e0f8117f0000000000000000aa8b83e41161d0c690"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000b70000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c26838f2b9000f205891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fe5"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='\x00', 0x1, 0xfffffffffffffffe) keyctl$search(0x4, r1, &(0x7f0000000580)='cifs.idmap\x00', 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)="00fa0004000000333f092d2fbc8ac04dc52c9def98d5ece9ba3cebefeb098599e98702f421a7fb6ae777fb3ecce14f1eb8550c82df1fde3f756dc368610b64e6a7bf740586edec8e545eec0a8621be466762b707ea2e9d37051a504d6000"/110, 0x7a52, 0xfffffffffffffffe) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'veth1_vlan\x00', @local}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0xffff, 0x204440) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000580)=@usbdevfs_connect={0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m59.338959882s ago: executing program 34 (id=4672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000089e6ffe7b9a393e0a6e0f8117f0000000000000000aa8b83e41161d0c690"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000b70000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c26838f2b9000f205891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fe5"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='\x00', 0x1, 0xfffffffffffffffe) keyctl$search(0x4, r1, &(0x7f0000000580)='cifs.idmap\x00', 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)="00fa0004000000333f092d2fbc8ac04dc52c9def98d5ece9ba3cebefeb098599e98702f421a7fb6ae777fb3ecce14f1eb8550c82df1fde3f756dc368610b64e6a7bf740586edec8e545eec0a8621be466762b707ea2e9d37051a504d6000"/110, 0x7a52, 0xfffffffffffffffe) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'veth1_vlan\x00', @local}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0xffff, 0x204440) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000580)=@usbdevfs_connect={0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m49.475085762s ago: executing program 1 (id=4808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x5818f989, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fchdir(r1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f00005b9000/0x4000)=nil, 0x4000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1300, 0x0, 0x3) write$P9_ROPEN(r5, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x80}, 0x2}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='sched_kthread_work_queue_work\x00', r2, 0x0, 0x8}, 0x18) r6 = socket$isdn(0x22, 0x3, 0x21) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000078040000bd351e6dd0c1ec7a0040db0291c39210fd4063717f3bb088f89adeb6f223311e4c1d2cd202c4eff88962cb15aec236201c0e163b1fcb04f369eaade0b21e3aa5e44ab5f278ef34f6d3141ec7bbf6bb3f8034dec5fda8cd6f46c2a2b8a0c0f0c82d503942b2c88d6db6e516cf87714f1dd3ec7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000eaff40850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r9}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x1) 4m48.554815578s ago: executing program 1 (id=4814): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000d80), 0x0}, 0x20) 4m48.431352693s ago: executing program 1 (id=4817): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @private}, &(0x7f00000000c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4m48.399586946s ago: executing program 1 (id=4819): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000280)=""/190) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x1200052, &(0x7f00000003c0), 0x1, 0x7aa, &(0x7f0000000800)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0xc17a) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x700, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x4c02, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000003840)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB="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", @ANYRES8=r6, @ANYRESDEC, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0'}, 0xb) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/120) 4m47.817377383s ago: executing program 1 (id=4828): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c69"], 0xc0}}, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000140)="61397cf6a66ed1dffeac6357582f187cea372ed56271a7fdc11b7621da90a4e1732b95b6d6b7571b9d14a231b1aad7730dc92cc5a4a0f3a42afdccd7fa04b96b2dcceb92fa1793efb1813f4645f585e347686e8f0b524034372b94ac63cbac64c1c714b2fdc793bef11bd60dc9261cb5175f1968036ae96ecc59119cb763e11a86ad8ae8ae3b74a94d4426b795efaeb9200718f7bb74ab0f2141495f9bd1db6faa591d7cbf4ef179e82f6ed97fe9fb269576f34bc628a738938dfd8d5e01affdd7b192d1c93f2b968dfb217d5e688e8d0f31", 0xd2}, {&(0x7f0000000440)="5c72f97c1faf6208878e7b87bd8360c37e7422d7ccc96ef29f1c874dd26e842b9d90597d231dad119eb10925e896c6d15db93d70a3a358464023be7d223c8f7af4f384768a8dc9287073e2732c7e9f83", 0x18}, {&(0x7f00000000c0)="0ffbff40d74f", 0xffffffbd}, {&(0x7f0000000240)="821ccd9c96402b9baabb0938bdceec855480e3ce024f125cbf1644d8257477ee384dcd27d9af75a46d4e", 0x2a}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000001840)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_nolock}, {@grpjquota}, {@bsdgroups}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@empty}, {@in=@private, 0x0, 0x2b}, @in=@rand_addr=0x64010102, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) fadvise64(0xffffffffffffffff, 0x5, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) 4m45.521188919s ago: executing program 1 (id=4876): r0 = socket$inet(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) 4m45.496357562s ago: executing program 35 (id=4876): r0 = socket$inet(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) 2m33.823640451s ago: executing program 3 (id=7902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x1001, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0xee01) 2m33.723162413s ago: executing program 3 (id=7905): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2m32.684501853s ago: executing program 3 (id=7919): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x80000001}, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000620000000000000005000000a0200100", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000400000004008000010000000000ab000000000000db3f53d81e5487d5406a063b4936dae4fc28b44f4d209388c765fd598df6acafe3c5ddff9ce89c7c6d2a0bd9e86874de30dccd527dad549e0323c5285b4b81aac00b08bd5a65493aa0", @ANYRES32, @ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x28, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r4, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r6, @ANYBLOB="b08129bd7000fddbdf251b000000e40022801c000080080004001c4100000800020074f83e23080007002c0900003400008008000500ffffffff0800030000800000080006000900000008000500ffffff7f08000200d105000008000300020000000c00008008000100e909000034000080080002000300000008000500d900000008000600f6ffffff0820020001010000080007000600000008000700020000000c000080080001000b00000044000080080005000900000008000300010000000800070000000080080007000101000008000100400000000800060002008400"/242], 0xf8}, 0x1, 0x0, 0x0, 0x10000081}, 0x804) close(0xffffffffffffffff) 2m31.824790133s ago: executing program 3 (id=7932): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@errors_remount}, {@jqfmt_vfsold}, {@data_err_abort}, {@norecovery}, {@norecovery}]}, 0x1, 0x4cd, &(0x7f0000000a00)="$eJzs3ctrXNcZAPBvZqyn1cp2S7FdqA0uuA+s0YNiqe2iXbVdGEoN3bTgqtJYVTXSCM3ItYShcrLzIouQkEDIIstA/oFkE69iAiHrZB+8CA6Jo0ASCEyYOzPy6DHKJJY8Qff3g+s595zr+c7R8B3dOXM1N4DUOl/7JxMxFBHvRsRwfXf7AefrD5sPb83UtkxUq1c/ziTH1fabhzb/3/GI2IiI/oj4258i/p3ZHbe8tr4wXSwWVhr7+cricr68tn5pfnF6rjBXWBqbvDw1NTk6MT51YGO988x/71x54y+9r33+9IN7z771Zq1bQ4221nEcpPrQe+JkS92xiPj9YQTrglxjPAPd7gjfSe31+1FEXEjyfzhyyasJpEG1Wq1+Ve1r17xRBY6sbHIOnMmORES9nM2OjNTP4X8cg9liqVz59fXS6tJs/Vz5RPRkr88XC6ON9wonoidT2x9Lyo/2x3fsT0Qk58DP5QaS/ZGZUnH2yU51wA7Hd+T/Z7l6/gMp4S0/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kEp/vXKltlWbf/8+e2NtdaF049Jsobwwsrg6MzJTWomRuVLf6509X7FUWh77TazezFcK5Uq+vLZ+bbG0ulS5Nr84PdcbhZ5DHg/QuZPn7r6fiYiN3w4kW01vo02uwtFW/X/9OwCA9Ml1ewICusbSH6SX9/jAHl/Ru01/u4blx4r6TWGBQ5TtdgeArrl4xud/kFbW/yG9rP9Dem0/x3c2AGnUnfV/oJus/0N6DbXc/yfTcv+vH7Tcu2s0In4YEe/levqa9/oCjoLsh5lG7l8c/vnQztbezBfJokBvRPzvpasv3JyuVFbGavWfbNVXXqzX93aj+0DHkvwdbzz6RQ4Aqbb58NZMc9uqPHH4cT/6Y/0ihN3xjzXWJvuTzygHNzPbrlXIHNC1Cxu3I+L0XvEzjfud1z/5GNzM7Yp/qvGYqT9F0t9jyX3THyf+/Vc7jX+mJf7PWuKffeyfCqTD3dr8M7pX/meTnI6t/Ns+/wwd0PXR7ee/7Nb8l2sz/53rMMZ/Xn7qftv4tyPO7hm/Ga8/ibUzfq1vFzuM/+Cff/9Ju7bqK/Xn2St+U62Urywu58tr65fmF6fnCnOFpbHJy1NTk6MT41P5ZI0631yp3u13p9+5t9/4B9vE32/8tbpfdjj+L3/69j/O7xP/Fxf2fv1P7RN/ICJ+1WH8T8c/+Fe7tlr82Tbjz+6M37LAV6ub6DB++fk/93V4KADwBJTX1hemi8XCioKCwrcsVIbrWfR96c9BFro9MwGH7VHSd7snAAAAAAAAAAAAQKcO7JrhP0Tbpm6PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKPg6AAD//029zuw=") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x200000, 0x1718, 0x0, 0x0, 0x1c, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x3, 0x5]}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000, 0x1000000}]) 2m31.008265727s ago: executing program 3 (id=7950): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m30.683519595s ago: executing program 3 (id=7964): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) 2m30.675371676s ago: executing program 36 (id=7964): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) 1m41.329316409s ago: executing program 6 (id=9012): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) 1m41.076607859s ago: executing program 6 (id=9019): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x81900) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="711097000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@broadcast, @local, @void, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "2d24acdfdbb167e7"}}}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) (async) sendto$inet6(r0, &(0x7f00000006c0)="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", 0xffffffffffffffce, 0x0, &(0x7f0000000180)={0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0, 0x0) 1m40.727163329s ago: executing program 6 (id=9024): socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000153fe62495f0a428c64604f110e6824cac11536f23719c137aa2958d16908bb75f5174940441b84324ac1788ad85f1c3fc14b0b60163628eabb333b8178a7d2bdb318039bf329f9ab5edf6e58373dbcf6e26773f2b27a30117bd97e8bf57e68667ab475a3c6fe0caf631b6b2e5cc7535055a3b824250b669620c9f0c2e8b291b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000008045000000000000000000d79d0000000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRES32=r1, @ANYBLOB="99c91448e00d8655c9d67ba106ac1e7bb12058412b433d7c4e7f778f194eb8c05fb06e3c2dda99206932fc2d57e9c18af28b5ddac387598e9c74b5156a4db9b6f2c4c4e49d32c1a8bbddda2bd737b2dfd73f00b8e8f431bed1704f7e9db399796620b9feb2f9739402d810863623662433", @ANYRES16=r0, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x2d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) write$selinux_user(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRESHEX], 0x2c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x20e3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1a00000000000000000000004b64ffec850000006d000000b40000000e00000095", @ANYRESOCT=r5, @ANYRES8=0x0, @ANYRES64=r5, @ANYBLOB="d2df714b5d7fed9bd3604b859220a083b257a3ee0a2839a8514ede10a65d5acc", @ANYRES8=r5, @ANYRESHEX=r6], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fd"], 0x48) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1m40.665092237s ago: executing program 6 (id=9028): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x30004081) 1m40.564436578s ago: executing program 6 (id=9032): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(r1, &(0x7f0000000180)='./bus\x00', 0x1, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001600)={0x34, r3, 0x905, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="20010000bb06e734f4792f3c9df1a77f32a6d4ef5d3ef2a785d3b6e727feb013f2bc7498a973f39f5b18cab80a93a682cc970cd5205d4a8aa283773139d4f28776f263786fdaedd7e388cc0e94d206a359b0ae4c1c5c7f97b2fbcedcb9fa79224d35b64220781b01176ad55248dcd299301b40fc11dd7cd09a9f156da88a18fef22244eee168cd", @ANYRES16=r3, @ANYBLOB="000325bd7000fddbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x120}, 0x1, 0x0, 0x0, 0x44}, 0x8084) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1a3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x109d63, 0x0, 0x0, 0x0, 0x0, 0xc13}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000480)='./bus\x00', 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0xa0600, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1m40.147278987s ago: executing program 6 (id=9038): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) pread64(r0, &(0x7f0000000180)=""/73, 0x49, 0x8000000000000f5) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x654, &(0x7f0000000740)="$eJzs3d1u2+b5APBH+cDf8B/Ihm0IgiBN2WQDEiB1JLlxYPRIo2mbrSQKpFwkR0XQOEUQpx2SDlhytJxkG7BdRE93EdsVFbuEDaTk1ElsK1+1iuD3E5L3FfmQ70NZ4GNaIhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLTStXa704p+Pty6kRwsXSuLwSHzd9f37+eaQ8aNaNX/YmEhzkwmnfnNj7NP1/9diHOTZ+dioW4W4vH/n/7lp78+cWx3+UMSOhIPHz2+d2tnZ/vBvBOZk41smFdFPuhtZEleFcnqykr76uYvqmQ972fVzWqcDZK0zHrjokwupZeTzurqcpIt3Sy2hhtrvX62O/H6x912eyX5bGmU9cqqGF79bKlKN/N+Px9uNDH17Drmev1G/DwfJ+OsN0iSO3d3tpdnJVkHdV4lqDsrqNvudjudbrezcm312vV2+8RLE9oviJci5v+mZb7e8R4c3tyxaf2PfuQxjK24Ecm+jzTWoowiBgfMn9qt/7+7mh067t76v1vlz/w4+2w09f/85Nn5g+r/Abkc3eNhPIrHcS9uxU7sxHY8mHtGR/vYiCyGkUcVReQxiF4zJZlOSWI1VmIl2vFlbMZ6VJHEeuTRjyyquBlVjCNr3lFplJFFL8ZRRBlJXIo0LkcSnViN1ViOJLJYiptRxFYMYyPWotes5U7cbV735UNyfBbUeZWg7iFB6j9v793vxOEN/Xe3/gMAAADvrVbz1/f6+P9kfND01vN+1p53WgAAAMA71Hzyf65uTta9D6Ll+B8AAADeN63mHLtWRCzGh5Pe7plQ/ggAAAAA74nm8//zdbNY9z6MluN/AAAAeN/8deY19qvR/7X+9Z8oy5OtJ6Mbv23d79VxvfvHJ8sdf3GN4/WzrVPTlTTNyonpszQ715pe/fLZRTB/mDZ3ZuXReiGBZ2t4jQTi7/HRJOaj25P29u6cySiL63k/W0qL/qed6PVOHRtnN8Z//Obun6LZ/L8NB6dacefuzvbSV9/u3G5yeVKv5cn96QUUX7qO4iG5fNdcb6E552LfLT7ZnIgxHXdxMm577w/g2GTxY68x5tO4MIm5sDhpF5/f/oV6zM7SQVs/zaLzllv+NC5OYi5eujhp9smiOyuL7t4s3ui1eIUslmdlsfyWWQDMy50ZVaj1cuF/g73ca1f3N/n1Ip7GpUnMpbPNjvXE2X326O1Ze/T2W1a3f8blSczl3eCDamw97j9eqKrf1wt8f+C4Vb/bql/C49/d/0Ocfvjo8cd379/6evvr7W+63eWV9ift9rVunGw2Y9qoPQDsY/Y9dmZGtD6ZcVT9q2dfKViKr+Lb2InbcaU526D5xsG+a13c8zWEKzOOWhf33OHlyoyjusU9N3p59djlI/hJAMDRuTCjDr9K/b8y47j7+Vp++NHx3loOAPw0svKHViz8pVWW+ejLzupqpzfezJKySD9PynxtI0vy4Tgr083ecCNLRmUxLtKiX3e+yNeyKqm2RqOiHCfrRZmMiiq/0dz5PZne+r3KBr3hOE+rUT/rVVmSFsNxLx0na3mVJqOt3/fzajMrm4WrUZbm63naG+fFMKmKrTLNlpKkyrI9gflaNhzn63ndHSajMh/0ypvJF0V/a5Ala1mVlvloXExWuDtWPlwvykGz2qV5v9gA8DPx8NHje7d2drYf/ISdeW8jAPA8VRoAAAAAAAAAAAAAAH7+juL8Px0dnbfs/PmoB533ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXva/AAAA///DxFbx") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x10000265) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 1m24.759897341s ago: executing program 37 (id=9038): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) pread64(r0, &(0x7f0000000180)=""/73, 0x49, 0x8000000000000f5) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x654, &(0x7f0000000740)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x10000265) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 3.264975792s ago: executing program 7 (id=10353): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000181100005c62476dd88564b58a6793ce4e10929b66dee4abfa5e7a9ea957305129adbdd299a9fb729e2cdfff6afc95374ff44273d12d8da06ccee2993c0e8c2d605ce9e6668e22c6ac5805003a778c4e92f14899bfdd1322d011a53b2c29bdfdedb08551147b0cea6f9d0b", @ANYRES32, @ANYBLOB="0000000000000000b708e716000000f9757aca0000007b8af8ffbf7b86d1b5eb1ae441074a0f0f00000000bfaa0000000000fbffffff00f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001000000000000008416f1dab6edf1414389976323b08c18ce0024830519eb24fdefe2d21510feb00222e7ced76fa8a8ac6956359211631bac68764e4015ba910af32b78b1f1fe18ed30c1870e09ac86c9d456b211b1863243373eea6c80ac26a5ca0f9b90533ca028bf146d76678526b2c6503f3136cb59753bfa286f4eef72d68255d04ae6fc2580ba0d074aa1e862cc931e0e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x6, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.11040777s ago: executing program 7 (id=10357): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mr_dereg\x00'}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.006797132s ago: executing program 7 (id=10361): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000102020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000081000000000daa"], 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000359b80fa500c96abdd56435c94c71df8e2fbd391764f09feb00000c794d950dd14d25dd289ae0afe5c7af21ee57ec20d5efb793450263830949303087fec28f659239ddf7b8fa1fc9c6fc40b3e5df7f57a61411d4864a7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES32=r4, @ANYRES8, @ANYRES8, @ANYRES64=r6, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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") r7 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) r8 = socket(0xa, 0x3, 0x3a) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000001dfaffffff6c0000000000954f3ba70fa82ceb6d62f2d05440dbfe00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync_file_range(0xffffffffffffffff, 0x5408, 0x1, 0x3) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) 2.810919245s ago: executing program 7 (id=10365): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c69"], 0xc0}}, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000140)="61397cf6a66ed1dffeac6357582f187cea372ed56271a7fdc11b7621da90a4e1732b95b6d6b7571b9d14a231b1aad7730dc92cc5a4a0f3a42afdccd7fa04b96b2dcceb92fa1793efb1813f4645f585e347686e8f0b524034372b94ac63cbac64c1c714b2fdc793bef11bd60dc9261cb5175f1968036ae96ecc59119cb763e11a86ad8ae8ae3b74a94d4426b795efaeb9200718f7bb74ab0f2141495f9bd1db6faa591d7cbf4ef179e82f6ed97fe9fb269576f34bc628a738938dfd8d5e01affdd7b192d1c93f2b968dfb217d5e688e8d0f", 0xd1}, {&(0x7f0000000440)="5c72f97c1faf6208878e7b87bd8360c37e7422d7ccc96ef29f1c874dd26e842b9d90597d231dad119eb10925e896c6d15db93d70a3a358464023be7d223c8f7af4f384768a8dc9287073e2732c7e9f83", 0x50}, {&(0x7f00000000c0)="0ffbff40d74f", 0x6}, {&(0x7f0000000240)="821ccd9c96402b9baabb0938bdceec855480e3ce024f125cbf1644d8257477ee384dcd27d9af75a46d4e", 0x2a}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000001840)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_nolock}, {@grpjquota}, {@bsdgroups}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@empty}, {@in=@private, 0x0, 0x2b}, @in=@rand_addr=0x64010102, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) fadvise64(0xffffffffffffffff, 0x5, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) 2.784722068s ago: executing program 5 (id=10367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="7d2f00000000f2ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x400}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="e80000000000000008010000090000008188ffc07b69377a160f64ebba4d6b256b35a0ecc94ebbd9d523013875a4945b79225554fe122061ddd9db1cd3613c691946e079dc9699cef25e9b2730193f695e93fe42cb2be873f82a9fd2744f6a7c4aa03ba377c92343b731ebf562f7ca4e2820c458413291450e4fa116f9bd966887a56e8150f9f2dc4dd82998d67414ba52ef9304d74d3f553b84315f6c2c68c49c5ad2a6622a006ee92980f02a542b7e13934eecaba7d50cf8f7aeccf70c91a76b1c7d00a52d97663ad680fef9ec74f430cde849065c992fa8049a7d69e2ec03a709593ba8a4"], 0xe8}, 0x81) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x40}]}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x2, @remote, 0x5}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8002000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x23c, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0xff, 0x0, 0xffffff]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cda6a02c3728266fd864bc6b04f6c051"}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}, @filter_kind_options=@f_route={{0xa}, {0x14c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xe0, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x30000003}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_nat={0x2c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x23c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/15, 0xf}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x3}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYBLOB="010600000000000000000100000008000100", @ANYRES32, @ANYBLOB="4800028044000100240001016d6f64650006000000000000d380000000000000000000000000000000230dd6b90005e80300050000001100047e4cc713dd3b3356ac53e06feed71bb9a5edff72cd1a4fbbd9dbc60aa54ad2448dd8910c17c33b1dfd65cadba45b6ecaa991472bbb5f21a6d7c01e7e1d9b5a483817e56a312ebc642837a9a0ad815afb60b34d58ac4155401bd3bbba4fb9cd748180ab293ab2e2a2321698ab08fd94ee85a6cd725f8bef9df3cda593e3d0351d1a33fc194f21e4ba02fa76788b04a9a48b994e00", @ANYBLOB="ae76d73842790440c42bbd48e3867a30205c6aa32dcb1a7e814d35eab85aedd9b3edf26e05c9d6c317fe4530e08b679d0fffb7054b9787787278ff522d3651f0d17c6b733211a1941dd41941788234e1c4b2d6ec58bbb0ff78b7df02fa0b5fb459210c2b77548529b78752a070cea9b35c1086d1fe20bed9a4f094497eae8a08fde5e1f03f7b0ea11c38", @ANYRES8=0x0, @ANYRESDEC=r0], 0x64}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c65000000001600"/104], 0x68) 2.76519114s ago: executing program 5 (id=10368): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1, 0xe7e00000}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20) close(r0) 2.743690783s ago: executing program 5 (id=10369): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x1b, 0xffffffff, 0x27}, 0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES16=r7, @ANYRESHEX], 0x54}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_BULK(r8, 0xc0185502, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r9, 0x6, 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.825133279s ago: executing program 5 (id=10371): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c69"], 0xc0}}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="61397cf6a66ed1dffeac6357582f187cea372ed56271a7fdc11b7621da90a4e1732b95b6d6b7571b9d14a231b1aad7730dc92cc5a4a0f3a42afdccd7fa04b96b2dcceb92fa1793efb1813f4645f585e347686e8f0b524034372b94ac63cbac64c1c714b2fdc793bef11bd60dc9261cb5175f1968036ae96ecc59119cb763e11a86ad8ae8ae3b74a94d4426b795efaeb9200718f7bb74ab0f2141495f9bd1db6faa591d7cbf4ef179e82f6ed97fe9fb269576f34bc628a738938dfd8d5e01affdd7b192d1c93f2b968dfb217d5e688e8d0f31", 0xd2}, {&(0x7f0000000440)="5c72f97c1faf6208878e7b87bd8360c37e7422d7ccc96ef29f1c874dd26e842b9d90597d231dad119eb10925e896c6d15db93d70a3a358464023be7d223c8f7af4f384768a8dc9287073e2732c7e9f83", 0x18}, {&(0x7f00000000c0)="0ffbff40d74f", 0xffffffbd}, {&(0x7f0000000240)="821ccd9c96402b9baabb0938bdceec855480e3ce024f125cbf1644d8257477ee384dcd27d9af75a46d4e", 0x2a}], 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000001840)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_nolock}, {@grpjquota}, {@bsdgroups}]}, 0x45, 0x7ce, &(0x7f0000000500)="$eJzs3c9rHNcdAPDvrFY/7VYqlLYuFBYKrcF4Vbmq3UKhKj2UQg2G5JRDbLFaC0crrdGujCVEYhMCuQSSkFty8Tk/LyHX/IDkkvwfwcZJZBOHHILC7A9pJe/aK0faje3PB8Z6b+fNvPfdN/P2STOeDeCxlUv/yUQciYiXk4jxxutJRAzWUtmImXq5OxvrhXRJYnPzia+TWpnbG+uFaNkmdaiR+V1EfPxCxLHM3fVWVtcWZkul4vKObVfXjl9YnJ0vzheXTk5NT5849bdTJ/cv1m+/WDt845X//vmdme+f/+27L32SxEwcTuOr2Y5jv+Qi14hrMH0Ld/jPflfWN+8/20WhTMTmZj2ZPegGsQfpqTnQ6JUjMR4D9+qf0V62DAA4KM9FOjPrYKDjGgDgoZbUP///1e92AAC90vw7wO2N9UJz6e9fJHrr5r8jYqQef/P6Zn1NtnHNbqR2HXTsdrLjykgSERP7UH8uIt744Om30iV2XU8FOEhXrkbEuYncjvF/IGoj3O57FvbqL+1fnm/N5HatNP5B73yYzn/+3m7+l9ma/0Sb+c9wm3P3Qdz//M9c34dqOkrnf/9subftTkv8DRMDjdwvanO+weT8hVIxHdt+GRFHY3A4zU/Vy7a9Q+borR9udaq/df73zavPvJnWn/7cLpG5nh3euc3cbHX2p8bddPNqxO+z7eJPx//hWv8nHea/Z7qs43//ePH1TuvS+NN4m8vd8R+szWsRf2rb/8lWmTQ1WV28OFlpd3/iZO1wmGweFG28NxNjnerPZbf7P13S+pu/C/RC2v9j945/Imm9X7PS9a63zoXPr41/1KlQ6/HfPv72x/9Q8mQtPdR47fJstbo8FTGU/P/u109sb9vMN8un8R/9Y/vzvzn+tTn+n0r3f67LNyJ746u3Hzz+g5XGP7en/t9zIkbuLAx0qr+7/p/esU0341+3DXzQ9w0AAAAAAAAAAAAAAAAAAAAAAAAA9iITEYcjyeS30plMPl//Du9fx1imVK5Uj50vryzNpetqzz/NNB91Od7yPNSpxvPwm/kTu/J/jYhfRcRrw6O1fL5QLs31O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDjU4fv/U18O7yo80I8WAgAHYsQHOwA8bpJstt9NAAB6baTrkrmIGD3QtgAAvdH95z8A8Kjo/PnvwgAAPKru8/v/7v8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt15vTpdNn8bmO9kObnLq2uLJQvHZ8rVhbyiyuFfKG8fDE/Xy7Pl4r5Qnkxsh12dKX+o1QuX5yOpZXLk9VipTpZWV07u1heWaqevbA4O188WxzsYWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0K3K6trC5nipuJwmZksSPU4sfFbvh59LeyT2logr9f7b1z1/evIPv0l32tcAY2h7lBjty9gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DD4MQAA//+KvR+l") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@empty}, {@in=@private, 0x0, 0x2b}, @in=@rand_addr=0x64010102, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) fadvise64(0xffffffffffffffff, 0x5, 0x0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)) 1.607939294s ago: executing program 7 (id=10373): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvfrom(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) 1.545169511s ago: executing program 8 (id=10375): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000102020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000081000000000daa"], 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000359b80fa500c96abdd56435c94c71df8e2fbd391764f09feb00000c794d950dd14d25dd289ae0afe5c7af21ee57ec20d5efb793450263830949303087fec28f659239ddf7b8fa1fc9c6fc40b3e5df7f57a61411d4864a7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES32=r4, @ANYRES8, @ANYRES8, @ANYRES64=r6, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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") r7 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) r8 = socket(0xa, 0x3, 0x3a) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000001dfaffffff6c0000000000954f3ba70fa82ceb6d62f2d05440dbfe00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync_file_range(0xffffffffffffffff, 0x5408, 0x1, 0x3) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) 1.480662349s ago: executing program 9 (id=10377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd2c, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}}, 0x1c}}, 0x0) (fail_nth: 1) 1.229691938s ago: executing program 8 (id=10379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="7d2f00000000f2ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x400}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="e80000000000000008010000090000008188ffc07b69377a160f64ebba4d6b256b35a0ecc94ebbd9d523013875a4945b79225554fe122061ddd9db1cd3613c691946e079dc9699cef25e9b2730193f695e93fe42cb2be873f82a9fd2744f6a7c4aa03ba377c92343b731ebf562f7ca4e2820c458413291450e4fa116f9bd966887a56e8150f9f2dc4dd82998d67414ba52ef9304d74d3f553b84315f6c2c68c49c5ad2a6622a006ee92980f02a542b7e13934eecaba7d50cf8f7aeccf70c91a76b1c7d00a52d97663ad680fef9ec74f430cde849065c992fa8049a7d69e2ec03a709593ba8a4"], 0xe8}, 0x81) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x40}]}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x2, @remote, 0x5}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8002000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x23c, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0xff, 0x0, 0xffffff]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cda6a02c3728266fd864bc6b04f6c051"}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}, @filter_kind_options=@f_route={{0xa}, {0x14c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xe0, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x30000003}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_nat={0x2c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x23c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/15, 0xf}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x3}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32, @ANYBLOB="4800028044000100240001016d6f64650006000000000000d380000000000000000000000000000000230dd6b90005e80300050000001100047e4cc713dd3b3356ac53e06feed71bb9a5edff72cd1a4fbbd9dbc60aa54ad2448dd8910c17c33b1dfd65cadba45b6ecaa991472bbb5f21a6d7c01e7e1d9b5a483817e56a312ebc642837a9a0ad815afb60b34d58ac4155401bd3bbba4fb9cd748180ab293ab2e2a2321698ab08fd94ee85a6cd725f8bef9df3cda593e3d0351d1a33fc194f21e4ba02fa76788b04a9a48b994e00", @ANYBLOB="ae76d73842790440c42bbd48e3867a30205c6aa32dcb1a7e814d35eab85aedd9b3edf26e05c9d6c317fe4530e08b679d0fffb7054b9787787278ff522d3651f0d17c6b733211a1941dd41941788234e1c4b2d6ec58bbb0ff78b7df02fa0b5fb459210c2b77548529b78752a070cea9b35c1086d1fe20bed9a4f094497eae8a08fde5e1f03f7b0ea11c38", @ANYRES8=0x0, @ANYRESDEC=r0], 0x64}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c65000000001600"/104], 0x68) 1.140105438s ago: executing program 9 (id=10380): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000002c0)={{0xf8, 0x5}, {0x0, 0xfb}, 0xff, 0x1, 0x9}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) timer_settime(0x0, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 1.139177338s ago: executing program 8 (id=10381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0, 0x0) r2 = socket(0xa, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x6, 0x17, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r6, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 819.590215ms ago: executing program 5 (id=10385): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x34, r3, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 736.085155ms ago: executing program 4 (id=10387): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 706.500039ms ago: executing program 4 (id=10388): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0faf16a001c000000000000000000000008"], 0x38}, 0x0) r4 = getpid() r5 = timerfd_create(0x9, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x77359400}, {0x77359400}}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r7, 0x0, 0x8}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x50, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRES32=r4, @ANYRES32=0x0, @ANYRESOCT], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0xfffc, 0x3fc, 0x0, 0x32}, 0x9c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000cb528e525591bcec896dc88afa43ac153d621c5573cf39c50768076fdd2d6de4cfbf1b11f525a2527ec01a52ec488809d91f8aceafada02570e7134131e474489072234843ae7c17da5d0faf2edbde974038cc96bb40a3185f11ba0bb6987f211288816fb37a5d2119d5ce9e2f9ba3df9cfed07940d36e31b60ffd5636eaa3505acd6b8978a84040af59a7c7030186f46943a99330c206978d52fee3c3d06bbdc412d8a265bf89fec7241145bf8d783f4cd4a9066f2f8b637c5601c9ba6c0ab6f7f86c25b114b5c26e1002b119a9eae9bb1b2ff8a53756ffa077f55cbcf34b51641c82", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fbdbdf2505000000280001800d0001007564703a73797a30000000000c00028008000600870000000800018000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40404}, 0x100) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r12, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) 635.939607ms ago: executing program 4 (id=10389): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000102020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000081000000000daa"], 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000359b80fa500c96abdd56435c94c71df8e2fbd391764f09feb00000c794d950dd14d25dd289ae0afe5c7af21ee57ec20d5efb793450263830949303087fec28f659239ddf7b8fa1fc9c6fc40b3e5df7f57a61411d4864a7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES32=r4, @ANYRES8, @ANYRES8, @ANYRES64=r6, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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") r7 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) r8 = socket(0xa, 0x3, 0x3a) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000001dfaffffff6c0000000000954f3ba70fa82ceb6d62f2d05440dbfe00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync_file_range(0xffffffffffffffff, 0x5408, 0x1, 0x3) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) 538.977818ms ago: executing program 4 (id=10390): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000102020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000081000000000daa"], 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000359b80fa500c96abdd56435c94c71df8e2fbd391764f09feb00000c794d950dd14d25dd289ae0afe5c7af21ee57ec20d5efb793450263830949303087fec28f659239ddf7b8fa1fc9c6fc40b3e5df7f57a61411d4864a7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x3a9, 0x0, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r7, @ANYRES32=r6, @ANYRES8, @ANYRES8, @ANYRES64=r7, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) 448.068738ms ago: executing program 4 (id=10391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="7d2f00000000f2ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x400}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="e80000000000000008010000090000008188ffc07b69377a160f64ebba4d6b256b35a0ecc94ebbd9d523013875a4945b79225554fe122061ddd9db1cd3613c691946e079dc9699cef25e9b2730193f695e93fe42cb2be873f82a9fd2744f6a7c4aa03ba377c92343b731ebf562f7ca4e2820c458413291450e4fa116f9bd966887a56e8150f9f2dc4dd82998d67414ba52ef9304d74d3f553b84315f6c2c68c49c5ad2a6622a006ee92980f02a542b7e13934eecaba7d50cf8f7aeccf70c91a76b1c7d00a52d97663ad680fef9ec74f430cde849065c992fa8049a7d69e2ec03a709593ba8a4"], 0xe8}, 0x81) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x40}]}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x2, @remote, 0x5}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8002000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x23c, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0xff, 0x0, 0xffffff]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cda6a02c3728266fd864bc6b04f6c051"}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}, @filter_kind_options=@f_route={{0xa}, {0x14c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xe0, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x30000003}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_nat={0x2c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x23c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/15, 0xf}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x3}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32, @ANYBLOB="4800028044000100240001016d6f64650006000000000000d380000000000000000000000000000000230dd6b90005e80300050000001100047e4cc713dd3b3356ac53e06feed71bb9a5edff72cd1a4fbbd9dbc60aa54ad2448dd8910c17c33b1dfd65cadba45b6ecaa991472bbb5f21a6d7c01e7e1d9b5a483817e56a312ebc642837a9a0ad815afb60b34d58ac4155401bd3bbba4fb9cd748180ab293ab2e2a2321698ab08fd94ee85a6cd725f8bef9df3cda593e3d0351d1a33fc194f21e4ba02fa76788b04a9a48b994e00", @ANYBLOB="ae76d73842790440c42bbd48e3867a30205c6aa32dcb1a7e814d35eab85aedd9b3edf26e05c9d6c317fe4530e08b679d0fffb7054b9787787278ff522d3651f0d17c6b733211a1941dd41941788234e1c4b2d6ec58bbb0ff78b7df02fa0b5fb459210c2b77548529b78752a070cea9b35c1086d1fe20bed9a4f094497eae8a08fde5e1f03f7b0ea11c38", @ANYRES8=0x0, @ANYRESDEC=r0], 0x64}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c65000000001600"/104], 0x68) 447.528679ms ago: executing program 4 (id=10392): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000140)) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(r3) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) timer_create(0xfffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff10c}]}, 0x10) 351.20872ms ago: executing program 7 (id=10393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="7d2f00000000f2ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="881a5ca3ff8a0aef501812a8ce6978d2e8e6e78fd512761977dc0e4dd53e72256efa082166d32477c40821fb1945e7f8ec6d485f35d48e8c08627efa4224e8359bd479305973543c735bf754d4a130b28637f05205173c5cb3ddffb5dc688ba85cbda622af1b658964e95ee6f23619ed69d105d75fdf2266e3d37d3d3074e9a88a4aaafbb26c6525e538f91a29ea7e687b5626e413551ff06547de3f022ada1c00446cbd9fbc66b014470bd5135ce0d0b16c9b0deb4ab4056a6c50ca786c894004abfdc2af8ab032d5289f4f670b850309944a2cb02704c1e91b404e750e1513ae929ab789db218de32c6071c7183756581dc385257d503f251961bd43607fd48342bd14ecb606a2ece32b0f2176444628d900bc30962f6771e30c36214382c8779fdb95185c4a5bb9c128ca70227c46c5b6005127f684007f2e9c3a958f9f154b2844d30071a3b0725bacf076640f7f63f9c38ddc90ccd6af500d47938019847595b62053c02427677e4fac2c90b807b7fb4e75a12813c4c8c8a02267e2e2c3a596a98ad2098661dc542b423a6023f73f9199b8511cd48c4e01d906b46feffa9185d509a21fb19715ecaeadc8a2b3ab2d126b82ba911667a8e91735aab2d9962514863343aa867455c75e8ea802ca873712f455914f4309df3cfdaded2218ee0cc708c9b6b5d2ef7c355f5f08763d71bae3458d113eb570a037d7d6fbbf82c6fa5cca65c89a0222ee4832a24a769e86bb0a525311af6f19a0b2fb24e26a60dea0c102743338a5bd6852374151d2cb48a38ed3abd44cabccdf2ae641ba8e826900826517710b18de51e16c083c4c4b7423a86099bbe91699c62401e80a240b9799bf9cc217e67f1ceec1f9dbb10b53026b5c248b32c9d99b0376cc25ea9fb52602c01cb448c6a0d7cce9c4ba684edbce30edf5df5e60958ec35a4e6e672295bfcbb9c1f32ca65847e74555aea7e521753281d7da20df7c647515a18b16534a0f69d4341a9d201b7a5107d0096bc49f42672aece51365116a48d3058f0291ab55d2e20da6c2f7752942d85726986b8b944432ac1b1fd6a538365a746289e3923eb526a0e44a77eec9b7ac0dea32dc903332956ab6b07ca06d8f3e13aa0ed3b6a232b8cc02dec2e144423f01632f676d6a73ebeeb29c38f98ed8a9a1ac5067e57adb3d455d87f5d98ff9409cae5af2e4da87c4088b94c14a3ef7b39eb068bb20cfb7e0bc4c50c18c037df134235e4e6b33719a7ccc58474ef000fbf81b1f34d4caa146f23de87c24935c2b403d4767e57bdd021244aacdc61f0669245a49086426f675c0f650021107e96f4bc4d377a2f8b88e469e83f97c0798f48de92ec169960be8a22a9b4406e4e3c5c1ce1bce5a020ab749d543b0e5e343f12a37ec4d8744d811b5beef99c6eebe74153fef2689eae66b9b5fc29684c32a1bdf0c9588661c", 0x400}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="e80000000000000008010000090000008188ffc07b69377a160f64ebba4d6b256b35a0ecc94ebbd9d523013875a4945b79225554fe122061ddd9db1cd3613c691946e079dc9699cef25e9b2730193f695e93fe42cb2be873f82a9fd2744f6a7c4aa03ba377c92343b731ebf562f7ca4e2820c458413291450e4fa116f9bd966887a56e8150f9f2dc4dd82998d67414ba52ef9304d74d3f553b84315f6c2c68c49c5ad2a6622a006ee92980f02a542b7e13934eecaba7d50cf8f7aeccf70c91a76b1c7d00a52d97663ad680fef9ec74f430cde849065c992fa8049a7d69e2ec03a709593ba8a4"], 0xe8}, 0x81) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000340)}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x2, @remote, 0x5}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8002000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x210, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0xff, 0x0, 0xffffff]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cda6a02c3728266fd864bc6b04f6c051"}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}, @filter_kind_options=@f_route={{0xa}, {0x120, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xe0, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x30000003}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x34, 0x6, [@m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x210}}, 0x0) r7 = socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/15, 0xf}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x3}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32, @ANYBLOB="4800028044000100240001016d6f64650006000000000000d380000000000000000000000000000000230dd6b90005e80300050000001100047e4cc713dd3b3356ac53e06feed71bb9a5edff72cd1a4fbbd9dbc60aa54ad2448dd8910c17c33b1dfd65cadba45b6ecaa991472bbb5f21a6d7c01e7e1d9b5a483817e56a312ebc642837a9a0ad815afb60b34d58ac4155401bd3bbba4fb9cd748180ab293ab2e2a2321698ab08fd94ee85a6cd725f8bef9df3cda593e3d0351d1a33fc194f21e4ba02fa76788b04a9a48b994e00", @ANYBLOB="ae76d73842790440c42bbd48e3867a30205c6aa32dcb1a7e814d35eab85aedd9b3edf26e05c9d6c317fe4530e08b679d0fffb7054b9787787278ff522d3651f0d17c6b733211a1941dd41941788234e1c4b2d6ec58bbb0ff78b7df02fa0b5fb459210c2b77548529b78752a070cea9b35c1086d1fe20bed9a4f094497eae8a08fde5e1f03f7b0ea11c38", @ANYRES8=0x0, @ANYRESDEC=r0], 0x64}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c65000000001600"/104], 0x68) 335.540121ms ago: executing program 9 (id=10394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x55) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2340, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x38901, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x10c65, 0x2000000000000, 0x0, 0x1, 0xa1ca, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x291}, 0x0, 0x400000000009, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 263.59678ms ago: executing program 9 (id=10395): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000008000)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) (fail_nth: 1) 262.49518ms ago: executing program 5 (id=10396): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000080), 0x3, 0x438, &(0x7f0000000340)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000500)={0x2, 0x1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000002c0)=""/40, 0x28}], &(0x7f00000004c0)=[0x40, 0xe, 0x5a46, 0x8, 0xedb1]}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r0, @ANYRESHEX=r6], 0x2c}}, 0x4801) epoll_create1(0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="10040000000000000016010000000400001c6a4a262f168d56389fdf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r11}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000640)="b9ff03076044238c9e9e15f088a84cb688", 0x0, 0x6131, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f00000800000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000a8aa6ca2b77e000000000000000000001f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1810000000000000000000000000000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000100000000000000000000700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) timerfd_settime(r7, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r0, &(0x7f0000000840)='./bus\x00', &(0x7f0000000980)='./file0\x00'}) socket$inet6(0xa, 0x200000000003, 0x87) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000000)=0x8, 0x4) 195.357038ms ago: executing program 8 (id=10397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb4}}, 0x0) 49.110425ms ago: executing program 9 (id=10398): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 31.800567ms ago: executing program 9 (id=10399): r0 = socket(0x18, 0x6, 0xa) socket$kcm(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) listen(r1, 0x0) pselect6(0x71, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000008000)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) 20.746888ms ago: executing program 8 (id=10400): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) close(r0) 0s ago: executing program 8 (id=10401): socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000002c0)={{0xf8, 0x5}, {0x0, 0xfb}, 0xff, 0x1, 0x9}) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) kernel console output (not intermixed with test programs): 32753 comm="syz.7.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 518.551199][ T29] audit: type=1326 audit(1730359397.448:35445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.7.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d42aad1ff code=0x7ffc0000 [ 518.574690][ T29] audit: type=1326 audit(1730359397.448:35446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.7.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 518.577655][T32537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.598268][ T29] audit: type=1326 audit(1730359397.448:35447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.7.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 518.626872][T32766] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9666'. [ 518.629066][ T29] audit: type=1326 audit(1730359397.448:35448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.7.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 518.653957][T32748] loop9: detected capacity change from 0 to 8192 [ 518.661774][ T29] audit: type=1326 audit(1730359397.448:35449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.7.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 518.684484][T32748] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 518.691828][ T29] audit: type=1326 audit(1730359397.448:35450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.7.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 518.705262][T32537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.722110][ T29] audit: type=1326 audit(1730359397.448:35451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32753 comm="syz.7.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 518.732550][T32537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.732565][T32537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.732583][T32537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.786350][T32537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.796805][T32537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.806672][T32537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.817196][T32537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.846778][T32537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.855272][T32537] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.864168][T32537] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.872883][T32537] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.881686][T32537] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.047475][ T344] loop8: detected capacity change from 0 to 512 [ 519.054076][ T344] EXT4-fs: Ignoring removed oldalloc option [ 519.060713][ T344] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 519.076704][ T345] Cannot find del_set index 0 as target [ 519.101250][ T344] EXT4-fs (loop8): 1 truncate cleaned up [ 519.107840][ T344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.142630][T23920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.519617][ T371] vlan2: entered allmulticast mode [ 519.525488][ T371] bond0: entered allmulticast mode [ 519.530638][ T371] bond_slave_0: entered allmulticast mode [ 519.536412][ T371] bond_slave_1: entered allmulticast mode [ 519.542707][ T371] bond0: left allmulticast mode [ 519.547682][ T371] bond_slave_0: left allmulticast mode [ 519.553330][ T371] bond_slave_1: left allmulticast mode [ 519.613736][ T369] loop7: detected capacity change from 0 to 8192 [ 519.621314][ T369] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 519.680640][ T383] Cannot find del_set index 0 as target [ 519.691836][ T385] loop8: detected capacity change from 0 to 512 [ 519.702000][ T385] EXT4-fs: Ignoring removed oldalloc option [ 519.709106][ T385] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 519.721202][ T385] EXT4-fs (loop8): 1 truncate cleaned up [ 519.727555][ T385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.751337][T23920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.789277][ T396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9693'. [ 520.285318][ T413] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 520.361233][ T421] syzkaller0: entered promiscuous mode [ 520.361571][ T425] loop4: detected capacity change from 0 to 512 [ 520.366841][ T421] syzkaller0: entered allmulticast mode [ 520.375441][ T425] EXT4-fs: Ignoring removed oldalloc option [ 520.385868][ T425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 520.397218][ T425] EXT4-fs (loop4): 1 truncate cleaned up [ 520.403316][ T425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.477835][ T429] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 520.478099][ T428] IPVS: stopping master sync thread 429 ... [ 520.596860][ T438] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 520.739549][ T458] loop7: detected capacity change from 0 to 256 [ 520.751834][ T463] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 520.761904][ T458] IPVS: stopping master sync thread 463 ... [ 521.086055][ T1031] IPVS: starting estimator thread 0... [ 521.110065][ T474] loop5: detected capacity change from 0 to 512 [ 521.139040][ T474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.151958][ T474] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.174352][ T472] IPVS: using max 2592 ests per chain, 129600 per kthread [ 521.210416][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.597049][ T489] Cannot find del_set index 0 as target [ 521.716946][ T499] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 521.771411][T17261] IPVS: stop unused estimator thread 0... [ 521.801762][ T506] loop7: detected capacity change from 0 to 2048 [ 521.808417][ T506] EXT4-fs: Ignoring removed mblk_io_submit option [ 521.835861][ T506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.995417][ T506] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9733: bg 0: block 234: padding at end of block bitmap is not set [ 522.009967][ T506] EXT4-fs (loop7): Remounting filesystem read-only [ 522.082070][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.122364][ T511] syzkaller0: entered promiscuous mode [ 522.127953][ T511] syzkaller0: entered allmulticast mode [ 522.394756][ T1031] IPVS: starting estimator thread 0... [ 522.484369][ T519] IPVS: using max 2160 ests per chain, 108000 per kthread [ 522.723881][ T538] loop9: detected capacity change from 0 to 2048 [ 522.730602][ T538] EXT4-fs: Ignoring removed mblk_io_submit option [ 522.745848][ T538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.954178][ T35] IPVS: starting estimator thread 0... [ 523.114296][ T545] IPVS: using max 2544 ests per chain, 127200 per kthread [ 523.225888][ T553] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 523.233169][ T538] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9744: bg 0: block 234: padding at end of block bitmap is not set [ 523.249019][ T538] EXT4-fs (loop9): Remounting filesystem read-only [ 523.270886][T17262] IPVS: stop unused estimator thread 0... [ 523.271048][ T543] EXT4-fs (loop9): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 523.354810][T24385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.377281][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.441931][ T571] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 523.641695][T17261] IPVS: stop unused estimator thread 0... [ 523.751270][ T609] loop4: detected capacity change from 0 to 2048 [ 523.758152][ T609] EXT4-fs: Ignoring removed mblk_io_submit option [ 523.798259][ T609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.810592][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 523.810607][ T29] audit: type=1326 audit(1730359402.778:35779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=617 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 523.840280][ T29] audit: type=1326 audit(1730359402.778:35780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=617 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 523.863703][ T29] audit: type=1326 audit(1730359402.778:35781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=617 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 523.887337][ T29] audit: type=1326 audit(1730359402.778:35782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=617 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 523.910743][ T29] audit: type=1326 audit(1730359402.778:35783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=617 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 523.934366][ T29] audit: type=1326 audit(1730359402.788:35784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=617 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 524.088178][ T635] syzkaller0: entered promiscuous mode [ 524.093800][ T635] syzkaller0: entered allmulticast mode [ 524.105573][ T642] loop7: detected capacity change from 0 to 2048 [ 524.112132][ T642] EXT4-fs: Ignoring removed mblk_io_submit option [ 524.125725][ T620] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9761: bg 0: block 234: padding at end of block bitmap is not set [ 524.160866][ T642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.174465][ T620] EXT4-fs (loop4): Remounting filesystem read-only [ 524.193894][ T609] EXT4-fs (loop4): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 524.427223][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.717323][ T29] audit: type=1326 audit(1730359403.658:35785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 524.740855][ T29] audit: type=1326 audit(1730359403.658:35786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 524.764283][ T29] audit: type=1326 audit(1730359403.658:35787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 524.787614][ T29] audit: type=1326 audit(1730359403.658:35788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 524.863214][ T712] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 524.870116][ T642] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9766: bg 0: block 234: padding at end of block bitmap is not set [ 524.886575][ T1031] IPVS: starting estimator thread 0... [ 524.904346][ T642] EXT4-fs (loop7): Remounting filesystem read-only [ 524.959638][ T655] EXT4-fs (loop7): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 524.974436][ T716] IPVS: using max 2784 ests per chain, 139200 per kthread [ 525.066490][ T724] syzkaller0: entered promiscuous mode [ 525.071988][ T724] syzkaller0: entered allmulticast mode [ 525.081077][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.116346][ T726] loop7: detected capacity change from 0 to 256 [ 525.126384][ T728] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 525.128135][ T726] IPVS: stopping master sync thread 728 ... [ 525.234049][ T740] Cannot find del_set index 0 as target [ 525.283735][ T747] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 525.295126][ T745] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 525.397907][T17273] IPVS: stop unused estimator thread 0... [ 525.528913][ T775] loop9: detected capacity change from 0 to 8192 [ 525.535737][ T775] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 525.823916][ T827] syzkaller0: entered promiscuous mode [ 525.829505][ T827] syzkaller0: entered allmulticast mode [ 525.985985][ T860] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.026570][ T860] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.156032][ T860] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.309724][ T1031] IPVS: starting estimator thread 0... [ 526.446247][ T907] IPVS: using max 2400 ests per chain, 120000 per kthread [ 526.463666][ T860] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.593619][ T920] loop4: detected capacity change from 0 to 512 [ 526.606576][ T920] EXT4-fs: Ignoring removed oldalloc option [ 526.623261][ T860] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.637321][ T920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 526.660192][ T860] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.673432][ T860] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.682608][ T920] EXT4-fs (loop4): 1 truncate cleaned up [ 526.685373][ T860] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.694682][ T920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.740632][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.049289][ T933] loop8: detected capacity change from 0 to 256 [ 527.093211][ T938] Cannot find del_set index 0 as target [ 527.150495][T17248] IPVS: stop unused estimator thread 0... [ 527.326223][ T953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.367484][ T953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.389441][ T954] loop5: detected capacity change from 0 to 512 [ 527.415991][ T954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.430210][ T954] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.442303][ T954] Cannot find del_set index 0 as target [ 527.451501][ T953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.507292][ T953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.570031][ T953] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.580767][ T953] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.591450][ T953] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.602288][ T953] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.680909][ T964] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 527.734057][ T970] loop4: detected capacity change from 0 to 512 [ 527.745783][ T970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.759831][ T970] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.772237][ T970] Cannot find del_set index 0 as target [ 527.781096][ T976] syzkaller0: entered promiscuous mode [ 527.786625][ T976] syzkaller0: entered allmulticast mode [ 528.083864][ T3392] IPVS: starting estimator thread 0... [ 528.169076][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.178253][ T981] IPVS: using max 2592 ests per chain, 129600 per kthread [ 528.519349][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.864595][ T995] loop7: detected capacity change from 0 to 256 [ 528.875704][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 528.875717][ T29] audit: type=1326 audit(1730359407.828:35957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 528.905345][ T29] audit: type=1326 audit(1730359407.828:35958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 528.928770][ T29] audit: type=1326 audit(1730359407.828:35959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 528.952165][ T29] audit: type=1326 audit(1730359407.828:35960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d42aad1ff code=0x7ffc0000 [ 528.975491][ T29] audit: type=1326 audit(1730359407.828:35961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 528.998941][ T29] audit: type=1326 audit(1730359407.828:35962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 529.022320][ T29] audit: type=1326 audit(1730359407.828:35963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 529.045745][ T29] audit: type=1326 audit(1730359407.828:35964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 529.069199][ T29] audit: type=1326 audit(1730359407.828:35965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 529.092716][ T29] audit: type=1326 audit(1730359407.828:35966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.7.9833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 529.154739][ T999] loop7: detected capacity change from 0 to 256 [ 529.194028][ T28] IPVS: stop unused estimator thread 0... [ 529.285193][ T1006] Cannot find del_set index 0 as target [ 529.498854][ T1013] loop4: detected capacity change from 0 to 512 [ 529.624184][ T3392] IPVS: starting estimator thread 0... [ 529.695687][ T1013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.709223][ T1013] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.720545][ T1015] IPVS: using max 2544 ests per chain, 127200 per kthread [ 529.730255][ T1013] Cannot find del_set index 0 as target [ 530.242755][ T1028] vlan2: entered allmulticast mode [ 530.248592][ T1028] bond0: entered allmulticast mode [ 530.253755][ T1028] bond_slave_0: entered allmulticast mode [ 530.259615][ T1028] bond_slave_1: entered allmulticast mode [ 530.266818][ T1028] bond0: left allmulticast mode [ 530.271710][ T1028] bond_slave_0: left allmulticast mode [ 530.277312][ T1028] bond_slave_1: left allmulticast mode [ 530.295520][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.364548][ T1035] loop7: detected capacity change from 0 to 256 [ 530.382291][ T1036] loop4: detected capacity change from 0 to 256 [ 530.484704][T17251] IPVS: stop unused estimator thread 0... [ 530.923853][ T1024] syz.5.9842 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 530.936759][ T1024] CPU: 1 UID: 0 PID: 1024 Comm: syz.5.9842 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 530.947533][ T1024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.957585][ T1024] Call Trace: [ 530.960922][ T1024] [ 530.963869][ T1024] dump_stack_lvl+0xf2/0x150 [ 530.968539][ T1024] dump_stack+0x15/0x20 [ 530.972705][ T1024] dump_header+0x83/0x2d0 [ 530.977055][ T1024] oom_kill_process+0x341/0x4c0 [ 530.981996][ T1024] out_of_memory+0x9af/0xbe0 [ 530.986693][ T1024] ? css_next_descendant_pre+0x11c/0x140 [ 530.992408][ T1024] mem_cgroup_out_of_memory+0x13e/0x190 [ 530.997974][ T1024] try_charge_memcg+0x51b/0x810 [ 531.002846][ T1024] obj_cgroup_charge_pages+0xbd/0x1a0 [ 531.008303][ T1024] __memcg_kmem_charge_page+0x9d/0x170 [ 531.013767][ T1024] __alloc_pages_noprof+0x1bc/0x340 [ 531.019016][ T1024] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 531.024491][ T1024] alloc_pages_noprof+0xe1/0x100 [ 531.029538][ T1024] io_pages_map+0x263/0x4e0 [ 531.034072][ T1024] io_allocate_scq_urings+0x10d/0x300 [ 531.039460][ T1024] io_uring_create+0x53f/0x940 [ 531.044315][ T1024] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 531.049818][ T1024] __x64_sys_io_uring_setup+0x31/0x40 [ 531.055268][ T1024] x64_sys_call+0x1f7e/0x2d60 [ 531.059961][ T1024] do_syscall_64+0xc9/0x1c0 [ 531.064520][ T1024] ? clear_bhb_loop+0x55/0xb0 [ 531.069200][ T1024] ? clear_bhb_loop+0x55/0xb0 [ 531.073908][ T1024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.079842][ T1024] RIP: 0033:0x7f555251e719 [ 531.084258][ T1024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.103887][ T1024] RSP: 002b:00007f5551154fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 531.112307][ T1024] RAX: ffffffffffffffda RBX: 00007f55526d6130 RCX: 00007f555251e719 [ 531.120285][ T1024] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000003667 [ 531.128266][ T1024] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000000000000 [ 531.136237][ T1024] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 531.144205][ T1024] R13: 0000000000000000 R14: 0000000000003667 R15: 0000000000000000 [ 531.152256][ T1024] [ 531.155395][ T1024] memory: usage 307200kB, limit 307200kB, failcnt 1105 [ 531.162237][ T1024] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 531.170212][ T1024] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 531.177504][ T1024] Memory cgroup stats for /syz5: [ 531.177818][ T1024] cache 0 [ 531.185692][ T1024] rss 28672 [ 531.188790][ T1024] shmem 0 [ 531.191721][ T1024] mapped_file 0 [ 531.195254][ T1024] dirty 0 [ 531.198430][ T1024] writeback 0 [ 531.201722][ T1024] workingset_refault_anon 207 [ 531.206416][ T1024] workingset_refault_file 398 [ 531.211146][ T1024] swap 188416 [ 531.214432][ T1024] swapcached 40960 [ 531.218188][ T1024] pgpgin 816591 [ 531.221698][ T1024] pgpgout 816581 [ 531.225258][ T1024] pgfault 911862 [ 531.228803][ T1024] pgmajfault 91 [ 531.232254][ T1024] inactive_anon 40960 [ 531.236286][ T1024] active_anon 0 [ 531.239734][ T1024] inactive_file 0 [ 531.243438][ T1024] active_file 0 [ 531.246903][ T1024] unevictable 0 [ 531.250454][ T1024] hierarchical_memory_limit 314572800 [ 531.255824][ T1024] hierarchical_memsw_limit 9223372036854771712 [ 531.261965][ T1024] total_cache 0 [ 531.265425][ T1024] total_rss 28672 [ 531.269050][ T1024] total_shmem 0 [ 531.272498][ T1024] total_mapped_file 0 [ 531.276484][ T1024] total_dirty 0 [ 531.279980][ T1024] total_writeback 0 [ 531.283774][ T1024] total_workingset_refault_anon 207 [ 531.288969][ T1024] total_workingset_refault_file 398 [ 531.294178][ T1024] total_swap 188416 [ 531.298112][ T1024] total_swapcached 40960 [ 531.302359][ T1024] total_pgpgin 816591 [ 531.306358][ T1024] total_pgpgout 816581 [ 531.310438][ T1024] total_pgfault 911862 [ 531.314615][ T1024] total_pgmajfault 91 [ 531.318588][ T1024] total_inactive_anon 40960 [ 531.323080][ T1024] total_active_anon 0 [ 531.327064][ T1024] total_inactive_file 0 [ 531.331212][ T1024] total_active_file 0 [ 531.335268][ T1024] total_unevictable 0 [ 531.339269][ T1024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.9842,pid=1021,uid=0 [ 531.353879][ T1024] Memory cgroup out of memory: Killed process 1021 (syz.5.9842) total-vm:91488kB, anon-rss:616kB, file-rss:18080kB, shmem-rss:128kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 531.377739][ T1043] syz.7.9851 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 531.388738][ T1043] CPU: 1 UID: 0 PID: 1043 Comm: syz.7.9851 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 531.399454][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 531.409554][ T1043] Call Trace: [ 531.412827][ T1043] [ 531.415772][ T1043] dump_stack_lvl+0xf2/0x150 [ 531.420426][ T1043] dump_stack+0x15/0x20 [ 531.424584][ T1043] dump_header+0x83/0x2d0 [ 531.428922][ T1043] oom_kill_process+0x341/0x4c0 [ 531.433824][ T1043] out_of_memory+0x9af/0xbe0 [ 531.438486][ T1043] ? css_next_descendant_pre+0x11c/0x140 [ 531.444140][ T1043] mem_cgroup_out_of_memory+0x13e/0x190 [ 531.449715][ T1043] try_charge_memcg+0x51b/0x810 [ 531.454646][ T1043] charge_memcg+0x50/0xc0 [ 531.459039][ T1043] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 531.465065][ T1043] __read_swap_cache_async+0x236/0x480 [ 531.470609][ T1043] swap_cluster_readahead+0x276/0x3f0 [ 531.476107][ T1043] swapin_readahead+0xe4/0x6f0 [ 531.480905][ T1043] ? __filemap_get_folio+0x420/0x5b0 [ 531.486326][ T1043] ? swap_cache_get_folio+0x77/0x210 [ 531.491673][ T1043] do_swap_page+0x31e/0x2550 [ 531.496269][ T1043] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 531.501739][ T1043] ? __rcu_read_lock+0x36/0x50 [ 531.506524][ T1043] ? __pfx_default_wake_function+0x10/0x10 [ 531.512363][ T1043] handle_mm_fault+0x8c5/0x2a80 [ 531.517286][ T1043] exc_page_fault+0x3b9/0x650 [ 531.522060][ T1043] asm_exc_page_fault+0x26/0x30 [ 531.526967][ T1043] RIP: 0033:0x7f9d42ae0808 [ 531.531386][ T1043] Code: 3c 24 48 89 4c 24 18 e8 c6 57 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 1f 58 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 531.551012][ T1043] RSP: 002b:00007ffd86e2deb0 EFLAGS: 00010293 [ 531.557083][ T1043] RAX: 0000000000000000 RBX: 00007f9d42c65f80 RCX: 00007f9d42ae0805 [ 531.565063][ T1043] RDX: 00007ffd86e2def0 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.573031][ T1043] RBP: 00007f9d42c67a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 531.581004][ T1043] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000081ba0 [ 531.588999][ T1043] R13: 00007ffd86e2e020 R14: 0000000000000032 R15: ffffffffffffffff [ 531.596989][ T1043] [ 531.600433][ T1043] memory: usage 307200kB, limit 307200kB, failcnt 490 [ 531.607426][ T1043] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 531.615452][ T1043] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 531.622747][ T1043] Memory cgroup stats for /syz7: [ 531.622951][ T1043] cache 0 [ 531.631021][ T1043] rss 0 [ 531.633779][ T1043] shmem 0 [ 531.636739][ T1043] mapped_file 0 [ 531.640223][ T1043] dirty 0 [ 531.643166][ T1043] writeback 0 [ 531.646564][ T1043] workingset_refault_anon 218 [ 531.651236][ T1043] workingset_refault_file 32 [ 531.655830][ T1043] swap 212992 [ 531.659194][ T1043] swapcached 12288 [ 531.662914][ T1043] pgpgin 355414 [ 531.666392][ T1043] pgpgout 355411 [ 531.670073][ T1043] pgfault 397503 [ 531.673678][ T1043] pgmajfault 76 [ 531.677153][ T1043] inactive_anon 12288 [ 531.681145][ T1043] active_anon 0 [ 531.684653][ T1043] inactive_file 0 [ 531.688281][ T1043] active_file 0 [ 531.691733][ T1043] unevictable 0 [ 531.695208][ T1043] hierarchical_memory_limit 314572800 [ 531.700627][ T1043] hierarchical_memsw_limit 9223372036854771712 [ 531.706781][ T1043] total_cache 0 [ 531.710228][ T1043] total_rss 0 [ 531.713514][ T1043] total_shmem 0 [ 531.716998][ T1043] total_mapped_file 0 [ 531.720998][ T1043] total_dirty 0 [ 531.724514][ T1043] total_writeback 0 [ 531.728343][ T1043] total_workingset_refault_anon 218 [ 531.733527][ T1043] total_workingset_refault_file 32 [ 531.738735][ T1043] total_swap 212992 [ 531.742564][ T1043] total_swapcached 12288 [ 531.746804][ T1043] total_pgpgin 355414 [ 531.750772][ T1043] total_pgpgout 355411 [ 531.754835][ T1043] total_pgfault 397503 [ 531.758891][ T1043] total_pgmajfault 76 [ 531.762872][ T1043] total_inactive_anon 12288 [ 531.767452][ T1043] total_active_anon 0 [ 531.771420][ T1043] total_inactive_file 0 [ 531.775592][ T1043] total_active_file 0 [ 531.779562][ T1043] total_unevictable 0 [ 531.783535][ T1043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.9851,pid=1043,uid=0 [ 531.798298][ T1043] Memory cgroup out of memory: Killed process 1043 (syz.7.9851) total-vm:91488kB, anon-rss:616kB, file-rss:18084kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 531.900013][T17302] bridge_slave_1: left allmulticast mode [ 531.905760][T17302] bridge_slave_1: left promiscuous mode [ 531.911409][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.922800][T17302] bridge_slave_0: left allmulticast mode [ 531.928550][T17302] bridge_slave_0: left promiscuous mode [ 531.934324][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.010532][ T1068] loop9: detected capacity change from 0 to 512 [ 532.048649][ T1068] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.063301][ T1068] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.076193][ T1068] Cannot find del_set index 0 as target [ 532.210522][T17302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.221774][T17302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.231709][T17302] bond0 (unregistering): Released all slaves [ 532.248523][ T3392] IPVS: starting estimator thread 0... [ 532.296099][T17302] tipc: Left network mode [ 532.327369][T17302] hsr_slave_0: left promiscuous mode [ 532.333538][T17302] hsr_slave_1: left promiscuous mode [ 532.340725][T17302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.348024][ T1077] IPVS: using max 2592 ests per chain, 129600 per kthread [ 532.356974][T17302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.465415][T17302] team0 (unregistering): Port device team_slave_1 removed [ 532.476263][T17302] team0 (unregistering): Port device team_slave_0 removed [ 532.515928][ T1061] vlan2: entered allmulticast mode [ 532.521695][ T1061] bond0: entered allmulticast mode [ 532.526867][ T1061] bond_slave_0: entered allmulticast mode [ 532.532591][ T1061] bond_slave_1: entered allmulticast mode [ 532.538963][ T1061] bond0: left allmulticast mode [ 532.543887][ T1061] bond_slave_0: left allmulticast mode [ 532.549426][ T1061] bond_slave_1: left allmulticast mode [ 532.605846][ T1079] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 532.665684][ T1084] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 532.677319][ T1085] Cannot find del_set index 0 as target [ 532.730015][ T1088] loop4: detected capacity change from 0 to 8192 [ 532.736667][ T1088] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 532.798439][T24385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.834616][ T1100] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 532.881839][ T1101] Cannot find del_set index 0 as target [ 532.944629][ T1116] vlan2: entered allmulticast mode [ 532.950521][ T1116] bond0: entered allmulticast mode [ 532.955781][ T1116] bond_slave_0: entered allmulticast mode [ 532.961546][ T1116] bond_slave_1: entered allmulticast mode [ 532.967996][ T1116] bond0: left allmulticast mode [ 532.972857][ T1116] bond_slave_0: left allmulticast mode [ 532.978354][ T1116] bond_slave_1: left allmulticast mode [ 533.110647][ T1150] loop7: detected capacity change from 0 to 256 [ 533.120356][ T1153] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 533.280218][ T1187] Cannot find del_set index 0 as target [ 533.303607][ T1191] vlan2: entered allmulticast mode [ 533.309561][ T1191] bond0: entered allmulticast mode [ 533.314751][ T1191] bond_slave_0: entered allmulticast mode [ 533.320600][ T1191] bond_slave_1: entered allmulticast mode [ 533.327182][ T1191] bond0: left allmulticast mode [ 533.332129][ T1191] bond_slave_0: left allmulticast mode [ 533.337696][ T1191] bond_slave_1: left allmulticast mode [ 533.506392][ T1220] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.547529][ T1220] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.610521][ T1220] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.716107][ T1220] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.979818][ T1220] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.991130][ T1220] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.002328][ T1220] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.013092][ T1220] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.017548][ T1275] loop4: detected capacity change from 0 to 512 [ 534.035381][ T1275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.048066][ T1275] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.060635][ T1275] Cannot find del_set index 0 as target [ 534.095134][ T1282] loop5: detected capacity change from 0 to 8192 [ 534.101611][ T1282] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 534.130610][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 534.130623][ T29] audit: type=1326 audit(1730359413.108:36294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.161526][ T29] audit: type=1326 audit(1730359413.108:36295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.185049][ T29] audit: type=1326 audit(1730359413.108:36296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.208610][ T29] audit: type=1326 audit(1730359413.108:36297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.232119][ T29] audit: type=1326 audit(1730359413.108:36298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.255676][ T29] audit: type=1326 audit(1730359413.108:36299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.279165][ T29] audit: type=1326 audit(1730359413.108:36300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.302641][ T29] audit: type=1326 audit(1730359413.108:36301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.302671][ T29] audit: type=1326 audit(1730359413.108:36302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1279 comm="syz.5.9893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 534.369607][ T1284] loop5: detected capacity change from 0 to 512 [ 534.387550][ T29] audit: type=1326 audit(1730359413.358:36303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1285 comm="syz.8.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 534.404503][ T1290] vlan2: entered allmulticast mode [ 534.417081][ T1290] bond0: entered allmulticast mode [ 534.422222][ T1290] bond_slave_0: entered allmulticast mode [ 534.427414][ T1284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.428008][ T1290] bond_slave_1: entered allmulticast mode [ 534.441498][ T1284] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.457483][ T1290] bond0: left allmulticast mode [ 534.462450][ T1290] bond_slave_0: left allmulticast mode [ 534.468013][ T1290] bond_slave_1: left allmulticast mode [ 534.509035][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.610757][ T1298] Cannot find del_set index 0 as target [ 534.728771][ T3391] IPVS: starting estimator thread 0... [ 534.752321][ T1303] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 534.824176][ T1301] IPVS: using max 2736 ests per chain, 136800 per kthread [ 534.835329][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.905526][ T1315] Cannot find del_set index 0 as target [ 535.440135][ T1370] syzkaller0: entered promiscuous mode [ 535.445711][ T1370] syzkaller0: entered allmulticast mode [ 535.696385][T17282] IPVS: stop unused estimator thread 0... [ 535.742583][ T1414] loop7: detected capacity change from 0 to 512 [ 535.768207][ T1414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.802409][ T1425] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9911'. [ 535.810997][ T1414] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.843433][ T1423] loop5: detected capacity change from 0 to 8192 [ 535.854272][ T1423] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 535.970078][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.061392][ T1442] syzkaller0: entered promiscuous mode [ 536.066946][ T1442] syzkaller0: entered allmulticast mode [ 536.078495][ T1447] FAULT_INJECTION: forcing a failure. [ 536.078495][ T1447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.091600][ T1447] CPU: 1 UID: 0 PID: 1447 Comm: syz.4.9923 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 536.102358][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 536.112412][ T1447] Call Trace: [ 536.115688][ T1447] [ 536.118619][ T1447] dump_stack_lvl+0xf2/0x150 [ 536.123282][ T1447] dump_stack+0x15/0x20 [ 536.127479][ T1447] should_fail_ex+0x223/0x230 [ 536.132191][ T1447] should_fail+0xb/0x10 [ 536.136563][ T1447] should_fail_usercopy+0x1a/0x20 [ 536.141621][ T1447] _copy_from_user+0x20/0xe0 [ 536.146242][ T1447] __sys_bpf+0x14e/0x7a0 [ 536.150567][ T1447] __x64_sys_bpf+0x43/0x50 [ 536.155004][ T1447] x64_sys_call+0x2625/0x2d60 [ 536.159782][ T1447] do_syscall_64+0xc9/0x1c0 [ 536.164398][ T1447] ? clear_bhb_loop+0x55/0xb0 [ 536.169159][ T1447] ? clear_bhb_loop+0x55/0xb0 [ 536.173844][ T1447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.179809][ T1447] RIP: 0033:0x7fcc9023e719 [ 536.184265][ T1447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.203913][ T1447] RSP: 002b:00007fcc8eeb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.212329][ T1447] RAX: ffffffffffffffda RBX: 00007fcc903f5f80 RCX: 00007fcc9023e719 [ 536.220317][ T1447] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000022 [ 536.228386][ T1447] RBP: 00007fcc8eeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 536.236379][ T1447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.244432][ T1447] R13: 0000000000000000 R14: 00007fcc903f5f80 R15: 00007ffc653c0da8 [ 536.252420][ T1447] [ 536.307257][ T1455] loop4: detected capacity change from 0 to 512 [ 536.363087][ T1458] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9928'. [ 536.436022][ T1455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.454317][ T1455] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.650764][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.128869][ T3391] IPVS: starting estimator thread 0... [ 537.274366][ T1486] FAULT_INJECTION: forcing a failure. [ 537.274366][ T1486] name failslab, interval 1, probability 0, space 0, times 0 [ 537.287091][ T1486] CPU: 0 UID: 0 PID: 1486 Comm: syz.8.9937 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 537.294259][ T1480] IPVS: using max 2544 ests per chain, 127200 per kthread [ 537.297781][ T1486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 537.310990][ T1479] loop4: detected capacity change from 0 to 8192 [ 537.314919][ T1486] Call Trace: [ 537.314929][ T1486] [ 537.314938][ T1486] dump_stack_lvl+0xf2/0x150 [ 537.322995][ T1479] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 537.324528][ T1486] dump_stack+0x15/0x20 [ 537.343103][ T1486] should_fail_ex+0x223/0x230 [ 537.347867][ T1486] ? getname_flags+0x81/0x3b0 [ 537.352572][ T1486] should_failslab+0x8f/0xb0 [ 537.357206][ T1486] kmem_cache_alloc_noprof+0x4c/0x290 [ 537.362710][ T1486] ? __fget_files+0x1d4/0x210 [ 537.367496][ T1486] getname_flags+0x81/0x3b0 [ 537.372010][ T1486] user_path_at+0x26/0x110 [ 537.376578][ T1486] do_sys_truncate+0x5b/0x130 [ 537.381386][ T1486] __x64_sys_truncate+0x31/0x40 [ 537.386274][ T1486] x64_sys_call+0x262f/0x2d60 [ 537.391049][ T1486] do_syscall_64+0xc9/0x1c0 [ 537.395558][ T1486] ? clear_bhb_loop+0x55/0xb0 [ 537.400247][ T1486] ? clear_bhb_loop+0x55/0xb0 [ 537.404931][ T1486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.410872][ T1486] RIP: 0033:0x7f875cf0e719 [ 537.415326][ T1486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.434940][ T1486] RSP: 002b:00007f875bb81038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 537.443419][ T1486] RAX: ffffffffffffffda RBX: 00007f875d0c5f80 RCX: 00007f875cf0e719 [ 537.451384][ T1486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 537.459392][ T1486] RBP: 00007f875bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 537.467388][ T1486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.475354][ T1486] R13: 0000000000000000 R14: 00007f875d0c5f80 R15: 00007ffe253ba758 [ 537.483324][ T1486] [ 537.526400][ T1494] loop7: detected capacity change from 0 to 512 [ 537.540123][ T1494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.552778][ T1494] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.568207][ T1500] vlan2: entered allmulticast mode [ 537.568609][ T1500] bond0: entered allmulticast mode [ 537.568629][ T1500] bond_slave_0: entered allmulticast mode [ 537.568708][ T1500] bond_slave_1: entered allmulticast mode [ 537.569202][ T1500] bond0: left allmulticast mode [ 537.569221][ T1500] bond_slave_0: left allmulticast mode [ 537.569238][ T1500] bond_slave_1: left allmulticast mode [ 537.645128][ T1492] syzkaller0: entered promiscuous mode [ 537.650606][ T1492] syzkaller0: entered allmulticast mode [ 537.663180][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.703349][ T1511] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.764749][ T1526] loop5: detected capacity change from 0 to 2048 [ 537.777108][ T1526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.808329][ T1511] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.857327][ T1526] vhci_hcd: invalid port number 0 [ 537.859413][ T1538] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 537.884606][T17282] IPVS: stop unused estimator thread 0... [ 537.897590][ T1511] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.909889][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.999487][ T1570] vlan2: entered allmulticast mode [ 538.007204][ T1570] bond0: entered allmulticast mode [ 538.012516][ T1570] bond_slave_0: entered allmulticast mode [ 538.018427][ T1570] bond_slave_1: entered allmulticast mode [ 538.034483][ T1570] bond0: left allmulticast mode [ 538.039413][ T1570] bond_slave_0: left allmulticast mode [ 538.044904][ T1570] bond_slave_1: left allmulticast mode [ 538.134110][ T1511] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.144392][ T3391] IPVS: starting estimator thread 0... [ 538.264378][ T1578] IPVS: using max 2736 ests per chain, 136800 per kthread [ 538.303616][ T1511] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.337813][ T1511] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.397885][ T1511] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.425391][ T1511] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.456705][ T1598] vlan2: entered allmulticast mode [ 538.462495][ T1598] bond0: entered allmulticast mode [ 538.467730][ T1598] bond_slave_0: entered allmulticast mode [ 538.473480][ T1598] bond_slave_1: entered allmulticast mode [ 538.479853][ T1598] bond0: left allmulticast mode [ 538.484868][ T1598] bond_slave_0: left allmulticast mode [ 538.490364][ T1598] bond_slave_1: left allmulticast mode [ 538.529380][ T1607] syzkaller0: entered promiscuous mode [ 538.535160][ T1607] syzkaller0: entered allmulticast mode [ 538.854158][ T1660] loop4: detected capacity change from 0 to 256 [ 538.921240][ T1687] loop4: detected capacity change from 0 to 256 [ 538.968693][ T1695] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 538.996717][ T1699] vlan2: entered allmulticast mode [ 539.002524][ T1699] bond0: entered allmulticast mode [ 539.007771][ T1699] bond_slave_0: entered allmulticast mode [ 539.013513][ T1699] bond_slave_1: entered allmulticast mode [ 539.020071][ T1699] bond0: left allmulticast mode [ 539.025043][ T1699] bond_slave_0: left allmulticast mode [ 539.030587][ T1699] bond_slave_1: left allmulticast mode [ 539.132960][ T1704] syzkaller0: entered promiscuous mode [ 539.138516][ T1704] syzkaller0: entered allmulticast mode [ 539.185972][ T1709] loop5: detected capacity change from 0 to 512 [ 539.193213][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 539.193236][ T29] audit: type=1400 audit(1730359418.168:36592): avc: denied { relabelfrom } for pid=1696 comm="syz.8.9974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 539.230285][ T29] audit: type=1400 audit(1730359418.168:36593): avc: denied { relabelto } for pid=1696 comm="syz.8.9974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 539.268984][ T1709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.282764][ T1709] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.467079][ T29] audit: type=1400 audit(1730359418.448:36594): avc: denied { execute_no_trans } for pid=1719 comm="syz.4.9980" path="/199/file0" dev="tmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 539.504219][ T29] audit: type=1326 audit(1730359418.478:36595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.9.9982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 539.507556][ T1727] loop9: detected capacity change from 0 to 256 [ 539.527843][ T29] audit: type=1326 audit(1730359418.478:36596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.9.9982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 539.527906][ T29] audit: type=1326 audit(1730359418.478:36597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.9.9982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 539.581219][ T29] audit: type=1326 audit(1730359418.478:36598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.9.9982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 539.604750][ T29] audit: type=1326 audit(1730359418.478:36599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.9.9982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a6e52d1ff code=0x7ffc0000 [ 539.628259][ T29] audit: type=1326 audit(1730359418.478:36600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.9.9982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 539.651826][ T29] audit: type=1326 audit(1730359418.478:36601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.9.9982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 539.784249][ T1735] FAULT_INJECTION: forcing a failure. [ 539.784249][ T1735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.797375][ T1735] CPU: 0 UID: 0 PID: 1735 Comm: syz.4.9985 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 539.808069][ T1735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 539.818134][ T1735] Call Trace: [ 539.821421][ T1735] [ 539.824361][ T1735] dump_stack_lvl+0xf2/0x150 [ 539.828990][ T1735] dump_stack+0x15/0x20 [ 539.833346][ T1735] should_fail_ex+0x223/0x230 [ 539.838096][ T1735] should_fail+0xb/0x10 [ 539.842279][ T1735] should_fail_usercopy+0x1a/0x20 [ 539.847328][ T1735] _copy_from_user+0x20/0xe0 [ 539.851948][ T1735] copy_msghdr_from_user+0x54/0x2a0 [ 539.857173][ T1735] __sys_sendmsg+0x171/0x270 [ 539.861808][ T1735] __x64_sys_sendmsg+0x46/0x50 [ 539.866634][ T1735] x64_sys_call+0x2689/0x2d60 [ 539.871379][ T1735] do_syscall_64+0xc9/0x1c0 [ 539.875894][ T1735] ? clear_bhb_loop+0x55/0xb0 [ 539.880668][ T1735] ? clear_bhb_loop+0x55/0xb0 [ 539.885358][ T1735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.891295][ T1735] RIP: 0033:0x7fcc9023e719 [ 539.895774][ T1735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.915440][ T1735] RSP: 002b:00007fcc8eeb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.923905][ T1735] RAX: ffffffffffffffda RBX: 00007fcc903f5f80 RCX: 00007fcc9023e719 [ 539.931957][ T1735] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 539.939986][ T1735] RBP: 00007fcc8eeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 539.947958][ T1735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.955988][ T1735] R13: 0000000000000000 R14: 00007fcc903f5f80 R15: 00007ffc653c0da8 [ 539.963971][ T1735] [ 539.990316][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.004010][ T1738] vlan2: entered allmulticast mode [ 540.004460][ T1742] loop7: detected capacity change from 0 to 256 [ 540.009867][ T1738] bond0: entered allmulticast mode [ 540.020581][ T1738] bond_slave_0: entered allmulticast mode [ 540.026446][ T1738] bond_slave_1: entered allmulticast mode [ 540.040133][ T1738] bond0: left allmulticast mode [ 540.045034][ T1738] bond_slave_0: left allmulticast mode [ 540.050500][ T1738] bond_slave_1: left allmulticast mode [ 540.057123][ T1745] Cannot find del_set index 0 as target [ 540.106711][ T1748] loop8: detected capacity change from 0 to 512 [ 540.145505][ T1748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.162864][ T1748] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.194207][T23920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.217952][ T1759] loop8: detected capacity change from 0 to 256 [ 540.242365][ T1757] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9994'. [ 540.440147][ T1769] FAULT_INJECTION: forcing a failure. [ 540.440147][ T1769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.453378][ T1769] CPU: 1 UID: 0 PID: 1769 Comm: syz.8.9997 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 540.464147][ T1769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.474227][ T1769] Call Trace: [ 540.477506][ T1769] [ 540.480444][ T1769] dump_stack_lvl+0xf2/0x150 [ 540.485061][ T1769] dump_stack+0x15/0x20 [ 540.489224][ T1769] should_fail_ex+0x223/0x230 [ 540.493923][ T1769] should_fail+0xb/0x10 [ 540.498085][ T1769] should_fail_usercopy+0x1a/0x20 [ 540.503180][ T1769] _copy_from_user+0x20/0xe0 [ 540.507837][ T1769] get_timespec64+0x49/0x140 [ 540.512443][ T1769] __x64_sys_recvmmsg+0xa1/0x170 [ 540.517448][ T1769] x64_sys_call+0x26e3/0x2d60 [ 540.522270][ T1769] do_syscall_64+0xc9/0x1c0 [ 540.526802][ T1769] ? clear_bhb_loop+0x55/0xb0 [ 540.531514][ T1769] ? clear_bhb_loop+0x55/0xb0 [ 540.536274][ T1769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.542292][ T1769] RIP: 0033:0x7f875cf0e719 [ 540.546712][ T1769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.566342][ T1769] RSP: 002b:00007f875bb81038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 540.574746][ T1769] RAX: ffffffffffffffda RBX: 00007f875d0c5f80 RCX: 00007f875cf0e719 [ 540.582770][ T1769] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 540.590736][ T1769] RBP: 00007f875bb81090 R08: 0000000020003700 R09: 0000000000000000 [ 540.598756][ T1769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.606769][ T1769] R13: 0000000000000000 R14: 00007f875d0c5f80 R15: 00007ffe253ba758 [ 540.614738][ T1769] [ 540.787379][ T1778] FAULT_INJECTION: forcing a failure. [ 540.787379][ T1778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.800485][ T1778] CPU: 0 UID: 0 PID: 1778 Comm: syz.8.10001 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 540.811453][ T1778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.821683][ T1778] Call Trace: [ 540.824952][ T1778] [ 540.827877][ T1778] dump_stack_lvl+0xf2/0x150 [ 540.832460][ T1778] dump_stack+0x15/0x20 [ 540.836748][ T1778] should_fail_ex+0x223/0x230 [ 540.841435][ T1778] should_fail+0xb/0x10 [ 540.845700][ T1778] should_fail_usercopy+0x1a/0x20 [ 540.850811][ T1778] strncpy_from_user+0x25/0x210 [ 540.855704][ T1778] ? terminate_walk+0x260/0x280 [ 540.860550][ T1778] strncpy_from_user_nofault+0x66/0xe0 [ 540.866045][ T1778] bpf_probe_read_user_str+0x2a/0x70 [ 540.871369][ T1778] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 540.876814][ T1778] bpf_trace_run3+0x10c/0x1d0 [ 540.881498][ T1778] __bpf_trace_workqueue_queue_work+0x2a/0x40 [ 540.887555][ T1778] __queue_work+0xa1d/0xb40 [ 540.892153][ T1778] queue_work_on+0xd3/0x180 [ 540.896640][ T1778] bpf_map_put+0x1da/0x200 [ 540.901079][ T1778] bpf_map_release+0xc4/0xe0 [ 540.905676][ T1778] ? __pfx_bpf_map_release+0x10/0x10 [ 540.910966][ T1778] __fput+0x17a/0x6d0 [ 540.914943][ T1778] ? dnotify_flush+0x163/0x370 [ 540.919791][ T1778] __fput_sync+0x43/0x60 [ 540.924026][ T1778] __se_sys_close+0xf9/0x1a0 [ 540.928690][ T1778] __x64_sys_close+0x1f/0x30 [ 540.933274][ T1778] x64_sys_call+0x25cb/0x2d60 [ 540.937941][ T1778] do_syscall_64+0xc9/0x1c0 [ 540.942494][ T1778] ? clear_bhb_loop+0x55/0xb0 [ 540.947160][ T1778] ? clear_bhb_loop+0x55/0xb0 [ 540.951843][ T1778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.957751][ T1778] RIP: 0033:0x7f875cf0e719 [ 540.962199][ T1778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.981796][ T1778] RSP: 002b:00007f875bb81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 540.990251][ T1778] RAX: ffffffffffffffda RBX: 00007f875d0c5f80 RCX: 00007f875cf0e719 [ 540.998237][ T1778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 541.006205][ T1778] RBP: 00007f875bb81090 R08: 0000000000000000 R09: 0000000000000000 [ 541.014243][ T1778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.022210][ T1778] R13: 0000000000000000 R14: 00007f875d0c5f80 R15: 00007ffe253ba758 [ 541.030261][ T1778] [ 541.098754][ T1784] loop8: detected capacity change from 0 to 512 [ 541.107734][ T1782] loop7: detected capacity change from 0 to 256 [ 541.165317][ T1786] loop5: detected capacity change from 0 to 2048 [ 541.195827][ T1786] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.213829][ T1784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.230404][ T1784] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.242225][ T1786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.245165][ T1790] loop7: detected capacity change from 0 to 8192 [ 541.262276][ T1790] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 541.357454][ T24] IPVS: starting estimator thread 0... [ 541.406865][T23920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.444467][ T1800] IPVS: using max 2736 ests per chain, 136800 per kthread [ 541.746564][ T1786] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10005: bg 0: block 234: padding at end of block bitmap is not set [ 541.761921][ T1786] EXT4-fs (loop5): Remounting filesystem read-only [ 541.848972][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.863854][ T1810] loop7: detected capacity change from 0 to 8192 [ 541.885426][ T1810] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 542.221204][T17258] IPVS: stop unused estimator thread 0... [ 542.238960][ T1825] vlan2: entered allmulticast mode [ 542.260996][ T1825] bond0: entered allmulticast mode [ 542.266179][ T1825] bond_slave_0: entered allmulticast mode [ 542.269597][ T1827] loop7: detected capacity change from 0 to 256 [ 542.271892][ T1825] bond_slave_1: entered allmulticast mode [ 542.272003][T10401] IPVS: starting estimator thread 0... [ 542.290273][ T1825] bond0: left allmulticast mode [ 542.295180][ T1825] bond_slave_0: left allmulticast mode [ 542.300673][ T1825] bond_slave_1: left allmulticast mode [ 542.336171][ T1832] loop7: detected capacity change from 0 to 512 [ 542.342893][ T1832] EXT4-fs (loop7): Invalid default hash set in the superblock [ 542.352685][ T1829] loop9: detected capacity change from 0 to 8192 [ 542.359354][ T1829] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 542.397744][ T1830] IPVS: using max 2544 ests per chain, 127200 per kthread [ 542.428174][ T1834] loop4: detected capacity change from 0 to 2048 [ 542.436913][ T1834] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 542.480049][ T1844] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.536846][ T1844] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.556516][ T1847] FAULT_INJECTION: forcing a failure. [ 542.556516][ T1847] name failslab, interval 1, probability 0, space 0, times 0 [ 542.569265][ T1847] CPU: 1 UID: 0 PID: 1847 Comm: syz.7.10020 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 542.580070][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 542.590129][ T1847] Call Trace: [ 542.593412][ T1847] [ 542.596344][ T1847] dump_stack_lvl+0xf2/0x150 [ 542.601058][ T1847] dump_stack+0x15/0x20 [ 542.605269][ T1847] should_fail_ex+0x223/0x230 [ 542.610042][ T1847] ? __se_sys_memfd_create+0x230/0x5c0 [ 542.615531][ T1847] should_failslab+0x8f/0xb0 [ 542.620146][ T1847] __kmalloc_noprof+0xa5/0x370 [ 542.624934][ T1847] __se_sys_memfd_create+0x230/0x5c0 [ 542.630244][ T1847] __x64_sys_memfd_create+0x31/0x40 [ 542.635469][ T1847] x64_sys_call+0x2891/0x2d60 [ 542.640176][ T1847] do_syscall_64+0xc9/0x1c0 [ 542.644701][ T1847] ? clear_bhb_loop+0x55/0xb0 [ 542.649482][ T1847] ? clear_bhb_loop+0x55/0xb0 [ 542.654175][ T1847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.660099][ T1847] RIP: 0033:0x7f9d42aae719 [ 542.664521][ T1847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.684181][ T1847] RSP: 002b:00007f9d416dee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 542.692703][ T1847] RAX: ffffffffffffffda RBX: 00000000000001bf RCX: 00007f9d42aae719 [ 542.700690][ T1847] RDX: 00007f9d416deef0 RSI: 0000000000000000 RDI: 00007f9d42b21b9a [ 542.708676][ T1847] RBP: 0000000020000940 R08: 00007f9d416debb7 R09: 00007f9d416dee40 [ 542.716704][ T1847] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0 [ 542.724692][ T1847] R13: 00007f9d416deef0 R14: 00007f9d416deeb0 R15: 00000000200005c0 [ 542.732748][ T1847] [ 542.766711][ T1844] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.836424][ T1844] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.900552][ T9] IPVS: starting estimator thread 0... [ 542.988949][ T1844] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.997371][ T1852] IPVS: using max 2736 ests per chain, 136800 per kthread [ 543.085383][ T1844] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.143258][ T1844] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.154750][T17280] IPVS: stop unused estimator thread 0... [ 543.186883][ T1844] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.218144][ T1860] loop5: detected capacity change from 0 to 256 [ 543.227797][ T1862] loop8: detected capacity change from 0 to 8192 [ 543.234356][ T1862] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 543.268146][ T1863] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 543.290412][ T1867] vlan2: entered allmulticast mode [ 543.299754][ T1867] bond0: entered allmulticast mode [ 543.304935][ T1867] bond_slave_0: entered allmulticast mode [ 543.310778][ T1867] bond_slave_1: entered allmulticast mode [ 543.318171][ T1867] bond0: left allmulticast mode [ 543.323030][ T1867] bond_slave_0: left allmulticast mode [ 543.328547][ T1867] bond_slave_1: left allmulticast mode [ 543.377712][ T1870] loop8: detected capacity change from 0 to 512 [ 543.406158][ T1869] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 543.436517][ T1870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.453665][ T1870] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.472340][ T1870] Cannot find del_set index 0 as target [ 543.721368][T17248] IPVS: stop unused estimator thread 0... [ 543.735574][ T3392] IPVS: starting estimator thread 0... [ 543.824824][ T1905] IPVS: using max 2304 ests per chain, 115200 per kthread [ 544.111092][T23920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.396362][ T1976] syzkaller0: entered promiscuous mode [ 544.401900][ T1976] syzkaller0: entered allmulticast mode [ 544.520554][T17248] IPVS: stop unused estimator thread 0... [ 545.048647][ T2032] loop8: detected capacity change from 0 to 256 [ 545.049379][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 545.049396][ T29] audit: type=1326 audit(1730359424.008:36985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.084771][ T29] audit: type=1326 audit(1730359424.008:36986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.084802][ T29] audit: type=1326 audit(1730359424.008:36987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.084874][ T29] audit: type=1326 audit(1730359424.008:36988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.084920][ T29] audit: type=1326 audit(1730359424.018:36989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f875cf0d1ff code=0x7ffc0000 [ 545.084971][ T29] audit: type=1326 audit(1730359424.018:36990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.085002][ T29] audit: type=1326 audit(1730359424.018:36991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.085049][ T29] audit: type=1326 audit(1730359424.018:36992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.085078][ T29] audit: type=1326 audit(1730359424.018:36993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.085107][ T29] audit: type=1326 audit(1730359424.018:36994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.8.10049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 545.086868][ T24] IPVS: starting estimator thread 0... [ 545.181906][ T2034] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 545.219494][ T2035] syzkaller0: entered promiscuous mode [ 545.319244][ T2035] syzkaller0: entered allmulticast mode [ 545.324221][ T2033] IPVS: using max 2352 ests per chain, 117600 per kthread [ 545.565229][ T2054] vlan2: entered allmulticast mode [ 545.570962][ T2054] bond0: entered allmulticast mode [ 545.572643][ T2055] Cannot find del_set index 0 as target [ 545.576146][ T2054] bond_slave_0: entered allmulticast mode [ 545.587519][ T2054] bond_slave_1: entered allmulticast mode [ 545.604971][ T2054] bond0: left allmulticast mode [ 545.609866][ T2054] bond_slave_0: left allmulticast mode [ 545.615417][ T2054] bond_slave_1: left allmulticast mode [ 545.648436][ T2052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 545.671235][ T2050] loop4: detected capacity change from 0 to 8192 [ 545.703693][T17267] IPVS: stop unused estimator thread 0... [ 545.710389][ T2050] loop4: p1 p2 p3 [ 545.761331][ T2073] netlink: 76 bytes leftover after parsing attributes in process `syz.8.10059'. [ 545.817559][ T2077] loop8: detected capacity change from 0 to 256 [ 545.930500][ T2096] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.045579][ T2096] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.105815][ T2096] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.223291][ T3392] IPVS: starting estimator thread 0... [ 546.296953][ T2096] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.334339][ T2123] IPVS: using max 2400 ests per chain, 120000 per kthread [ 546.365009][ T2096] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.523180][ T2096] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.534413][ T2096] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.545967][ T2096] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.636242][ T2116] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10068'. [ 546.679378][ T2175] FAULT_INJECTION: forcing a failure. [ 546.679378][ T2175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.692598][ T2175] CPU: 1 UID: 0 PID: 2175 Comm: syz.7.10073 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 546.703429][ T2175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 546.713492][ T2175] Call Trace: [ 546.716777][ T2175] [ 546.719734][ T2175] dump_stack_lvl+0xf2/0x150 [ 546.724350][ T2175] dump_stack+0x15/0x20 [ 546.728579][ T2175] should_fail_ex+0x223/0x230 [ 546.733293][ T2175] should_fail+0xb/0x10 [ 546.737492][ T2175] should_fail_usercopy+0x1a/0x20 [ 546.742512][ T2175] _copy_from_iter+0xd5/0xd00 [ 546.747183][ T2175] ? selinux_file_open+0x34a/0x3b0 [ 546.752320][ T2175] ? __virt_addr_valid+0x1ed/0x250 [ 546.757780][ T2175] ? __check_object_size+0x364/0x520 [ 546.763074][ T2175] skb_copy_datagram_from_iter+0xb3/0x460 [ 546.768804][ T2175] tun_get_user+0xb7c/0x24e0 [ 546.773434][ T2175] ? _parse_integer+0x27/0x30 [ 546.778170][ T2175] ? ref_tracker_alloc+0x1f5/0x2f0 [ 546.783297][ T2175] tun_chr_write_iter+0x188/0x240 [ 546.788326][ T2175] vfs_write+0x77f/0x920 [ 546.792582][ T2175] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 546.798225][ T2175] ksys_write+0xeb/0x1b0 [ 546.802561][ T2175] __x64_sys_write+0x42/0x50 [ 546.807205][ T2175] x64_sys_call+0x27dd/0x2d60 [ 546.811899][ T2175] do_syscall_64+0xc9/0x1c0 [ 546.816448][ T2175] ? clear_bhb_loop+0x55/0xb0 [ 546.821129][ T2175] ? clear_bhb_loop+0x55/0xb0 [ 546.825836][ T2175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.831940][ T2175] RIP: 0033:0x7f9d42aae719 [ 546.836357][ T2175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.855981][ T2175] RSP: 002b:00007f9d41721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.864403][ T2175] RAX: ffffffffffffffda RBX: 00007f9d42c65f80 RCX: 00007f9d42aae719 [ 546.872378][ T2175] RDX: 0000000000000280 RSI: 0000000000000000 RDI: 0000000000000003 [ 546.880378][ T2175] RBP: 00007f9d41721090 R08: 0000000000000000 R09: 0000000000000000 [ 546.888341][ T2175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.896318][ T2175] R13: 0000000000000000 R14: 00007f9d42c65f80 R15: 00007ffd86e2ddb8 [ 546.904292][ T2175] [ 547.246578][ T3391] IPVS: starting estimator thread 0... [ 547.268292][ T2201] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 547.328872][ T2211] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 547.336232][ T2206] IPVS: using max 2736 ests per chain, 136800 per kthread [ 547.351107][ T2210] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 547.391828][ T2213] IPv6: sit2: Disabled Multicast RS [ 547.423410][ T2219] loop7: detected capacity change from 0 to 512 [ 547.466842][ T2219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.510911][ T2219] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.677223][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.698418][ T2237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10093'. [ 547.808805][T17282] IPVS: stop unused estimator thread 0... [ 547.915616][ T2260] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.957226][ T2265] loop5: detected capacity change from 0 to 512 [ 547.957474][ T2258] loop4: detected capacity change from 0 to 8192 [ 547.977599][ T2265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.984522][ T2258] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 547.994188][ T2265] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.021716][ T2260] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.157825][ T2260] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.177880][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.397702][ T2260] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.418877][ T2278] loop4: detected capacity change from 0 to 512 [ 548.456614][ T2278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.483126][ T2278] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.511969][ T2260] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.543099][ T2260] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.555745][ T2260] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.567013][ T2260] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.588202][ T2283] loop5: detected capacity change from 0 to 2048 [ 548.594863][ T2283] EXT4-fs: Ignoring removed mblk_io_submit option [ 548.617364][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.628333][ T2283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.722824][ T2293] loop4: detected capacity change from 0 to 256 [ 548.768004][ T2293] IPVS: stopping master sync thread 1695 ... [ 548.772888][ T2295] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10115'. [ 549.026494][ T2283] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10108: bg 0: block 234: padding at end of block bitmap is not set [ 549.071375][ T2283] EXT4-fs (loop5): Remounting filesystem read-only [ 549.080050][ T2301] loop8: detected capacity change from 0 to 8192 [ 549.094340][ T2301] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 549.128803][ T2296] EXT4-fs (loop5): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 549.156432][ T2304] loop8: detected capacity change from 0 to 512 [ 549.171301][ T2304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.193245][ T2304] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.270605][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.299263][ T2310] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 549.307236][T23920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.332721][ T2312] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 549.530348][ T2348] syzkaller0: entered promiscuous mode [ 549.535941][ T2348] syzkaller0: entered allmulticast mode [ 549.557989][ T2306] loop4: detected capacity change from 0 to 1024 [ 549.565563][ T2306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 549.572291][ T2306] ext4: Unknown parameter 'fsmagic' [ 549.809340][ T3391] IPVS: starting estimator thread 0... [ 549.904523][ T2362] IPVS: using max 2736 ests per chain, 136800 per kthread [ 549.925273][ T2367] loop7: detected capacity change from 0 to 2048 [ 549.937018][ T2360] loop9: detected capacity change from 0 to 8192 [ 549.965459][ T2367] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.977731][ T2367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.993678][ T2360] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 550.054172][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 550.054188][ T29] audit: type=1326 audit(1730359429.018:37289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 550.084280][ T29] audit: type=1326 audit(1730359429.018:37290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 550.108130][ T29] audit: type=1326 audit(1730359429.018:37291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 550.112550][ T2383] loop9: detected capacity change from 0 to 512 [ 550.131702][ T29] audit: type=1326 audit(1730359429.018:37292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 550.131736][ T29] audit: type=1326 audit(1730359429.018:37293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 550.185107][ T29] audit: type=1326 audit(1730359429.018:37294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.9.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6e52e719 code=0x7ffc0000 [ 550.221286][ T2387] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 550.235820][ T2383] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.249738][ T2383] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.416321][ T2436] loop8: detected capacity change from 0 to 256 [ 550.423819][ T29] audit: type=1326 audit(1730359429.388:37295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2435 comm="syz.8.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 550.447622][ T29] audit: type=1326 audit(1730359429.388:37296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2435 comm="syz.8.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 550.471262][ T29] audit: type=1326 audit(1730359429.388:37297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2435 comm="syz.8.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 550.477584][ T2367] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10130: bg 0: block 234: padding at end of block bitmap is not set [ 550.494816][ T29] audit: type=1326 audit(1730359429.388:37298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2435 comm="syz.8.10133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f875cf0e719 code=0x7ffc0000 [ 550.521041][ T2436] IPVS: stopping master sync thread 2034 ... [ 550.540186][ T2367] EXT4-fs (loop7): Remounting filesystem read-only [ 550.558647][ T2379] EXT4-fs (loop7): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 550.615509][T24385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.722631][ T2452] loop8: detected capacity change from 0 to 8192 [ 550.730876][ T2452] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 550.735409][ T2454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10139'. [ 550.747992][T17256] IPVS: stop unused estimator thread 0... [ 550.821605][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.921799][ T2463] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.955942][ T2465] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 550.989880][ T2463] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.020827][ T2468] loop4: detected capacity change from 0 to 512 [ 551.046230][ T2468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.065618][ T2468] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.078249][ T2463] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.103174][ T2476] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 551.122328][ T2463] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.161421][ T2478] loop7: detected capacity change from 0 to 2048 [ 551.169401][ T2478] EXT4-fs: Ignoring removed mblk_io_submit option [ 551.210425][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.221557][ T2463] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.232971][ T2463] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.246491][ T2463] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.258122][ T2463] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.275066][ T2478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.320730][ T2495] loop4: detected capacity change from 0 to 256 [ 551.531351][ T2523] loop4: detected capacity change from 0 to 8192 [ 551.537953][ T2523] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 551.693315][ T2526] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10156'. [ 552.234491][ T2590] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 552.244460][ T2478] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10148: bg 0: block 234: padding at end of block bitmap is not set [ 552.263614][ T2478] EXT4-fs (loop7): Remounting filesystem read-only [ 552.283295][ T2506] EXT4-fs (loop7): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 552.283874][ T2561] syzkaller0: entered promiscuous mode [ 552.299207][ T2561] syzkaller0: entered allmulticast mode [ 552.377007][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.491556][ T2604] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.555849][ T2604] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.668290][ T2604] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.854169][ T2604] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.956653][ T2604] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.970647][ T2604] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.051107][ T2604] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.167299][ T2604] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.275358][ T2684] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 553.372460][ T2694] loop7: detected capacity change from 0 to 2048 [ 553.394719][ T2694] EXT4-fs: Ignoring removed mblk_io_submit option [ 553.402694][ T2687] loop9: detected capacity change from 0 to 8192 [ 553.412660][ T2692] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10169'. [ 553.421900][ T2687] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000009' [ 553.484997][ T2694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.570156][ T2701] syzkaller0: entered promiscuous mode [ 553.575679][ T2701] syzkaller0: entered allmulticast mode [ 553.660888][ T2705] Cannot find del_set index 0 as target [ 553.732256][ T2694] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10170: bg 0: block 234: padding at end of block bitmap is not set [ 553.748089][ T2694] EXT4-fs (loop7): Remounting filesystem read-only [ 553.835464][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.085400][ T3393] IPVS: starting estimator thread 0... [ 554.174311][ T2719] IPVS: using max 2736 ests per chain, 136800 per kthread [ 554.453786][ T2729] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10183'. [ 554.604157][ T1031] IPVS: starting estimator thread 0... [ 554.772004][ T2733] IPVS: using max 2592 ests per chain, 129600 per kthread [ 554.811446][ T2740] loop7: detected capacity change from 0 to 256 [ 554.850372][ T2742] loop7: detected capacity change from 0 to 2048 [ 554.858075][ T2742] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.876363][ T2742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.916608][T17265] IPVS: stop unused estimator thread 0... [ 555.095826][ T2742] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10187: bg 0: block 234: padding at end of block bitmap is not set [ 555.110557][ T2742] EXT4-fs (loop7): Remounting filesystem read-only [ 555.166869][ T2745] EXT4-fs (loop7): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 555.187772][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 555.187822][ T29] audit: type=1326 audit(1730359434.168:37449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.4.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9023e719 code=0x7ffc0000 [ 555.220340][ T29] audit: type=1326 audit(1730359434.168:37450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.4.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc9023e719 code=0x7ffc0000 [ 555.243931][ T29] audit: type=1326 audit(1730359434.168:37451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.4.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9023e719 code=0x7ffc0000 [ 555.267680][ T29] audit: type=1326 audit(1730359434.168:37452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.4.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc9023e719 code=0x7ffc0000 [ 555.291332][ T29] audit: type=1326 audit(1730359434.168:37453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.4.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9023e719 code=0x7ffc0000 [ 555.314988][ T29] audit: type=1326 audit(1730359434.168:37454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2746 comm="syz.4.10188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9023e719 code=0x7ffc0000 [ 555.395987][ T2750] Cannot find del_set index 0 as target [ 555.414235][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.466968][ T2759] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 555.495067][T17302] IPVS: stop unused estimator thread 0... [ 555.509053][ T2756] loop7: detected capacity change from 0 to 8192 [ 555.516146][ T2756] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000010' [ 555.550842][ T29] audit: type=1326 audit(1730359434.528:37455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2755 comm="syz.7.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 555.574689][ T29] audit: type=1326 audit(1730359434.528:37456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2755 comm="syz.7.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 555.598397][ T29] audit: type=1326 audit(1730359434.528:37457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2755 comm="syz.7.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 555.621978][ T29] audit: type=1326 audit(1730359434.528:37458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2755 comm="syz.7.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42aae719 code=0x7ffc0000 [ 555.708396][ T2771] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.770648][ T2771] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.830262][ T2771] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.891506][ T2771] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.957180][ T2771] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.974670][ T2771] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.992538][ T2771] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.011564][ T2771] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.620217][ T2790] loop4: detected capacity change from 0 to 256 [ 556.635405][ T2788] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10202'. [ 557.063830][T19391] IPVS: starting estimator thread 0... [ 557.170578][ T2801] loop5: detected capacity change from 0 to 8192 [ 557.177279][ T2799] IPVS: using max 2736 ests per chain, 136800 per kthread [ 557.186129][ T2801] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000009' [ 557.442543][ T2808] vlan2: entered allmulticast mode [ 557.458099][ T2808] bond0: entered allmulticast mode [ 557.463268][ T2808] bond_slave_0: entered allmulticast mode [ 557.469057][ T2808] bond_slave_1: entered allmulticast mode [ 557.502849][ T2808] bond0: left allmulticast mode [ 557.507773][ T2808] bond_slave_0: left allmulticast mode [ 557.513285][ T2808] bond_slave_1: left allmulticast mode [ 557.639406][ T2817] loop7: detected capacity change from 0 to 512 [ 557.677788][ T2817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.691467][ T2817] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.796203][T17278] IPVS: stop unused estimator thread 0... [ 557.844070][ T2836] Cannot find del_set index 0 as target [ 558.011694][ T2842] syzkaller0: entered promiscuous mode [ 558.017513][ T2842] syzkaller0: entered allmulticast mode [ 558.393515][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.410715][ T2856] loop5: detected capacity change from 0 to 512 [ 558.456453][ T2856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.472666][ T2866] loop9: detected capacity change from 0 to 512 [ 558.479600][ T2856] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.493330][ T2858] loop8: detected capacity change from 0 to 8192 [ 558.499932][ T2858] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 558.531191][ T2866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.564254][ T2866] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.576907][ T2866] Cannot find del_set index 0 as target [ 558.670782][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.706905][ T2880] loop8: detected capacity change from 0 to 256 [ 558.722645][ T2882] Cannot find del_set index 0 as target [ 559.128527][ T2897] loop5: detected capacity change from 0 to 512 [ 559.152420][ T2897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.170653][ T2897] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.241734][T24385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.440925][ T2901] loop7: detected capacity change from 0 to 512 [ 559.450439][ T2901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.469394][ T2901] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.528825][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.652225][ T2909] loop7: detected capacity change from 0 to 2048 [ 559.660034][ T2909] EXT4-fs: Ignoring removed mblk_io_submit option [ 559.676997][ T2909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.896888][ T2909] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10243: bg 0: block 234: padding at end of block bitmap is not set [ 559.922627][ T2909] EXT4-fs (loop7): Remounting filesystem read-only [ 559.929788][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.942126][ T2916] EXT4-fs (loop7): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 559.976323][ T2919] loop8: detected capacity change from 0 to 256 [ 560.067644][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.207555][ T2934] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 560.217767][ T29] kauditd_printk_skb: 906 callbacks suppressed [ 560.217783][ T29] audit: type=1326 audit(1730359439.198:38365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.221228][ T2943] loop5: detected capacity change from 0 to 256 [ 560.224203][ T29] audit: type=1326 audit(1730359439.198:38366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.224237][ T29] audit: type=1326 audit(1730359439.198:38367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.301415][ T29] audit: type=1326 audit(1730359439.198:38368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.325053][ T29] audit: type=1326 audit(1730359439.198:38369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f555251d1ff code=0x7ffc0000 [ 560.348516][ T29] audit: type=1326 audit(1730359439.198:38370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.372346][ T29] audit: type=1326 audit(1730359439.198:38371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.395999][ T29] audit: type=1326 audit(1730359439.198:38372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.419675][ T29] audit: type=1326 audit(1730359439.198:38373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.443258][ T29] audit: type=1326 audit(1730359439.198:38374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.5.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 560.748413][ T2954] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 560.844974][ T2967] loop5: detected capacity change from 0 to 512 [ 560.875926][ T2967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.892017][ T2967] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.087590][ T3034] loop7: detected capacity change from 0 to 512 [ 561.177062][ T3034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.215280][ T3034] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.258100][ T3034] Cannot find del_set index 0 as target [ 561.335675][ T3057] loop8: detected capacity change from 0 to 256 [ 561.390052][ T3062] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 561.417823][ T3059] loop8: detected capacity change from 0 to 8192 [ 561.424381][ T3059] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000010' [ 561.502113][ T3076] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.555875][ T3076] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.616708][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.627388][ T3076] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.679708][ T3076] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.814316][ T3076] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.825363][ T3076] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.836496][ T3076] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.847920][ T3076] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.937127][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.061252][ T3140] Cannot find del_set index 0 as target [ 562.316665][ T3155] loop9: detected capacity change from 0 to 256 [ 562.362038][ T3196] FAULT_INJECTION: forcing a failure. [ 562.362038][ T3196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.375242][ T3196] CPU: 1 UID: 0 PID: 3196 Comm: syz.9.10278 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 562.386004][ T3196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 562.396136][ T3196] Call Trace: [ 562.399460][ T3196] [ 562.402402][ T3196] dump_stack_lvl+0xf2/0x150 [ 562.407040][ T3196] dump_stack+0x15/0x20 [ 562.411244][ T3196] should_fail_ex+0x223/0x230 [ 562.415950][ T3196] should_fail+0xb/0x10 [ 562.420136][ T3196] should_fail_usercopy+0x1a/0x20 [ 562.425206][ T3196] _copy_to_user+0x20/0xa0 [ 562.429733][ T3196] simple_read_from_buffer+0xa0/0x110 [ 562.435227][ T3196] proc_fail_nth_read+0xf9/0x140 [ 562.440202][ T3196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.445823][ T3196] vfs_read+0x1a2/0x700 [ 562.450066][ T3196] ? __fget_files+0x1d4/0x210 [ 562.454850][ T3196] ksys_read+0xeb/0x1b0 [ 562.459111][ T3196] __x64_sys_read+0x42/0x50 [ 562.463665][ T3196] x64_sys_call+0x27d3/0x2d60 [ 562.468524][ T3196] do_syscall_64+0xc9/0x1c0 [ 562.473082][ T3196] ? clear_bhb_loop+0x55/0xb0 [ 562.477801][ T3196] ? clear_bhb_loop+0x55/0xb0 [ 562.482524][ T3196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.488520][ T3196] RIP: 0033:0x7f5a6e52d15c [ 562.492952][ T3196] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 562.512634][ T3196] RSP: 002b:00007f5a6d1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.521068][ T3196] RAX: ffffffffffffffda RBX: 00007f5a6e6e5f80 RCX: 00007f5a6e52d15c [ 562.529052][ T3196] RDX: 000000000000000f RSI: 00007f5a6d1a70a0 RDI: 000000000000000a [ 562.537076][ T3196] RBP: 00007f5a6d1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 562.545054][ T3196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.553084][ T3196] R13: 0000000000000000 R14: 00007f5a6e6e5f80 R15: 00007fff07400f98 [ 562.561070][ T3196] [ 562.632278][ T3200] loop5: detected capacity change from 0 to 256 [ 562.739642][ T3209] syzkaller0: entered promiscuous mode [ 562.745252][ T3209] syzkaller0: entered allmulticast mode [ 562.766570][ T3213] loop5: detected capacity change from 0 to 256 [ 562.778035][ T3213] IPVS: stopping master sync thread 1863 ... [ 562.845133][ T3221] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.947405][ T3221] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.972339][ T3226] FAULT_INJECTION: forcing a failure. [ 562.972339][ T3226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.985495][ T3226] CPU: 1 UID: 0 PID: 3226 Comm: syz.4.10291 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 562.996264][ T3226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 563.006316][ T3226] Call Trace: [ 563.009611][ T3226] [ 563.012533][ T3226] dump_stack_lvl+0xf2/0x150 [ 563.017199][ T3226] dump_stack+0x15/0x20 [ 563.021425][ T3226] should_fail_ex+0x223/0x230 [ 563.026146][ T3226] should_fail+0xb/0x10 [ 563.030313][ T3226] should_fail_usercopy+0x1a/0x20 [ 563.035379][ T3226] _copy_to_user+0x20/0xa0 [ 563.039828][ T3226] simple_read_from_buffer+0xa0/0x110 [ 563.045325][ T3226] proc_fail_nth_read+0xf9/0x140 [ 563.050300][ T3226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.055847][ T3226] vfs_read+0x1a2/0x700 [ 563.060006][ T3226] ? percpu_counter_add_batch+0xc6/0x140 [ 563.065732][ T3226] ? __fget_files+0x1d4/0x210 [ 563.070421][ T3226] ksys_read+0xeb/0x1b0 [ 563.074588][ T3226] __x64_sys_read+0x42/0x50 [ 563.079098][ T3226] x64_sys_call+0x27d3/0x2d60 [ 563.083844][ T3226] do_syscall_64+0xc9/0x1c0 [ 563.088418][ T3226] ? clear_bhb_loop+0x55/0xb0 [ 563.093221][ T3226] ? clear_bhb_loop+0x55/0xb0 [ 563.097944][ T3226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.103904][ T3226] RIP: 0033:0x7fcc9023d15c [ 563.108314][ T3226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 563.127920][ T3226] RSP: 002b:00007fcc8eeb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.136357][ T3226] RAX: ffffffffffffffda RBX: 00007fcc903f5f80 RCX: 00007fcc9023d15c [ 563.144330][ T3226] RDX: 000000000000000f RSI: 00007fcc8eeb70a0 RDI: 0000000000000007 [ 563.152298][ T3226] RBP: 00007fcc8eeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 563.160266][ T3226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.168341][ T3226] R13: 0000000000000000 R14: 00007fcc903f5f80 R15: 00007ffc653c0da8 [ 563.176320][ T3226] [ 563.275493][ T3221] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.336490][ T3221] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.402864][ T3221] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.416148][ T3221] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.451959][ T3221] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.523756][ T3221] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.578393][ T3242] loop5: detected capacity change from 0 to 256 [ 563.668841][ T3250] loop5: detected capacity change from 0 to 8192 [ 563.675370][ T3250] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000010' [ 563.817568][ T3275] loop5: detected capacity change from 0 to 256 [ 564.018720][ T3288] loop5: detected capacity change from 0 to 8192 [ 564.025582][ T3288] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000004' [ 564.249895][ T3305] loop5: detected capacity change from 0 to 512 [ 564.277197][ T3305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.290656][ T3305] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.376809][ T3310] loop9: detected capacity change from 0 to 256 [ 564.472187][ T3318] loop9: detected capacity change from 0 to 512 [ 564.495953][ T3318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.509823][ T3318] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.540243][T24385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.548463][ T3323] loop8: detected capacity change from 0 to 8192 [ 564.555839][ T3323] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000010' [ 564.582776][ T3328] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 564.593885][ T3326] FAULT_INJECTION: forcing a failure. [ 564.593885][ T3326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.607049][ T3326] CPU: 0 UID: 0 PID: 3326 Comm: syz.4.10328 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 564.617815][ T3326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 564.627872][ T3326] Call Trace: [ 564.631144][ T3326] [ 564.634068][ T3326] dump_stack_lvl+0xf2/0x150 [ 564.638709][ T3326] dump_stack+0x15/0x20 [ 564.642863][ T3326] should_fail_ex+0x223/0x230 [ 564.647580][ T3326] should_fail+0xb/0x10 [ 564.651737][ T3326] should_fail_usercopy+0x1a/0x20 [ 564.656787][ T3326] _copy_from_user+0x20/0xe0 [ 564.661434][ T3326] move_addr_to_kernel+0x82/0x120 [ 564.666461][ T3326] __sys_sendto+0x15c/0x260 [ 564.670987][ T3326] __x64_sys_sendto+0x78/0x90 [ 564.675743][ T3326] x64_sys_call+0x2959/0x2d60 [ 564.680423][ T3326] do_syscall_64+0xc9/0x1c0 [ 564.684926][ T3326] ? clear_bhb_loop+0x55/0xb0 [ 564.689608][ T3326] ? clear_bhb_loop+0x55/0xb0 [ 564.694289][ T3326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.700189][ T3326] RIP: 0033:0x7fcc9023e719 [ 564.704669][ T3326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.724277][ T3326] RSP: 002b:00007fcc8ee96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 564.732726][ T3326] RAX: ffffffffffffffda RBX: 00007fcc903f6058 RCX: 00007fcc9023e719 [ 564.740687][ T3326] RDX: 0000000000034000 RSI: 0000000020847fff RDI: 0000000000000003 [ 564.748645][ T3326] RBP: 00007fcc8ee96090 R08: 000000002005ffe4 R09: 000000000000001c [ 564.756609][ T3326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.764586][ T3326] R13: 0000000000000000 R14: 00007fcc903f6058 R15: 00007ffc653c0da8 [ 564.772620][ T3326] [ 564.850176][ T3350] loop7: detected capacity change from 0 to 512 [ 564.876296][ T3350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.892692][ T3350] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.906987][ T3363] loop8: detected capacity change from 0 to 256 [ 564.976822][ T3373] loop8: detected capacity change from 0 to 512 [ 564.978756][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.983761][ T3373] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 565.002943][ T3373] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 565.013078][ T3373] EXT4-fs (loop8): group descriptors corrupted! [ 565.036112][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.131489][ T3405] veth0_vlan: entered allmulticast mode [ 565.175056][ T3415] Cannot find del_set index 0 as target [ 565.218433][ T3408] loop5: detected capacity change from 0 to 8192 [ 565.232687][ T3408] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000010ÿÿÿÿÿÿ [ 565.232687][ T3408] ' [ 565.312866][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 565.312881][ T29] audit: type=1326 audit(1730359444.288:38695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.342721][ T29] audit: type=1326 audit(1730359444.288:38696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.366346][ T29] audit: type=1326 audit(1730359444.288:38697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.389972][ T29] audit: type=1326 audit(1730359444.288:38698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.413641][ T29] audit: type=1326 audit(1730359444.288:38699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.420625][ T3436] loop5: detected capacity change from 0 to 256 [ 565.437181][ T29] audit: type=1326 audit(1730359444.288:38700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.437223][ T29] audit: type=1326 audit(1730359444.288:38701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.490722][ T29] audit: type=1326 audit(1730359444.288:38702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.514294][ T29] audit: type=1326 audit(1730359444.288:38703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.537903][ T29] audit: type=1326 audit(1730359444.288:38704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.5.10346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555251e719 code=0x7ffc0000 [ 565.542792][ T3442] loop7: detected capacity change from 0 to 256 [ 565.572446][ T3448] loop4: detected capacity change from 0 to 512 [ 565.667162][ T3448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.688771][ T3448] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.908004][ T3503] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10360'. [ 565.910159][ T3507] loop7: detected capacity change from 0 to 8192 [ 565.919452][ T3510] vlan2: entered allmulticast mode [ 565.923836][ T3507] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 565.935941][ T3510] bond0: entered allmulticast mode [ 565.941058][ T3510] bond_slave_0: entered allmulticast mode [ 565.946891][ T3510] bond_slave_1: entered allmulticast mode [ 565.953701][ T3510] bond0: left allmulticast mode [ 565.958608][ T3510] bond_slave_0: left allmulticast mode [ 565.964092][ T3510] bond_slave_1: left allmulticast mode [ 566.051710][ T3517] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 566.069140][ T3518] loop7: detected capacity change from 0 to 2048 [ 566.076340][ T3518] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.095661][ T3518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.378581][T29510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.419576][ T3518] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10365: bg 0: block 234: padding at end of block bitmap is not set [ 566.594693][ T3518] EXT4-fs (loop7): Remounting filesystem read-only [ 566.865638][ T24] IPVS: starting estimator thread 0... [ 566.954232][ T3554] IPVS: using max 2784 ests per chain, 139200 per kthread [ 567.101884][ T3564] loop5: detected capacity change from 0 to 2048 [ 567.108993][ T3564] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.334423][T24755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.384487][ T3619] FAULT_INJECTION: forcing a failure. [ 567.384487][ T3619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.397648][ T3619] CPU: 1 UID: 0 PID: 3619 Comm: syz.9.10377 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 567.398088][ T3564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.408406][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 567.408421][ T3619] Call Trace: [ 567.408428][ T3619] [ 567.408436][ T3619] dump_stack_lvl+0xf2/0x150 [ 567.441303][ T3619] dump_stack+0x15/0x20 [ 567.445484][ T3619] should_fail_ex+0x223/0x230 [ 567.448171][ T3611] loop8: detected capacity change from 0 to 8192 [ 567.450179][ T3619] should_fail+0xb/0x10 [ 567.458171][ T3611] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 567.460624][ T3619] should_fail_usercopy+0x1a/0x20 [ 567.472423][ T3619] _copy_from_user+0x20/0xe0 [ 567.477105][ T3619] copy_msghdr_from_user+0x54/0x2a0 [ 567.482375][ T3619] __sys_sendmsg+0x171/0x270 [ 567.487048][ T3619] __x64_sys_sendmsg+0x46/0x50 [ 567.491837][ T3619] x64_sys_call+0x2689/0x2d60 [ 567.496630][ T3619] do_syscall_64+0xc9/0x1c0 [ 567.501218][ T3619] ? clear_bhb_loop+0x55/0xb0 [ 567.505919][ T3619] ? clear_bhb_loop+0x55/0xb0 [ 567.510637][ T3619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.516545][ T3619] RIP: 0033:0x7f5a6e52e719 [ 567.520949][ T3619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.540622][ T3619] RSP: 002b:00007f5a6d1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.549049][ T3619] RAX: ffffffffffffffda RBX: 00007f5a6e6e5f80 RCX: 00007f5a6e52e719 [ 567.557056][ T3619] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 567.565143][ T3619] RBP: 00007f5a6d1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 567.573113][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.581127][ T3619] R13: 0000000000000000 R14: 00007f5a6e6e5f80 R15: 00007fff07400f98 [ 567.589113][ T3619] [ 567.631922][ T3623] vlan2: entered allmulticast mode [ 567.637528][ T3623] bond0: entered allmulticast mode [ 567.642703][ T3623] bond_slave_0: entered allmulticast mode [ 567.648456][ T3623] bond_slave_1: entered allmulticast mode [ 567.677650][ T3623] bond0: left allmulticast mode [ 567.682624][ T3623] bond_slave_0: left allmulticast mode [ 567.688134][ T3623] bond_slave_1: left allmulticast mode [ 567.731817][ T3638] loop9: detected capacity change from 0 to 512 [ 567.790341][ T3637] loop4: detected capacity change from 0 to 256 [ 567.833578][T17293] IPVS: stop unused estimator thread 0... [ 567.856260][ T3638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.863372][ T3645] FAULT_INJECTION: forcing a failure. [ 567.863372][ T3645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.868886][ T3638] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.881759][ T3645] CPU: 0 UID: 0 PID: 3645 Comm: syz.4.10384 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 567.881789][ T3645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 567.881804][ T3645] Call Trace: [ 567.916263][ T3645] [ 567.919221][ T3645] dump_stack_lvl+0xf2/0x150 [ 567.923836][ T3645] dump_stack+0x15/0x20 [ 567.927998][ T3645] should_fail_ex+0x223/0x230 [ 567.932700][ T3645] should_fail+0xb/0x10 [ 567.936899][ T3645] should_fail_usercopy+0x1a/0x20 [ 567.942001][ T3645] _copy_from_user+0x20/0xe0 [ 567.944903][ T3564] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10371: bg 0: block 234: padding at end of block bitmap is not set [ 567.946670][ T3645] get_timespec64+0x49/0x140 [ 567.961178][ T3564] EXT4-fs (loop5): Remounting filesystem read-only [ 567.965548][ T3645] __x64_sys_recvmmsg+0xa1/0x170 [ 567.965577][ T3645] x64_sys_call+0x26e3/0x2d60 [ 567.981773][ T3645] do_syscall_64+0xc9/0x1c0 [ 567.982144][ T3561] EXT4-fs (loop5): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 567.986356][ T3645] ? clear_bhb_loop+0x55/0xb0 [ 567.986381][ T3645] ? clear_bhb_loop+0x55/0xb0 [ 567.986410][ T3645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.011747][ T3645] RIP: 0033:0x7fcc9023e719 [ 568.016169][ T3645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.035775][ T3645] RSP: 002b:00007fcc8eeb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 568.044339][ T3645] RAX: ffffffffffffffda RBX: 00007fcc903f5f80 RCX: 00007fcc9023e719 [ 568.052301][ T3645] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 568.060262][ T3645] RBP: 00007fcc8eeb7090 R08: 0000000020003700 R09: 0000000000000000 [ 568.068220][ T3645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.076186][ T3645] R13: 0000000000000000 R14: 00007fcc903f5f80 R15: 00007ffc653c0da8 [ 568.084165][ T3645] [ 568.138254][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.162367][ T3658] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.173111][ T3655] tipc: Started in network mode [ 568.178169][ T3655] tipc: Node identity ac14140f, cluster identity 4711 [ 568.185234][ T3655] tipc: New replicast peer: 255.255.255.255 [ 568.191281][ T3655] tipc: Enabled bearer , priority 10 [ 568.199762][ T3658] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.255940][ T3658] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.257016][ T3660] loop4: detected capacity change from 0 to 8192 [ 568.272401][ T3660] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000011' [ 568.347211][ T3658] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.355044][ T3662] loop4: detected capacity change from 0 to 8192 [ 568.363470][ T3662] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000010' [ 568.510173][ T3658] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.519018][T24385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.521634][ T3658] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.539601][ T3658] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.550575][ T3658] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.597804][ T3674] FAULT_INJECTION: forcing a failure. [ 568.597804][ T3674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.609091][ T3675] loop5: detected capacity change from 0 to 512 [ 568.610881][ T3674] CPU: 1 UID: 0 PID: 3674 Comm: syz.9.10395 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 568.620131][ T3675] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 568.627838][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 568.627855][ T3674] Call Trace: [ 568.627913][ T3674] [ 568.627920][ T3674] dump_stack_lvl+0xf2/0x150 [ 568.658593][ T3674] dump_stack+0x15/0x20 [ 568.662748][ T3674] should_fail_ex+0x223/0x230 [ 568.667467][ T3674] should_fail+0xb/0x10 [ 568.671700][ T3674] should_fail_usercopy+0x1a/0x20 [ 568.676766][ T3674] _copy_from_user+0x20/0xe0 [ 568.681391][ T3674] copy_msghdr_from_user+0x54/0x2a0 [ 568.686597][ T3674] __sys_sendmsg+0x171/0x270 [ 568.691322][ T3674] __x64_sys_sendmsg+0x46/0x50 [ 568.696147][ T3674] x64_sys_call+0x2689/0x2d60 [ 568.700824][ T3674] do_syscall_64+0xc9/0x1c0 [ 568.705403][ T3674] ? clear_bhb_loop+0x55/0xb0 [ 568.710129][ T3674] ? clear_bhb_loop+0x55/0xb0 [ 568.714818][ T3674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.720723][ T3674] RIP: 0033:0x7f5a6e52e719 [ 568.725205][ T3674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.744821][ T3674] RSP: 002b:00007f5a6d1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.753250][ T3674] RAX: ffffffffffffffda RBX: 00007f5a6e6e5f80 RCX: 00007f5a6e52e719 [ 568.761290][ T3674] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 568.769260][ T3674] RBP: 00007f5a6d1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 568.777245][ T3674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.785280][ T3674] R13: 0000000000000000 R14: 00007f5a6e6e5f80 R15: 00007fff07400f98 [ 568.793250][ T3674] [ 568.799007][ T3675] EXT4-fs (loop5): 1 truncate cleaned up [ 568.805550][ T3675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.856748][T32537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.876108][T24385] ================================================================== [ 568.884186][T24385] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 568.891392][T24385] [ 568.893707][T24385] race at unknown origin, with assert no writes to 0xffff88810b60b1e8 of 4 bytes by task 24385 on cpu 0: [ 568.904888][T24385] dequeue_entities+0x6df/0x760 [ 568.909728][T24385] pick_next_task_fair+0x7d/0x410 [ 568.914743][T24385] __schedule+0x284/0x940 [ 568.919066][T24385] schedule+0x55/0xc0 [ 568.923050][T24385] do_nanosleep+0xa3/0x300 [ 568.927453][T24385] hrtimer_nanosleep+0xc4/0x1c0 [ 568.932297][T24385] common_nsleep+0x68/0x90 [ 568.936716][T24385] __se_sys_clock_nanosleep+0x20a/0x240 [ 568.942265][T24385] __x64_sys_clock_nanosleep+0x55/0x70 [ 568.947715][T24385] x64_sys_call+0x253f/0x2d60 [ 568.952399][T24385] do_syscall_64+0xc9/0x1c0 [ 568.956887][T24385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.962775][T24385] [ 568.965086][T24385] value changed: 0x00000000 -> 0x00000001 [ 568.970784][T24385] [ 568.973090][T24385] Reported by Kernel Concurrency Sanitizer on: [ 568.979220][T24385] CPU: 0 UID: 0 PID: 24385 Comm: syz-executor Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 568.990138][T24385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 569.000190][T24385] ================================================================== [ 569.010030][ T3693] Cannot find del_set index 0 as target [ 569.032712][ T3691] loop5: detected capacity change from 0 to 8192 [ 569.039185][ T3691] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000010' [ 569.285006][T24065] tipc: Node number set to 2886997007