last executing test programs: 4m14.653297936s ago: executing program 32 (id=47): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8f}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) recvmsg$unix(r3, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, 0x0, 0x0) recvmsg(r2, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x6, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xeb}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r7, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) 3m48.226604632s ago: executing program 33 (id=481): syz_emit_ethernet(0x25d, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd62ab6e4702273300fe800000000000000000000000000020200100000000000000000000000000022b00079168"], 0x0) 3m45.36532552s ago: executing program 2 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x2000000, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008001600c053000018000180140002006e657464657673696d3000000000000008001700365e0000080015"], 0x44}}, 0x0) (fail_nth: 1) 3m44.899053388s ago: executing program 2 (id=518): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000100)=[{0x2, 0x7f, 0x800}, {0x3, 0xfffb}], 0x2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) preadv(r4, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000e00)=""/6, 0x6}], 0x2, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x1, 0x1, 0x1c, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1, 0x7800, 0x0, 0x4}}) sendmsg$inet(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000540)="54f0c4d849d9cf94ce4f0be3faabf9b5ad3ba6996300cfe6fcdf85c41f3dc5cd4052000efa5df8b59a850194a39aef71dc2cfa16e9b8b5b671b5a71c0665cc5a6c800f006959591e1db7aed5be12a9bac9ab901da8abd1a2538eee5f2a2458b2c2020018f8f1595e2eaea63de3ca4492b6bbcacc2e43281721b8695cea0959facd2cc9bb008653f96ddf4de6b77b9e2043ccbaf6bec97b69088bce019d811c41e1d88377fe2b50488c50a8416ef0b2f8fc0bc9691f5d279fc7e1c62f02ccffd5", 0xc0}, {&(0x7f0000000600)="5c5ee2b1a0df6f0aaa4ec46347290a32f6501d979d378dfc01a1b4387fef1d092e88ac57f72b2a74d53f5ae21d26a16764a53ac85d5cc8f02fe3f0e50b533016c2eb47d124dd01db52713d16bac967e56bd091d22e676b5d74a73f873702a67e377acc860538fc0a34dfce6ec065cbeb3c8f9dd5010e06027ec2f42f4724ebf73de7f456047ee16f2f2509dea5ed56daaaedeffa88b17b0a02f36665c74bb73cbeaffb0e4bf3cc9291a8d216e64a8231d1", 0xb1}, {&(0x7f0000000140)="bd912855409504a3241601089a6a55cbbd19b22c2d3deefc396365c1a6e1ee49050cce7a6d3a5065a029a16351c799ecdc7f7a7539e320b6dfecfb1da8e1240955645e5b", 0x44}, {&(0x7f00000006c0)="d9899d4239aa8278ec11a607cec0d873e41880c75d243cf00ed5e424a7788850c232a0452bb5985352a6e972becaa3ae8791572573fa90a835b6d0dbbcc6f1d4769f95c076fd2ea472ed0c0226d426d0dd1b046fcbec52e57a52bdc9ed581bbdf84222a8e7a3018a7a7e6175be4f4a94dce7d6eb0b1318e0cb438fab5e3d707cc898787fa066f3ae407afc2e12b83af13d655cd0820d7633add7715355e3d876c93395b22e2483bc83", 0xa9}, {&(0x7f0000000780)="5e04aded1c1202f151a0be7ee20b2b7890b1ce6d9f56384b912b2f86eddf4392bcf9da847580501117f153200c3d72c0cf32930a4868ba72652bff3b0d66bdbba33880e40b2e4bbabe0cfc993b3f6b6edaa05e3cd279e1ec14169a3a8238040a9b3efea93b9044670e68eeaa900dc91063b9c9326eb14449835daa8fea7cb4320a5ef3277005ff5b3cea7e13bd5a32b8735c4bbfef6869db9d7225e0f1c206781d2bb6a4cd72aa5f2a965b564439cfd23229a126a6b4d7b6cc29cf0486", 0xbd}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000000000001000000000200000000000034000000000000000000000007000000442419300000000700000004000000050000000700000007800000000000000a000087c7000000001100000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ac14140e0a01010000000000001a0200000032d4000000000000"], 0xa0}, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000577c029fdc6487847e962f36552061ac81d490256bb5e409ac0e4767ea267c34da0819ddd96a7e6940fd8cdfb1a666780a368b133f1124ca271a0f8b146cf178daaa3df526a8d22bca73730ef22fafb0de12ea12a9189f68c184c7863c0201605fe654cf9a1554c6a6c0851931533a811e1f8a2fd44c61f2857d9b201dfa0ac49442ab388913c665731dec48d5a785c28a7bcf097f842af8fe4c702b6f286aef56c532938296de73c5c86b05a544e9edb9a00f9ec39b7c40cc6b84baf8ad483728b4f3887c10a79bafcdf012cb5b688c3eed283bbe3ca7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00g \x00'/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r9, @ANYRESDEC], 0x52) 3m43.503376833s ago: executing program 2 (id=532): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 3m43.413635653s ago: executing program 2 (id=533): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0xa, 0xffffffff, 0x0) r1 = epoll_create(0x1) ppoll(&(0x7f0000000100)=[{r1, 0xd0a7}], 0x1, 0x0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000002680)={0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcf) ioperm(0x1, 0x3, 0x1000) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x4b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x9135}, 0x18) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r7, 0x0, 0x7b) open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x60) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x10, r8) tgkill(r8, r8, 0x12) 3m43.077387831s ago: executing program 2 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x20000000000000c0, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x5, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x6020400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r7 = dup2(r6, r6) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff8000, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000100)={[{@grpquota}, {@max_dir_size_kb}, {@dioread_lock}]}, 0x5, 0x508, &(0x7f0000000480)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r7, @ANYRES16=r9, @ANYRESOCT=r10, @ANYBLOB="33d7252dbfac81db0e97cef548299aa2175465de51f26bc0434a98deca8ec05ae845c3a8b2a44e268ab68bd150bcb9db81776495e3106a4057c7474a8cc14b1524a200ae38f17a3cd27fb8f299d19a98f16a1f0e4a296c2b3aa583d2452082ea5cbc351caf375e788b16f0f745a38344455a7bc9fc621dbba0064e36a60cf14cbd87c8a8933c8cb491633fe86750265fb9f451b4aade6f33840f104243bad7", @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="8c90fa527a9d48f86952", @ANYRES32=r4, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r7, 0x1276, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) eventfd2(0xfff, 0x800) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 3m42.88580597s ago: executing program 2 (id=543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) 3m42.86089158s ago: executing program 34 (id=543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) 3m39.653429397s ago: executing program 7 (id=544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xcb1c}, 0x18) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r1}, &(0x7f0000000680), &(0x7f0000000640)}, 0x20) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r3, &(0x7f00000001c0)={0xf97cff8c, 0x8}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000140)={0x40, 0xb, 0x3, 0x8001, 0xf5, 0x4}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 3m39.384100637s ago: executing program 7 (id=586): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r3, 0x1, 0x70bd25, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 3m39.330946796s ago: executing program 7 (id=587): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0xa, 0xffffffff, 0x0) r1 = epoll_create(0x1) ppoll(&(0x7f0000000100)=[{r1, 0xd0a7}], 0x1, 0x0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000002680)={0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcf) ioperm(0x1, 0x3, 0x1000) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x4b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x9135}, 0x18) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r7, 0x0, 0x7b) open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x60) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) tgkill(r8, r8, 0x12) 3m39.208913056s ago: executing program 7 (id=590): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 3m35.785779992s ago: executing program 7 (id=627): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) (async) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x5, 0xff, 0x7}}, 0x10000) 3m35.758829682s ago: executing program 35 (id=627): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) (async) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x5, 0xff, 0x7}}, 0x10000) 2m49.011591508s ago: executing program 6 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = msgget(0x2, 0x200) msgctl$IPC_RMID(r4, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x48840) 2m49.010921578s ago: executing program 6 (id=1068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xcb1c}, 0x18) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r1}, &(0x7f0000000680), &(0x7f0000000640)}, 0x20) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r3, &(0x7f00000001c0)={0xf97cff8c, 0x8}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000140)={0x40, 0xb, 0x3, 0x8001, 0xf5, 0x4}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 2m48.787098197s ago: executing program 6 (id=1077): socket(0xa, 0x2400000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)}], 0x1, 0xa, 0xffffffff, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x60) finit_module(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000005000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m48.719180896s ago: executing program 6 (id=1078): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0xa, 0xffffffff, 0x0) r1 = epoll_create(0x1) ppoll(&(0x7f0000000100)=[{r1, 0xd0a7}], 0x1, 0x0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000002680)={0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcf) tgkill(0x0, 0x0, 0x12) 2m48.412896985s ago: executing program 6 (id=1081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911a847a3df00008510000002000000850000008c00000095000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)=ANY=[@ANYRES64=r0, @ANYBLOB, @ANYRES8=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r1 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4bd, 0x8) bind$inet6(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7fffffffffffffff}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000020000"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 2m48.176500354s ago: executing program 6 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="011f00000000000000000d"], 0x20}}, 0x0) 2m48.151268404s ago: executing program 36 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="011f00000000000000000d"], 0x20}}, 0x0) 1m17.829495598s ago: executing program 0 (id=2131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7ff, 0xff, 0xb3, 0x4010, r2, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x4, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000001a40)=ANY=[@ANYRES64=r3, @ANYRESOCT=r1, @ANYRESDEC=r5, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYBLOB="1733ace0b3a00244cbb12039c1ec6f669ee4dff7b408744eaf42c3f683f4c0a2e42343ee3262c13a46c88d62f4becbbe4d872727576f3b5dedf3cf6cf4e44ddffddd980808ed255fd196b2824399229aa5407bc4548d9cbdc1ce74865925c750955149ec", @ANYRESDEC=r3, @ANYRESOCT=r1, @ANYRESOCT=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a40000000001010400000000000000000a00000008000740000000003c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140000000000200000000000000000000001802c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000bb0c0002800500010000000000100005800b000100616d616e646100000000000000"], 0xa4}}, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000d00)={'pimreg0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r8, {r1}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a00)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', r10, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r14 = syz_io_uring_setup(0x6ad1, &(0x7f0000000940)={0x0, 0x3, 0x80, 0x0, 0x235}, &(0x7f00000009c0), &(0x7f00000003c0)) fsmount(r11, 0x0, 0x2) io_uring_register$IORING_REGISTER_BUFFERS2(r14, 0xf, &(0x7f0000001c80)={0x8, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f0000000e00)=""/184, 0xb8}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/204, 0xcc}, {&(0x7f0000001040)=""/209, 0xd2}, {&(0x7f0000000540)=""/52, 0xfffffffffffffe14}, {&(0x7f0000000700)=""/25, 0x19}], &(0x7f0000000540)}, 0x20) socket$netlink(0x10, 0x3, 0xa) io_uring_register$IORING_UNREGISTER_RING_FDS(r14, 0x15, &(0x7f0000001840)=[{0x5, 0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000000840)=""/249, 0xf9}, {&(0x7f0000000300)=""/40, 0x28}], &(0x7f0000000640)=[0x1, 0x5, 0x8000000000000000, 0x0]}, {0x5, 0x1, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/18, 0x12}, {&(0x7f0000000b00)=""/63, 0x3f}, {&(0x7f0000000b40)=""/144, 0x90}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/101, 0x65}], &(0x7f0000000d00)}, {0x7, 0x1, 0x0, &(0x7f0000001500)=[{&(0x7f0000000d40)=""/53, 0x35}, {&(0x7f00000011c0)=""/204, 0xcc}, {&(0x7f00000012c0)=""/118, 0x76}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4, 0x4}, {&(0x7f0000001480)=""/128, 0x80}], &(0x7f0000001580)=[0x80000000, 0x8001, 0x4, 0x6, 0x4, 0x5, 0x6, 0xe, 0x25, 0x0]}, {0x3, 0x1, 0x0, &(0x7f0000001700)=[{&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/135, 0x87}, {&(0x7f00000016c0)=""/42, 0x2a}], &(0x7f0000001740)=[0x6, 0x4, 0xf]}, {0x1, 0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001780)=""/55, 0x37}], &(0x7f0000001800)=[0x6, 0xffffffffffff1539, 0x8, 0x73aa, 0x7, 0x9]}], 0x5) 1m17.302725446s ago: executing program 0 (id=2138): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00787e1f7b962cd95d000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setreuid(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x3b, 0x0, 0x37}, 0x2c) 1m17.271351195s ago: executing program 0 (id=2140): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sigaltstack(0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m17.126728275s ago: executing program 0 (id=2143): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x22}, 0x18) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m17.063199835s ago: executing program 0 (id=2144): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x81a, 0x0, 0x1, 'queue0\x00', 0x105}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) 1m16.705485593s ago: executing program 0 (id=2152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m16.545992002s ago: executing program 37 (id=2152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 41.993753406s ago: executing program 8 (id=2595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "51e71cd259c6ed187dac0409e99cce0a58492b8cbfbab2dd3b1761cfc2236565", "69aec473e66807b976eaef253d41fbf3293cec01f86e1c3178763287a678030527491d9d5a2060d4535e076beffdd49e", "6a4f51295848e3d4498010113475f8fafb4b28882f1a0dad36fd382d", {"41ac74f4777623d3ad9e46fa5a9a857f", "e3f215ab1e8e7d0bd6bb293212c47476"}}}}}}}, 0x0) 41.963593836s ago: executing program 8 (id=2597): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x2}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x80, 0x3, 0x80000000, 0x3, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000002a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000800)=ANY=[], 0x4, 0x662, &(0x7f0000002b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x66cfff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000580)=@ethtool_rx_ntuple={0x35, {0x3, @hdata="ae59cc4e8468ef0ed7a1fa762f0ab09266587c609e3d4935ce81a2ed399314e65db8532dc09c716b30159edb5f50aa7d7381a5fde5703a4153db10307f313cb35d0b52fe75ddb4d0", @hdata="d966a295903638e2e8e7c604004dd8f4147ec48e25f9c7e5094c2e4abb0556c99b4ba7b0d5fc7af07e52e9201cb599480933f1693753f5d14fc9cd53e4cb3d620257fdfe038998fe", 0x40, 0x7, 0x0, 0x2, 0xffffffffffffffff}}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 41.500406874s ago: executing program 8 (id=2602): bpf$PROG_LOAD(0x5, &(0x7f0000004800)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x7e, &(0x7f0000000300)=""/126, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x4, 0x2, 0x8}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xc8300, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000680)=[{0x6, 0x2, 0x4, 0x7}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 41.441801774s ago: executing program 8 (id=2604): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) unshare(0x64000600) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c6f73745f666f756e645f743a7330cbb37365725f75003cec429a76ebfa710f7001fff685e47b350aa1f9fa23b5e146267aa1f21620ed49926248de0df95dceca1cefa50a8bf283bc3031dd279f2e46a7e0a00b8c5a946d4dc2feb23f1b04544e8c25c9d7044096"], 0x29) 40.48546175s ago: executing program 8 (id=2610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 40.42918368s ago: executing program 8 (id=2612): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x2}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x80, 0x3, 0x80000000, 0x3, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000002a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000800)=ANY=[], 0x4, 0x662, &(0x7f0000002b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x66cfff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000580)=@ethtool_rx_ntuple={0x35, {0x3, @hdata="ae59cc4e8468ef0ed7a1fa762f0ab09266587c609e3d4935ce81a2ed399314e65db8532dc09c716b30159edb5f50aa7d7381a5fde5703a4153db10307f313cb35d0b52fe75ddb4d0", @hdata="d966a295903638e2e8e7c604004dd8f4147ec48e25f9c7e5094c2e4abb0556c99b4ba7b0d5fc7af07e52e9201cb599480933f1693753f5d14fc9cd53e4cb3d620257fdfe038998fe", 0x40, 0x7, 0x0, 0x2, 0xffffffffffffffff}}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 25.38709663s ago: executing program 38 (id=2612): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x2}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x80, 0x3, 0x80000000, 0x3, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000002a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000800)=ANY=[], 0x4, 0x662, &(0x7f0000002b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x66cfff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000580)=@ethtool_rx_ntuple={0x35, {0x3, @hdata="ae59cc4e8468ef0ed7a1fa762f0ab09266587c609e3d4935ce81a2ed399314e65db8532dc09c716b30159edb5f50aa7d7381a5fde5703a4153db10307f313cb35d0b52fe75ddb4d0", @hdata="d966a295903638e2e8e7c604004dd8f4147ec48e25f9c7e5094c2e4abb0556c99b4ba7b0d5fc7af07e52e9201cb599480933f1693753f5d14fc9cd53e4cb3d620257fdfe038998fe", 0x40, 0x7, 0x0, 0x2, 0xffffffffffffffff}}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 4.305773287s ago: executing program 1 (id=3120): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6f, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @private=0xa010103}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) rename(0x0, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) 2.711004791s ago: executing program 1 (id=3159): getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r0}, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000002f75000000783ae7ca7b309c420000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x80, &(0x7f0000000080)="d61ddad020ef37ad5647463fc89ae8a5826a80162c0c241a61da7a22f743b3899977316f1626769bdeedd7eb8343c3030329c9e6a98e198d988b2132e41f64e64bb4980e1d27d279d9bc3e1228cb4849a5364fee99bf57964870273c7a8c277be8f5a4a244fdd87a5c370c5fd519744c75bb420c2b6c070eb4a7863d04f93ed8e5f03fddf424b930f85d91c04831fa4c110b9352305ae38bd664841c38eb55de20f8725cf9e6ddae5d8194b5bd6f54644b30e3cb", 0xb4, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000580)="75ce7c8b9848a9eb3b1719412cefd0c316a6b91d5ad9ff205ae430e1b0b6c997928f74d6d52e69b317561bbc71b25b710e3ae505bae6ad45d8f78e529c17bd36cccb55fa61db5116d619fe0b2261b7d49c5104f7c50e7db9e0bec7d54c0208") r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) r5 = socket(0x1e, 0x1, 0x0) r6 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0x40000000}) syz_clone(0x25003100, 0x0, 0x38, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x40001}) 2.181838588s ago: executing program 4 (id=3169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRES32=r0, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0, r1}, 0x18) fchmod(r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000980)={[{@nolazytime}, {@resuid}, {@data_ordered}], [{@permit_directio}, {@fowner_gt}, {@euid_lt={'euid<', r3}}, {@uid_lt}, {@hash}, {@context={'context', 0x3d, 'user_u'}}]}, 0xfe, 0x511, &(0x7f0000000440)="$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") 2.129888219s ago: executing program 4 (id=3173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00)\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.026130088s ago: executing program 4 (id=3175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000740)=0xffffffffffff0b40, 0x35b00cb3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.947009748s ago: executing program 9 (id=3176): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "2da164d8e707220134db04a9628ffe23d5c3148d48659481", "3b16c732e77128260ca5c1e0d56bb26f8164657725b31ea833e3662bf5cb0852"}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010008f8ffffffb702000071d0e7a53c234fa91d4746f108000000b703000000000000850000007100000095000000000000001463eab6aae8f616f564e9b2f12c958e01b43ab55043e7a90260730db7e00c33e6a9f4a57e0cabfcdaa4411cf4858ad095f2cae41444229560fbfc251a0a83b843e6e1a70f478977c84bb055b96b784b2dcd8103b97fa03ee2341496178902d1a23a487dc7b99c8778945e26abf68d0d993e1a69c1ff4f0e6cb2ee61eb0fc8252f509e8692ac87cf26affb9a468b14f13fdf0dd16fc66424627b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "a562ff321beb3f036b9fd27aeff89c8e79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) 1.908773898s ago: executing program 9 (id=3177): bpf$PROG_LOAD(0x5, &(0x7f0000004800)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x7e, &(0x7f0000000300)=""/126, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x4, 0x2, 0x8}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xc8300, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000680)=[{0x6, 0x2, 0x4, 0x7}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.821643427s ago: executing program 9 (id=3179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) r3 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xf) dup3(r3, r4, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$packet(0x11, 0xa, 0x300) r8 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r8, {0x0, 0x0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) getresgid(&(0x7f0000000280), &(0x7f0000000400)=0x0, &(0x7f0000000440)) fsetxattr$system_posix_acl(r7, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010007000000000002000500", @ANYRES32=r9, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040003000000000008000600", @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="0859ad1da200000000", @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="1000220000000044c5460020000000000000008b339f2abd7b"], 0x6c, 0x2) sendmmsg$unix(r4, &(0x7f0000000500)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)="2dc5ecdabbdb3aaedb71529b8892a5b1fd316621", 0x14}, {&(0x7f0000000380)="b761252af124a435f21e680b2c2d7c4165aed961ce13d7d453ae8a81aa8b41f34173a3d3b1a8df7867eef3ef61eae1e2166008f27fe13d4c1d53937c07397aa6d6e653a416667d497d4aa486fc55d3e9d52c3212b30b673695f2ed3707f51f4266d8015f1b67a949f276372892411138bee5b77e88028c820810ed5a61276f27f6a3dd731e578a8ab6b3ba1a1fb01a8233a83974a0cc2c1c5e2c02d84ef6dc6313dd8c1a10b7ceb690ceda84514e2cef78d2d6efcb32f322033c6d2d612fa313c9bb5592a9b5cd83e1e64ba5e47a23c4e5", 0xd1}, {&(0x7f00000002c0)="939919d5966816de09627f203afb0d97a5a1afd1c552e5c7fa1096a6acc4baa1ce19b271d1e71905c5c0b3", 0x2b}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}], 0x20, 0x8044000}}], 0x1, 0x854) fsopen(0x0, 0x0) syz_clone(0x40005080, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$pokeuser(0x6, r12, 0x358, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10200, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xa42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3ed, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x10, 0x0, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) 1.815040817s ago: executing program 1 (id=3180): r0 = socket$can_raw(0x1d, 0x3, 0x1) connect(r0, &(0x7f0000000000)=@caif, 0x80) close_range(r0, r0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x316}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x69e08c205096b8ee}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, r2, 0xdc228b01f0a8baaa, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe4, 0x4, "33609b74f98f625f6836e74a96bce86edb386fba9b6d3251804b1a19540fd3abec0694f37ad4148e6b632b929c5b35667f1d11d14d85006f5647160e8764d46ea4068085c10eff890b654e4dc209cabe040f5f3f38dcc74830c4e56c5b21ca6f1017286b3b41d776dcd7c7c9e9b53b7bcf4844fc9f36185ce9481112a0ddcb65432130f9b9c299fd48fe390d55f55229a03b6ebd4168ec650d928c06b9a2238286a4d50c9cd336ee553c7d285e53e5985b90d1d35754053bc8e7a2acc4d9c5d140f026a4fbee8d58db7909cbcca12b3f4d9e57a17f3dec228f97392a025f36a9"}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc010}, 0x1) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x81}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$kcm(0x29, 0x4, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)={@local, @broadcast, 0x0}, &(0x7f0000000440)=0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r6 = dup3(r3, r3, 0x80000) r7 = openat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x420000, 0x31) r8 = syz_open_dev$vcsu(&(0x7f0000000800), 0x6, 0x201c0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x19, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x3, 0x7, 0x6, 0x400, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x6, 0x76, &(0x7f00000006c0)=""/118, 0x40f00, 0x0, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000740)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xb, 0xf886, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[r7, r8, r9, r10, r11, r12], &(0x7f0000000a40)=[{0x5, 0x1, 0x3, 0xa}, {0x2, 0x3, 0x9, 0xa}], 0x10, 0xffffffff, @void, @value}, 0x94) r13 = dup3(r11, 0xffffffffffffffff, 0x80000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r11, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000d00)={'veth0_to_batadv\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r8, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xf, 0x1f, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x370}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_val={0x18, 0x0, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @alu={0x4, 0x0, 0x8, 0x8, 0x2, 0x6, 0x4}]}, &(0x7f0000000c80)='syzkaller\x00', 0x7, 0x25, &(0x7f0000000cc0)=""/37, 0x41000, 0x2, '\x00', r15, @fallback=0x3, r6, 0x8, &(0x7f0000000d40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0x7, 0x7fff, 0x4c95f457}, 0x10, 0xffffffffffffffff, r8, 0x4, &(0x7f0000000e80)=[r5, r9, r9, r16], &(0x7f0000000ec0)=[{0x2, 0x4, 0x9, 0xb}, {0x1, 0x1, 0x10, 0x8}, {0x5, 0x1, 0x10}, {0x2, 0x4, 0xf, 0x9}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0x5, 0xf, 0x7, 0x2000, 0x1, 0x40, '\x00', r4, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xc, @void, @value, @void, @value}, 0x50) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, r17, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x74c}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 1.697169497s ago: executing program 3 (id=3182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.629764886s ago: executing program 1 (id=3183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1.619838467s ago: executing program 1 (id=3184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx6\x00', 0x2020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.592272176s ago: executing program 3 (id=3185): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x5a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x45}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000001}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x16, &(0x7f0000000140)=""/22, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, r1, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xb, 0x10001, 0x8000}, 0x10, r2, r3, 0x1, &(0x7f00000006c0)=[r4, 0x1, r5], &(0x7f0000000700)=[{0x2, 0x4, 0x4, 0x7}], 0x10, 0x7, @void, @value}, 0x94) ppoll(&(0x7f0000000800), 0x0, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x4]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r6, {0xc694}}, './file0\x00'}) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000900)) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000940)={0x0, @dev, @initdev}, &(0x7f0000000980)=0xc) recvfrom$l2tp(r7, &(0x7f00000009c0)=""/82, 0x52, 0x12001, 0x0, 0x0) fcntl$getown(r4, 0x9) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000a40)={0xb, 0x5, {0x3ff, @usage=0xfe9, 0x0, 0x1000, 0x9, 0x61688287, 0x140000000000, 0x1000, 0x30, @usage=0xffff, 0x101, 0x8, [0xfffffffffffffff8, 0x6, 0x800, 0x96d, 0x86]}, {0xfffffffffffffffd, @usage=0x9, 0x0, 0x80, 0x9, 0x8, 0x6ee, 0x40, 0x400, @usage=0x18, 0x8, 0x81, [0x0, 0x3, 0x6, 0x5, 0xf00, 0x4ffc7207]}, {0x10001, @struct={0x7, 0x4}, 0x0, 0xe0, 0xfffffffffffffff7, 0xd, 0x1, 0xe6c7, 0x2, @struct={0x74c, 0x6}, 0xa, 0x3, [0x8, 0x9, 0xef, 0x1, 0x2, 0x7]}, {0x101, 0x6, 0x7}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000e40)={r9, 0x9, 0x0, 0x1}) umount2(&(0x7f0000001240)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000001440)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r11 = eventfd(0x2) io_submit(0x0, 0x3, &(0x7f0000001580)=[&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000001280)="40a78a11973068fe0f30d389bc62500951328228eacaf0611de3640bc5aa48c9163477", 0x23, 0x1000, 0x0, 0x0, r7}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7, 0x4d, r1, &(0x7f0000001300)="cf69f9ff65aaba245a1ada15f1e3048ff529ddd59855ccead8da6a30ffed8ccffac5301873b73660c37a11ff1e765dd72aba892695b44c6437c9b1c49d9980a76eefe7078be95e8dc4f5f428566b2cd16a222415a62d3b0d70ec92391319733356f611ca49e2da07018f001865d3bfd1416bb769064beb67a361c1cddee96dbe41bbecb704a5470eb8d4e1beacf12e942f6bb2aa66eb65bd533f842ff510f97f4e3d2d361558867d20df2abe2a3f789a9772d867f70f2cccbc19c77c3e63d9c40e46ff4761b0d08f2a3ca0548b7136785293589c7c5bf2014e1ae35157890d4d56fd872adb8a9f9677b0d3cc5b", 0xed, 0x10001, 0x0, 0x2, r7}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x6, 0x3, r10, &(0x7f0000001480)="6134bf29084a654f46abe1c5d9aefadf70b9c768a7f6d4503b3fb1bb68cd19ff45d089915cea63302b67958a97083b837a5a304098828f6b8f12e85ab143cea6774260052b752db866a51105b3b33a7a5aaa2ba4eeb50ef25fd98613788cae51e67c0410de976bafef0674683fa5688996f1ad2b80d841c676acc3c68aafb54d53003bcf8f1aba56806cbac70c21748b19393f66811860d1d81f7efae69a09ed4fc677072d6b8eceb6d1f12c817061e859691f58", 0xb4, 0x565a, 0x0, 0x2, r11}]) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000001600)={0x0, r0, 0x100000000, 0x3448, 0x9, 0xffff}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000001640)={0x2, 0xfffffffffffffffe, @status={[0x9, 0xd30b, 0xbbe, 0x4, 0x4, 0x54d]}, [0x1000, 0xc, 0x5, 0x7, 0x5, 0x9, 0x8, 0xc60, 0x4, 0xfffffffffffffffb, 0x0, 0x7, 0x2, 0x6, 0x1, 0x8, 0x2, 0x5ab5, 0x7, 0xc, 0x2, 0x4, 0x100000001, 0x5, 0x4, 0x1, 0x8001, 0x7, 0x8, 0x9, 0x0, 0xb, 0x2, 0x200, 0x3e, 0x10, 0x7, 0x9, 0x7fff, 0x2, 0x6, 0x0, 0x3, 0x2, 0x7f, 0x0, 0xb15, 0xc5c7, 0x2, 0x5, 0x2, 0xa6d, 0x1, 0x5, 0xc0, 0x7fffffff, 0x341, 0xd, 0xe00, 0x7, 0xfffffffffffffff2, 0x45d5, 0x5, 0x72c7]}) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000002080)=0xffffffffffffffff) ioctl$FIOCLEX(r6, 0x5451) socket$inet6(0xa, 0x3, 0x6) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000020c0)=0x2, 0x6000000000000000, 0x5) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000002100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002340)='./cgroup/syz0\x00', 0x200002, 0x0) 1.285964875s ago: executing program 9 (id=3188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0ffff00123c00630277fbac141416e000030a44079f03b180006000000000845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6f, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @private=0xa010103}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) rename(0x0, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) 1.204866085s ago: executing program 1 (id=3190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6f, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @private=0xa010103}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) rename(0x0, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) 1.152653984s ago: executing program 5 (id=3191): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000007000000000000e600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) mq_unlink(0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe2c82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6}, 0x10) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.143474005s ago: executing program 4 (id=3192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x6000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xfd, 0x0, 0x0, 0xf, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9e, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0xffff}, r2, 0x0, 0xffffffffffffffff, 0x0) 989.893454ms ago: executing program 4 (id=3193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c02000013002904000000000000220000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000006800e97800000000ffdbdf250a0000000000000024000200"], 0x3c}}, 0x0) fallocate(r0, 0x10, 0x1, 0x5) 975.776634ms ago: executing program 5 (id=3194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 880.066184ms ago: executing program 5 (id=3195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 879.436674ms ago: executing program 4 (id=3196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000740)=0xffffffffffff0b40, 0x35b00cb3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 785.877663ms ago: executing program 5 (id=3197): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) 785.495603ms ago: executing program 5 (id=3198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x6000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xfd, 0x0, 0x0, 0xf, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9e, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0xffff}, r2, 0x0, 0xffffffffffffffff, 0x0) 724.149093ms ago: executing program 3 (id=3199): r0 = socket$kcm(0x2, 0x922000000001, 0x106) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff}) r1 = socket(0x1e, 0x4, 0x0) recvfrom(r1, &(0x7f0000000140)=""/157, 0x9d, 0x2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e23, 0x5, @empty, 0x8}}, 0x60e, 0x10, 0x3, 0x1, 0x80, 0x5, 0x5}, 0x9c) syz_genetlink_get_family_id$tipc(0x0, r1) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, &(0x7f00000004c0)=""/75, 0x4b}}], 0x400000000000133, 0x2000, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10, 0x0}, 0x4008885) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x40, 0x0, 0x4, 0xfffe, 0xa, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x2, 0x4, 0xf, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x3506, 0x3, 0x1, 0x7}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01002df76ed0fc0ca547cc4a2e084e18000000000000000c0000000c00000005000000010000000000001302000000005f2e2e00"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) r6 = socket$inet(0x2, 0x3, 0x33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x101}, 0x18) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0xf00) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 682.551052ms ago: executing program 5 (id=3200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx6\x00', 0x2020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 578.229412ms ago: executing program 3 (id=3201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx6\x00', 0x2020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 379.930391ms ago: executing program 9 (id=3202): bpf$PROG_LOAD(0x5, &(0x7f0000004800)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x7e, &(0x7f0000000300)=""/126, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x4, 0x2, 0x8}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xc8300, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000680)=[{0x6, 0x2, 0x4, 0x7}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 221.987701ms ago: executing program 9 (id=3203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) (fail_nth: 1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) fstatfs(r4, &(0x7f0000000180)=""/84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa3fdb5c13ffffff080045000030000000aa05009005000000004500000000000000001414bb00"/54], 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x204c00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@null, 0x2, 'ip6erspan0\x00'}) 90.608491ms ago: executing program 3 (id=3204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) 0s ago: executing program 3 (id=3205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) kernel console output (not intermixed with test programs): ): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.480596][T11331] bio_check_eod: 28601 callbacks suppressed [ 241.480610][T11331] syz.9.2448: attempt to access beyond end of device [ 241.480610][T11331] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 241.722678][ T4920] IPVS: starting estimator thread 0... [ 241.725401][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.835097][T11357] IPVS: using max 1968 ests per chain, 98400 per kthread [ 241.911336][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 241.911350][ T29] audit: type=1326 audit(1738663172.950:12151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 241.937328][T11368] loop5: detected capacity change from 0 to 164 [ 241.950557][T11370] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.969879][ T29] audit: type=1326 audit(1738663173.000:12152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 241.993581][ T29] audit: type=1326 audit(1738663173.000:12153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 242.017232][ T29] audit: type=1326 audit(1738663173.000:12154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 242.040729][ T29] audit: type=1326 audit(1738663173.000:12155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 242.064411][ T29] audit: type=1326 audit(1738663173.000:12156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 242.088211][ T29] audit: type=1326 audit(1738663173.000:12157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 242.111973][ T29] audit: type=1326 audit(1738663173.000:12158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 242.135521][ T29] audit: type=1326 audit(1738663173.000:12159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 242.159146][ T29] audit: type=1326 audit(1738663173.000:12160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.9.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 242.189357][T11368] Unable to read rock-ridge attributes [ 242.214649][T11368] Unable to read rock-ridge attributes [ 242.298027][T11368] Unable to read rock-ridge attributes [ 242.303721][T11368] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 242.388894][T11385] bridge_slave_0: left allmulticast mode [ 242.394599][T11385] bridge_slave_0: left promiscuous mode [ 242.400427][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.433728][T11385] bridge_slave_1: left allmulticast mode [ 242.439447][T11385] bridge_slave_1: left promiscuous mode [ 242.445241][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.465916][T11385] bond0: (slave bond_slave_0): Releasing backup interface [ 242.482131][T11385] bond0: (slave bond_slave_1): Releasing backup interface [ 242.501543][T11385] team0: Port device team_slave_0 removed [ 242.520307][T11392] loop5: detected capacity change from 0 to 1024 [ 242.527563][T11385] team0: Port device team_slave_1 removed [ 242.555399][T11385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.591562][T11385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.612550][T11385] team0: Port device geneve1 removed [ 242.638955][T11392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.657333][ T3366] lo speed is unknown, defaulting to 1000 [ 242.717226][T11390] team0: Mode changed to "loadbalance" [ 242.813665][T11413] lo speed is unknown, defaulting to 1000 [ 242.923073][T11413] lo speed is unknown, defaulting to 1000 [ 243.226825][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.478801][T11425] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 243.521806][T11427] loop5: detected capacity change from 0 to 128 [ 243.578280][T11429] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 243.591197][T11427] syz.5.2483: attempt to access beyond end of device [ 243.591197][T11427] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 243.708714][T11427] syz.5.2483: attempt to access beyond end of device [ 243.708714][T11427] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 243.755403][T11427] syz.5.2483: attempt to access beyond end of device [ 243.755403][T11427] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 243.789249][T11441] syz.5.2483: attempt to access beyond end of device [ 243.789249][T11441] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 243.815863][T11441] syz.5.2483: attempt to access beyond end of device [ 243.815863][T11441] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 243.829239][T11441] syz.5.2483: attempt to access beyond end of device [ 243.829239][T11441] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 243.846831][T11441] syz.5.2483: attempt to access beyond end of device [ 243.846831][T11441] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 243.865027][T11427] syz.5.2483: attempt to access beyond end of device [ 243.865027][T11427] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 243.938889][T11441] syz.5.2483: attempt to access beyond end of device [ 243.938889][T11441] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 243.965131][T11443] IPv6: Can't replace route, no match found [ 244.082235][T11455] loop9: detected capacity change from 0 to 2048 [ 244.095746][T11458] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 244.130236][T11456] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 244.143984][T11455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.187039][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.214284][T11465] FAULT_INJECTION: forcing a failure. [ 244.214284][T11465] name failslab, interval 1, probability 0, space 0, times 0 [ 244.227209][T11465] CPU: 0 UID: 0 PID: 11465 Comm: syz.3.2498 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 244.227283][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 244.227298][T11465] Call Trace: [ 244.227305][T11465] [ 244.227312][T11465] dump_stack_lvl+0xf2/0x150 [ 244.227391][T11465] dump_stack+0x15/0x1a [ 244.227474][T11465] should_fail_ex+0x24a/0x260 [ 244.227549][T11465] should_failslab+0x8f/0xb0 [ 244.227603][T11465] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 244.227711][T11465] ? sidtab_sid2str_get+0xb8/0x140 [ 244.227753][T11465] kmemdup_noprof+0x2a/0x60 [ 244.227809][T11465] sidtab_sid2str_get+0xb8/0x140 [ 244.227892][T11465] security_sid_to_context_core+0x1eb/0x2f0 [ 244.227935][T11465] security_sid_to_context+0x27/0x30 [ 244.228047][T11465] selinux_lsmprop_to_secctx+0x68/0xf0 [ 244.228072][T11465] security_lsmprop_to_secctx+0x40/0x80 [ 244.228140][T11465] audit_log_task_context+0x76/0x180 [ 244.228238][T11465] audit_log_task+0xf9/0x1c0 [ 244.228272][T11465] audit_seccomp+0x68/0x130 [ 244.228376][T11465] __seccomp_filter+0x6fa/0x1180 [ 244.228424][T11465] ? __fput+0x545/0x640 [ 244.228524][T11465] ? kmem_cache_free+0x158/0x2d0 [ 244.228610][T11465] ? percpu_counter_add_batch+0xc6/0x140 [ 244.228669][T11465] __secure_computing+0x9f/0x1c0 [ 244.228754][T11465] syscall_trace_enter+0xd1/0x1f0 [ 244.228778][T11465] ? fpregs_assert_state_consistent+0x83/0xa0 [ 244.228818][T11465] do_syscall_64+0xaa/0x1c0 [ 244.228840][T11465] ? clear_bhb_loop+0x55/0xb0 [ 244.228872][T11465] ? clear_bhb_loop+0x55/0xb0 [ 244.228988][T11465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.229045][T11465] RIP: 0033:0x7f78f3c8b7bc [ 244.229063][T11465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.229084][T11465] RSP: 002b:00007f78f22f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.229111][T11465] RAX: ffffffffffffffda RBX: 00007f78f3ea5fa0 RCX: 00007f78f3c8b7bc [ 244.229123][T11465] RDX: 000000000000000f RSI: 00007f78f22f70a0 RDI: 0000000000000007 [ 244.229143][T11465] RBP: 00007f78f22f7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.229154][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.229166][T11465] R13: 0000000000000000 R14: 00007f78f3ea5fa0 R15: 00007ffe6c1897c8 [ 244.229189][T11465] [ 244.793493][T11470] loop9: detected capacity change from 0 to 2048 [ 245.116555][T11470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.187300][T11489] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 245.227768][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.235268][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.242686][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.251180][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.258863][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.266402][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.267450][T11494] loop3: detected capacity change from 0 to 512 [ 245.273779][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.287571][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.295035][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.302447][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.309942][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.317462][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.324877][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.325207][T11496] loop8: detected capacity change from 0 to 164 [ 245.332323][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.344971][T11496] Unable to read rock-ridge attributes [ 245.361785][T11496] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 245.400569][T11494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.413224][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.421067][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.428579][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.432757][T11494] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.436020][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.453907][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.461069][T11500] lo speed is unknown, defaulting to 1000 [ 245.461352][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.474508][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.481942][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.489621][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.497196][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.499798][T11486] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2506: corrupted inode contents [ 245.504579][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.523832][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.531297][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.538742][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.546174][ T4920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 245.549195][T11486] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.2506: mark_inode_dirty error [ 245.572482][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.592420][ T4920] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 245.625567][T11486] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2506: corrupted inode contents [ 245.652990][T11500] lo speed is unknown, defaulting to 1000 [ 245.668724][T11486] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2506: mark_inode_dirty error [ 245.735864][T11513] lo speed is unknown, defaulting to 1000 [ 245.750301][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.787238][T11514] loop9: detected capacity change from 0 to 512 [ 245.815268][T11514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.845144][T11514] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.911971][T11513] lo speed is unknown, defaulting to 1000 [ 245.936057][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.988826][T11530] FAULT_INJECTION: forcing a failure. [ 245.988826][T11530] name failslab, interval 1, probability 0, space 0, times 0 [ 246.001513][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.9.2519 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 246.001537][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 246.001554][T11530] Call Trace: [ 246.001560][T11530] [ 246.001566][T11530] dump_stack_lvl+0xf2/0x150 [ 246.001676][T11530] dump_stack+0x15/0x1a [ 246.001696][T11530] should_fail_ex+0x24a/0x260 [ 246.001727][T11530] should_failslab+0x8f/0xb0 [ 246.001752][T11530] kmem_cache_alloc_noprof+0x52/0x320 [ 246.001823][T11530] ? security_file_alloc+0x32/0x100 [ 246.001862][T11530] security_file_alloc+0x32/0x100 [ 246.001905][T11530] init_file+0x5b/0x1a0 [ 246.001996][T11530] alloc_empty_file+0xea/0x200 [ 246.002024][T11530] path_openat+0x6a/0x1fc0 [ 246.002045][T11530] ? kernelmode_fixup_or_oops+0x58/0xb0 [ 246.002083][T11530] ? xas_load+0x3ae/0x3d0 [ 246.002140][T11530] ? cgroup_rstat_updated+0x9f/0x570 [ 246.002241][T11530] ? should_fail_ex+0xd7/0x260 [ 246.002324][T11530] ? should_failslab+0x8f/0xb0 [ 246.002345][T11530] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 246.002373][T11530] ? getname_kernel+0x3d/0x1e0 [ 246.002406][T11530] do_file_open_root+0x1c8/0x3e0 [ 246.002511][T11530] file_open_root+0xf9/0x120 [ 246.002543][T11530] kernel_read_file_from_path_initns+0xe7/0x180 [ 246.002578][T11530] _request_firmware+0x740/0xa00 [ 246.002604][T11530] request_firmware+0x36/0x50 [ 246.002645][T11530] devlink_compat_flash_update+0xaf/0x1b0 [ 246.002676][T11530] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 246.002712][T11530] dev_ethtool+0x138b/0x14c0 [ 246.002735][T11530] ? __rcu_read_unlock+0x4e/0x70 [ 246.002758][T11530] dev_ioctl+0x854/0xab0 [ 246.002848][T11530] sock_do_ioctl+0x11c/0x260 [ 246.002880][T11530] sock_ioctl+0x40f/0x600 [ 246.002920][T11530] ? __pfx_sock_ioctl+0x10/0x10 [ 246.002956][T11530] __se_sys_ioctl+0xc9/0x140 [ 246.003026][T11530] __x64_sys_ioctl+0x43/0x50 [ 246.003051][T11530] x64_sys_call+0x1690/0x2dc0 [ 246.003107][T11530] do_syscall_64+0xc9/0x1c0 [ 246.003135][T11530] ? clear_bhb_loop+0x55/0xb0 [ 246.003267][T11530] ? clear_bhb_loop+0x55/0xb0 [ 246.003294][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.003378][T11530] RIP: 0033:0x7fd04015cda9 [ 246.003395][T11530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.003417][T11530] RSP: 002b:00007fd03e7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.003436][T11530] RAX: ffffffffffffffda RBX: 00007fd040375fa0 RCX: 00007fd04015cda9 [ 246.003447][T11530] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 246.003461][T11530] RBP: 00007fd03e7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.003602][T11530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.003613][T11530] R13: 0000000000000000 R14: 00007fd040375fa0 R15: 00007ffc6163e038 [ 246.003630][T11530] [ 246.289373][T11530] netdevsim netdevsim9: loading /lib/firmware/updates/6.14.0-rc1-syzkaller-00020-g0de63bb7d919/. failed with error -12 [ 246.304664][T11530] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 246.312863][T11530] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 246.459559][T11537] lo speed is unknown, defaulting to 1000 [ 246.495447][T11537] lo speed is unknown, defaulting to 1000 [ 246.557880][T11541] loop5: detected capacity change from 0 to 512 [ 246.735846][T11541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.753192][T11541] bio_check_eod: 5238 callbacks suppressed [ 246.753239][T11541] syz.5.2520: attempt to access beyond end of device [ 246.753239][T11541] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 246.821514][T11540] loop9: detected capacity change from 0 to 1024 [ 246.941016][T11540] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 247.057564][T11546] loop8: detected capacity change from 0 to 512 [ 247.087389][T11540] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 247.099504][T11546] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 247.111874][T11540] EXT4-fs (loop9): orphan cleanup on readonly fs [ 247.131076][T11540] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 247.142104][T11540] EXT4-fs (loop9): Remounting filesystem read-only [ 247.149155][T11540] __quota_error: 133 callbacks suppressed [ 247.149168][T11540] Quota error (device loop9): write_blk: dquota write failed [ 247.162492][T11540] Quota error (device loop9): write_blk: dquota write failed [ 247.170015][T11540] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 247.182381][T11540] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 247.229535][T11540] EXT4-fs (loop9): 1 orphan inode deleted [ 247.239983][T11546] EXT4-fs (loop8): 1 truncate cleaned up [ 247.242950][T11540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 247.247354][T11546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.257964][T11540] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 247.276711][T11540] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.286358][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.313162][T11546] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.496140][T11578] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2535'. [ 247.505171][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2535'. [ 247.514053][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2535'. [ 247.522963][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2535'. [ 247.571842][ T29] audit: type=1326 audit(1738663178.610:12293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.8.2536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2012c2cda9 code=0x0 [ 247.906859][ T29] audit: type=1326 audit(1738663178.950:12294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.9.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 247.939350][ T29] audit: type=1326 audit(1738663178.950:12295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.9.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 247.963021][ T29] audit: type=1326 audit(1738663178.950:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.9.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 247.986879][ T29] audit: type=1326 audit(1738663178.950:12297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.9.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 248.010610][ T29] audit: type=1326 audit(1738663178.950:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.9.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 248.108332][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2544'. [ 248.137999][T11599] team_slave_0: entered promiscuous mode [ 248.143711][T11599] team_slave_1: entered promiscuous mode [ 248.179621][T11599] macvtap1: entered promiscuous mode [ 248.185043][T11599] team0: entered promiscuous mode [ 248.190381][T11599] macvtap1: entered allmulticast mode [ 248.195849][T11599] team0: entered allmulticast mode [ 248.200973][T11599] team_slave_0: entered allmulticast mode [ 248.206770][T11599] team_slave_1: entered allmulticast mode [ 248.226058][T11599] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 248.242439][T11605] team0: left allmulticast mode [ 248.247451][T11605] team_slave_0: left allmulticast mode [ 248.252984][T11605] team_slave_1: left allmulticast mode [ 248.258555][T11605] team0: left promiscuous mode [ 248.263665][T11605] team_slave_0: left promiscuous mode [ 248.269177][T11605] team_slave_1: left promiscuous mode [ 248.299325][T11621] loop3: detected capacity change from 0 to 128 [ 248.314223][T11618] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 248.342763][T11621] syz.3.2552: attempt to access beyond end of device [ 248.342763][T11621] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 248.366180][T11621] syz.3.2552: attempt to access beyond end of device [ 248.366180][T11621] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 248.415000][T11621] syz.3.2552: attempt to access beyond end of device [ 248.415000][T11621] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 248.465982][T11628] syz.3.2552: attempt to access beyond end of device [ 248.465982][T11628] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 248.512524][T11621] syz.3.2552: attempt to access beyond end of device [ 248.512524][T11621] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 248.525906][T11628] syz.3.2552: attempt to access beyond end of device [ 248.525906][T11628] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 248.588743][T11628] syz.3.2552: attempt to access beyond end of device [ 248.588743][T11628] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 248.637452][T11621] syz.3.2552: attempt to access beyond end of device [ 248.637452][T11621] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 248.686972][T11628] syz.3.2552: attempt to access beyond end of device [ 248.686972][T11628] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 248.873736][T11637] lo speed is unknown, defaulting to 1000 [ 248.959999][T11637] lo speed is unknown, defaulting to 1000 [ 248.965887][T11654] loop8: detected capacity change from 0 to 2048 [ 249.061007][T11654] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.310907][ T5469] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.318268][T11637] chnl_net:caif_netlink_parms(): no params data found [ 249.347111][T11673] loop8: detected capacity change from 0 to 128 [ 249.464183][T11637] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.471378][T11637] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.492475][T11637] bridge_slave_0: entered allmulticast mode [ 249.512938][T11637] bridge_slave_0: entered promiscuous mode [ 249.528145][T11637] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.531487][T11685] loop9: detected capacity change from 0 to 2048 [ 249.535263][T11637] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.557686][T11637] bridge_slave_1: entered allmulticast mode [ 249.566720][T11637] bridge_slave_1: entered promiscuous mode [ 249.607283][T11637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.642384][T11637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.690417][T11637] team0: Port device team_slave_0 added [ 249.698844][T11637] team0: Port device team_slave_1 added [ 249.732490][T11637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.739534][T11637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.765631][T11637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.862275][T11637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.869376][T11637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.895579][T11637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.962078][T11637] hsr_slave_0: entered promiscuous mode [ 249.968722][T11637] hsr_slave_1: entered promiscuous mode [ 249.974795][T11637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.990508][T11637] Cannot create hsr debugfs directory [ 250.012984][T11685] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.025758][T11694] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2576'. [ 250.243070][T11637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.253501][T11637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.290461][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2578'. [ 250.299558][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2578'. [ 250.321479][T11637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.331810][T11637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.420372][T11637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.424296][T11708] loop9: detected capacity change from 0 to 128 [ 250.430873][T11637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.538465][T11637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.548818][T11637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.681817][T11637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.705840][T11637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.730846][T11637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.754868][T11637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.920700][T11637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.952764][T11637] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.991016][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.998114][T10026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.032150][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.039250][T10026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.197832][T11737] loop5: detected capacity change from 0 to 128 [ 251.312686][T11637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.467988][T11759] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2596'. [ 251.494437][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.502097][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.509666][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.539297][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.546943][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.554342][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.561887][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.569344][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.576879][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.584295][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.591724][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.599165][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.599509][T11766] loop8: detected capacity change from 0 to 164 [ 251.606566][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.606615][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.612972][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.635330][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.642789][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.650229][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.657664][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.665145][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.672551][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.680029][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.687449][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.694887][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.702373][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.709924][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.717416][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.724900][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.732338][ T1061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.754992][T11767] bio_check_eod: 48710 callbacks suppressed [ 251.755007][T11767] syz.5.2591: attempt to access beyond end of device [ 251.755007][T11767] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 251.775002][T11737] syz.5.2591: attempt to access beyond end of device [ 251.775002][T11737] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 251.801203][ T1061] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 251.806306][T11767] syz.5.2591: attempt to access beyond end of device [ 251.806306][T11767] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 251.825144][T11766] Unable to read rock-ridge attributes [ 251.835516][T11765] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 251.837539][T11737] syz.5.2591: attempt to access beyond end of device [ 251.837539][T11737] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 251.887998][T11637] veth0_vlan: entered promiscuous mode [ 251.939871][T11637] veth1_vlan: entered promiscuous mode [ 251.977359][T11637] veth0_macvtap: entered promiscuous mode [ 252.006448][T11737] syz.5.2591: attempt to access beyond end of device [ 252.006448][T11737] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.017140][T11782] loop9: detected capacity change from 0 to 128 [ 252.038089][T11637] veth1_macvtap: entered promiscuous mode [ 252.064496][T11767] syz.5.2591: attempt to access beyond end of device [ 252.064496][T11767] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.069626][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.085354][T11788] SELinux: syz.8.2604 (11788) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 252.088108][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.088132][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.122043][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.132009][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.132056][T11737] syz.5.2591: attempt to access beyond end of device [ 252.132056][T11737] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.142528][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.142547][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.142562][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.191641][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 252.191655][ T29] audit: type=1326 audit(1738663183.230:12630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd04015ba0a code=0x7ffc0000 [ 252.215916][T11767] syz.5.2591: attempt to access beyond end of device [ 252.215916][T11767] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.221316][ T29] audit: type=1326 audit(1738663183.230:12631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd04015ba0a code=0x7ffc0000 [ 252.252157][T11637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.257759][ T29] audit: type=1326 audit(1738663183.230:12632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd04015b617 code=0x7ffc0000 [ 252.288570][ T29] audit: type=1326 audit(1738663183.230:12633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd04015e54a code=0x7ffc0000 [ 252.299773][T11737] syz.5.2591: attempt to access beyond end of device [ 252.299773][T11737] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 252.326702][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.337198][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.347102][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.357653][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.367567][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.378117][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.388015][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.398573][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.408401][T11637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.418928][T11637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.439946][T11637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.447626][ T29] audit: type=1326 audit(1738663183.370:12634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd04015b710 code=0x7ffc0000 [ 252.448813][T11782] syz.9.2603: attempt to access beyond end of device [ 252.448813][T11782] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 252.471472][ T29] audit: type=1326 audit(1738663183.370:12635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd04015baf7 code=0x7ffc0000 [ 252.508696][ T29] audit: type=1326 audit(1738663183.370:12636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd04015b710 code=0x7ffc0000 [ 252.532299][ T29] audit: type=1326 audit(1738663183.370:12637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 252.556316][ T29] audit: type=1326 audit(1738663183.370:12638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 252.563721][T11784] lo speed is unknown, defaulting to 1000 [ 252.579971][ T29] audit: type=1326 audit(1738663183.400:12639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.9.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 252.581534][T11637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.618257][T11637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.627057][T11637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.636310][T11637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.677172][T11791] netlink: 'syz.3.2606': attribute type 21 has an invalid length. [ 252.736437][T11795] loop3: detected capacity change from 0 to 128 [ 252.746235][ T1061] IPVS: starting estimator thread 0... [ 252.835366][T11797] IPVS: using max 2304 ests per chain, 115200 per kthread [ 252.846508][T11800] SELinux: security_context_str_to_sid () failed with errno=-22 [ 252.888021][T11803] loop3: detected capacity change from 0 to 2048 [ 253.055700][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.063199][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.070670][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.075666][T11803] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 253.101193][T11814] loop8: detected capacity change from 0 to 164 [ 253.112203][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.119769][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.127343][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.134749][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.142237][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.149690][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.157203][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.164742][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.172196][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.175761][T11814] Unable to read rock-ridge attributes [ 253.179748][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.192644][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.225100][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.232552][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.240122][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.247599][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.255106][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.256838][T11814] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 253.262567][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.277507][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.282779][T11810] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 253.285102][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.299345][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.306846][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.314333][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.321769][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.329191][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.336675][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.344061][ T4920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.356410][ T4920] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 253.411348][T11817] FAULT_INJECTION: forcing a failure. [ 253.411348][T11817] name failslab, interval 1, probability 0, space 0, times 0 [ 253.424046][T11817] CPU: 1 UID: 0 PID: 11817 Comm: syz.5.2614 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 253.424074][T11817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 253.424088][T11817] Call Trace: [ 253.424095][T11817] [ 253.424102][T11817] dump_stack_lvl+0xf2/0x150 [ 253.424227][T11817] dump_stack+0x15/0x1a [ 253.424267][T11817] should_fail_ex+0x24a/0x260 [ 253.424333][T11817] ? register_netdevice+0x1fa/0xe40 [ 253.424358][T11817] should_failslab+0x8f/0xb0 [ 253.424397][T11817] __kmalloc_cache_noprof+0x4e/0x320 [ 253.424439][T11817] ? rb_insert_color+0x284/0x290 [ 253.424467][T11817] register_netdevice+0x1fa/0xe40 [ 253.424495][T11817] ? dev_addr_mod+0x1df/0x200 [ 253.424580][T11817] tun_set_iff+0x5d9/0x820 [ 253.424677][T11817] __tun_chr_ioctl+0x64c/0x1860 [ 253.424701][T11817] tun_chr_ioctl+0x27/0x30 [ 253.424735][T11817] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 253.424774][T11817] __se_sys_ioctl+0xc9/0x140 [ 253.424902][T11817] __x64_sys_ioctl+0x43/0x50 [ 253.424929][T11817] x64_sys_call+0x1690/0x2dc0 [ 253.424960][T11817] do_syscall_64+0xc9/0x1c0 [ 253.425054][T11817] ? clear_bhb_loop+0x55/0xb0 [ 253.425089][T11817] ? clear_bhb_loop+0x55/0xb0 [ 253.425117][T11817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.425149][T11817] RIP: 0033:0x7f072c65cda9 [ 253.425167][T11817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.425235][T11817] RSP: 002b:00007f072acc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.425259][T11817] RAX: ffffffffffffffda RBX: 00007f072c875fa0 RCX: 00007f072c65cda9 [ 253.425272][T11817] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 253.425285][T11817] RBP: 00007f072acc7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.425299][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.425313][T11817] R13: 0000000000000000 R14: 00007f072c875fa0 R15: 00007fff04c6db58 [ 253.425332][T11817] [ 253.968589][T11832] lo speed is unknown, defaulting to 1000 [ 254.963444][T11868] lo speed is unknown, defaulting to 1000 [ 254.987677][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2638'. [ 255.007432][T11876] loop9: detected capacity change from 0 to 2048 [ 255.073525][T11876] EXT4-fs mount: 1 callbacks suppressed [ 255.073538][T11876] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.094674][T11885] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 255.169033][T11890] loop5: detected capacity change from 0 to 2048 [ 255.291972][T11890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.409603][T11908] loop3: detected capacity change from 0 to 512 [ 255.410005][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.441471][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.441526][T11908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.485112][T11908] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.550145][T11914] loop5: detected capacity change from 0 to 512 [ 255.571518][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.612393][T11914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.612829][T11923] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 255.647760][T11914] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.718293][T11916] lo speed is unknown, defaulting to 1000 [ 255.774056][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.925491][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2655'. [ 256.120789][T11952] loop9: detected capacity change from 0 to 512 [ 256.137124][T11952] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.149823][T11952] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.179772][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.521945][T11974] loop5: detected capacity change from 0 to 512 [ 256.541951][T11974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.608841][T11981] loop9: detected capacity change from 0 to 512 [ 256.650056][T11981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.234659][T11990] loop3: detected capacity change from 0 to 2048 [ 257.276944][T11990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.419136][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.573781][T11998] loop3: detected capacity change from 0 to 2048 [ 257.699550][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.709548][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 257.709579][ T29] audit: type=1326 audit(1738663188.750:12799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.745825][T12003] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.750453][T11998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.753042][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.773702][ T29] audit: type=1326 audit(1738663188.790:12800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.797398][ T29] audit: type=1326 audit(1738663188.790:12801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.821249][ T29] audit: type=1326 audit(1738663188.790:12802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.844851][ T29] audit: type=1326 audit(1738663188.790:12803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.868477][ T29] audit: type=1326 audit(1738663188.790:12804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.892094][ T29] audit: type=1326 audit(1738663188.790:12805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.915830][ T29] audit: type=1326 audit(1738663188.790:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.939607][ T29] audit: type=1326 audit(1738663188.790:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 257.963232][ T29] audit: type=1326 audit(1738663188.790:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 258.080932][T12015] lo speed is unknown, defaulting to 1000 [ 258.123613][T12020] vlan2: entered allmulticast mode [ 258.128809][T12020] vlan1: entered allmulticast mode [ 258.133996][T12020] veth0_vlan: entered allmulticast mode [ 258.158748][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.167964][T12020] vlan1: left allmulticast mode [ 258.172850][T12020] veth0_vlan: left allmulticast mode [ 258.522396][T12041] loop5: detected capacity change from 0 to 512 [ 258.549257][T12041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.577383][T12041] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.665265][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.199605][T12055] loop5: detected capacity change from 0 to 512 [ 259.987961][T12057] loop9: detected capacity change from 0 to 512 [ 260.053709][T12055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.054609][T12057] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.076478][T12052] bio_check_eod: 6485 callbacks suppressed [ 260.076492][T12052] syz.5.2689: attempt to access beyond end of device [ 260.076492][T12052] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 260.124455][T12056] syz.9.2690: attempt to access beyond end of device [ 260.124455][T12056] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 260.228284][T12066] loop3: detected capacity change from 0 to 2048 [ 260.327325][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.340179][T12066] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.356487][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.762552][T12100] SELinux: policydb version -2061882145 does not match my version range 15-34 [ 260.788566][T12098] loop3: detected capacity change from 0 to 2048 [ 260.795305][T12100] SELinux: failed to load policy [ 260.854810][T12098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.064775][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.123638][T12116] loop5: detected capacity change from 0 to 512 [ 261.153459][T12116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.175040][T12116] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.208727][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.359284][T12131] loop3: detected capacity change from 0 to 512 [ 261.384562][T12131] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.2715: casefold flag without casefold feature [ 261.405582][T12131] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2715: couldn't read orphan inode 15 (err -117) [ 261.430568][T12131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.473783][T12131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2715'. [ 261.538730][T12142] loop9: detected capacity change from 0 to 2048 [ 261.573284][T12149] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2722'. [ 261.605610][T12142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.688552][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.718692][T12158] FAULT_INJECTION: forcing a failure. [ 261.718692][T12158] name failslab, interval 1, probability 0, space 0, times 0 [ 261.731472][T12158] CPU: 1 UID: 0 PID: 12158 Comm: syz.9.2724 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 261.731511][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.731539][T12158] Call Trace: [ 261.731547][T12158] [ 261.731555][T12158] dump_stack_lvl+0xf2/0x150 [ 261.731585][T12158] dump_stack+0x15/0x1a [ 261.731607][T12158] should_fail_ex+0x24a/0x260 [ 261.731643][T12158] ? alloc_fs_context+0x44/0x4e0 [ 261.731728][T12158] should_failslab+0x8f/0xb0 [ 261.731752][T12158] __kmalloc_cache_noprof+0x4e/0x320 [ 261.731798][T12158] alloc_fs_context+0x44/0x4e0 [ 261.731892][T12158] ? strncmp+0x34/0x70 [ 261.731978][T12158] fs_context_for_mount+0x21/0x30 [ 261.732005][T12158] do_new_mount+0xf3/0x690 [ 261.732043][T12158] path_mount+0x49b/0xb30 [ 261.732068][T12158] __se_sys_mount+0x27f/0x2d0 [ 261.732146][T12158] ? __bpf_trace_sys_enter+0x10/0x30 [ 261.732169][T12158] __x64_sys_mount+0x67/0x80 [ 261.732195][T12158] x64_sys_call+0x2c84/0x2dc0 [ 261.732220][T12158] do_syscall_64+0xc9/0x1c0 [ 261.732294][T12158] ? clear_bhb_loop+0x55/0xb0 [ 261.732320][T12158] ? clear_bhb_loop+0x55/0xb0 [ 261.732379][T12158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.732404][T12158] RIP: 0033:0x7fd04015cda9 [ 261.732419][T12158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.732437][T12158] RSP: 002b:00007fd03e7c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.732455][T12158] RAX: ffffffffffffffda RBX: 00007fd040375fa0 RCX: 00007fd04015cda9 [ 261.732466][T12158] RDX: 0000000020000280 RSI: 0000000020000080 RDI: 0000000000000000 [ 261.732478][T12158] RBP: 00007fd03e7c7090 R08: 0000000020000200 R09: 0000000000000000 [ 261.732569][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.732581][T12158] R13: 0000000000000000 R14: 00007fd040375fa0 R15: 00007ffc6163e038 [ 261.732660][T12158] [ 262.202582][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.270561][T12176] FAULT_INJECTION: forcing a failure. [ 262.270561][T12176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.283717][T12176] CPU: 1 UID: 0 PID: 12176 Comm: syz.3.2733 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 262.283744][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 262.283756][T12176] Call Trace: [ 262.283762][T12176] [ 262.283769][T12176] dump_stack_lvl+0xf2/0x150 [ 262.283933][T12176] dump_stack+0x15/0x1a [ 262.283957][T12176] should_fail_ex+0x24a/0x260 [ 262.284055][T12176] should_fail+0xb/0x10 [ 262.284090][T12176] should_fail_usercopy+0x1a/0x20 [ 262.284114][T12176] _copy_from_user+0x1c/0xa0 [ 262.284140][T12176] copy_msghdr_from_user+0x54/0x2a0 [ 262.284160][T12176] ? __fget_files+0x17c/0x1c0 [ 262.284254][T12176] __sys_sendmmsg+0x1e8/0x4b0 [ 262.284396][T12176] __x64_sys_sendmmsg+0x57/0x70 [ 262.284432][T12176] x64_sys_call+0x29aa/0x2dc0 [ 262.284588][T12176] do_syscall_64+0xc9/0x1c0 [ 262.284611][T12176] ? clear_bhb_loop+0x55/0xb0 [ 262.284641][T12176] ? clear_bhb_loop+0x55/0xb0 [ 262.284673][T12176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.284733][T12176] RIP: 0033:0x7f78f3c8cda9 [ 262.284756][T12176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.284796][T12176] RSP: 002b:00007f78f22f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.284814][T12176] RAX: ffffffffffffffda RBX: 00007f78f3ea5fa0 RCX: 00007f78f3c8cda9 [ 262.284826][T12176] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000004 [ 262.284840][T12176] RBP: 00007f78f22f7090 R08: 0000000000000000 R09: 0000000000000000 [ 262.284854][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.284868][T12176] R13: 0000000000000000 R14: 00007f78f3ea5fa0 R15: 00007ffe6c1897c8 [ 262.284890][T12176] [ 262.807142][T12187] loop3: detected capacity change from 0 to 512 [ 262.913093][T12187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.930953][T12187] syz.3.2735: attempt to access beyond end of device [ 262.930953][T12187] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 263.276555][T12199] Cannot find del_set index 0 as target [ 263.290047][T12200] usb usb1: usbfs: process 12200 (syz.4.2738) did not claim interface 63 before use [ 263.305103][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 263.305118][ T29] audit: type=1400 audit(1738663450.354:12930): avc: denied { mount } for pid=12192 comm="syz.4.2738" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 263.333832][ T29] audit: type=1326 audit(1738663450.354:12931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 263.357523][ T29] audit: type=1326 audit(1738663450.354:12932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 263.381123][ T29] audit: type=1326 audit(1738663450.354:12933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 263.404826][ T29] audit: type=1326 audit(1738663450.354:12934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 263.428447][ T29] audit: type=1326 audit(1738663450.354:12935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 263.452125][ T29] audit: type=1326 audit(1738663450.354:12936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.4.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2541cda9 code=0x7ffc0000 [ 263.476019][ T29] audit: type=1326 audit(1738663450.434:12937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.5.2740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x0 [ 263.548233][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.678369][ T29] audit: type=1400 audit(1738663450.724:12938): avc: denied { getopt } for pid=12209 comm="syz.9.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.786936][ T29] audit: type=1326 audit(1738663450.834:12939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.4.2745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c2541cda9 code=0x0 [ 264.749392][T12247] lo speed is unknown, defaulting to 1000 [ 265.037747][T12260] loop9: detected capacity change from 0 to 2048 [ 265.091434][T12268] loop3: detected capacity change from 0 to 512 [ 265.115865][T12260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.131948][T12268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.181062][T12268] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.258867][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.343268][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.660764][T12288] Invalid ELF header magic: != ELF [ 265.673897][T12290] loop3: detected capacity change from 0 to 128 [ 265.746799][T12290] syz.3.2771: attempt to access beyond end of device [ 265.746799][T12290] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 265.803271][T12290] syz.3.2771: attempt to access beyond end of device [ 265.803271][T12290] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 265.824996][T12290] syz.3.2771: attempt to access beyond end of device [ 265.824996][T12290] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 265.840043][T12290] syz.3.2771: attempt to access beyond end of device [ 265.840043][T12290] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 265.864483][T12297] syz.3.2771: attempt to access beyond end of device [ 265.864483][T12297] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 265.889367][T12290] syz.3.2771: attempt to access beyond end of device [ 265.889367][T12290] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 265.914495][T12297] syz.3.2771: attempt to access beyond end of device [ 265.914495][T12297] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 265.950696][T12290] syz.3.2771: attempt to access beyond end of device [ 265.950696][T12290] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 265.975227][T12297] syz.3.2771: attempt to access beyond end of device [ 265.975227][T12297] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 265.988599][T12290] syz.3.2771: attempt to access beyond end of device [ 265.988599][T12290] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 266.322144][T12308] loop5: detected capacity change from 0 to 512 [ 266.713519][T12318] loop3: detected capacity change from 0 to 2048 [ 266.727787][T12308] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.755913][T12308] EXT4-fs (loop5): mount failed [ 266.780527][T12308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.786748][T12318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.830355][T12308] loop5: detected capacity change from 0 to 512 [ 266.872542][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.886086][T12308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.943727][T12308] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.980715][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.098849][T12344] loop5: detected capacity change from 0 to 128 [ 267.478439][T12357] loop9: detected capacity change from 0 to 2048 [ 267.692222][T12357] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.801656][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.974510][T12380] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.311879][T12390] lo speed is unknown, defaulting to 1000 [ 268.438146][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 268.438160][ T29] audit: type=1326 audit(1738663455.484:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12411 comm="syz.4.2809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c2541cda9 code=0x0 [ 268.471651][T12409] loop3: detected capacity change from 0 to 2048 [ 268.525078][T12409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.542476][T12390] chnl_net:caif_netlink_parms(): no params data found [ 268.602693][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.626540][T12390] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.633694][T12390] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.641384][T12390] bridge_slave_0: entered allmulticast mode [ 268.648165][T12390] bridge_slave_0: entered promiscuous mode [ 268.657641][T12390] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.664701][T12390] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.680194][T12390] bridge_slave_1: entered allmulticast mode [ 268.687044][T12390] bridge_slave_1: entered promiscuous mode [ 268.712554][ T29] audit: type=1326 audit(1738663455.754:13161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.722227][T12429] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.758742][T12390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.779052][T12390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.803555][ T29] audit: type=1326 audit(1738663455.754:13162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.827385][ T29] audit: type=1326 audit(1738663455.764:13163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.851205][ T29] audit: type=1326 audit(1738663455.764:13164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.875062][ T29] audit: type=1326 audit(1738663455.764:13165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.898805][ T29] audit: type=1326 audit(1738663455.764:13166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.922433][ T29] audit: type=1326 audit(1738663455.764:13167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.946215][ T29] audit: type=1326 audit(1738663455.764:13168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.969774][ T29] audit: type=1326 audit(1738663455.764:13169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 268.997608][T12390] team0: Port device team_slave_0 added [ 269.006691][T12390] team0: Port device team_slave_1 added [ 269.039751][T12390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.046791][T12390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.072840][T12390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.128040][T12434] loop3: detected capacity change from 0 to 2048 [ 269.131827][T12390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.141443][T12390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.167402][T12390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.296550][T12434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.461935][T12390] hsr_slave_0: entered promiscuous mode [ 269.498320][T12390] hsr_slave_1: entered promiscuous mode [ 269.514577][T12390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.524696][T12390] Cannot create hsr debugfs directory [ 269.554762][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.659091][T12390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.730115][T12390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.785849][T12464] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 269.855322][T12390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.935929][T12390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.039200][T12390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.078251][T12480] netlink: 157 bytes leftover after parsing attributes in process `syz.4.2831'. [ 270.112486][T12483] loop9: detected capacity change from 0 to 128 [ 270.149832][T12390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.168779][T12390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.190725][T12390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.289588][T12390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.341374][T12390] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.352235][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.359398][T10025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.391086][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.398187][T10025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.422227][T12390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.432859][T12390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.550134][T12390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.609598][T12496] loop3: detected capacity change from 0 to 2048 [ 270.743746][T12496] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.760900][T12483] bio_check_eod: 27211 callbacks suppressed [ 270.760922][T12483] syz.9.2832: attempt to access beyond end of device [ 270.760922][T12483] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 270.805459][T12486] syz.9.2832: attempt to access beyond end of device [ 270.805459][T12486] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 270.820100][T12390] veth0_vlan: entered promiscuous mode [ 270.835372][T12483] syz.9.2832: attempt to access beyond end of device [ 270.835372][T12483] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 270.849093][T12390] veth1_vlan: entered promiscuous mode [ 270.879164][T12486] syz.9.2832: attempt to access beyond end of device [ 270.879164][T12486] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 270.899657][T12390] veth0_macvtap: entered promiscuous mode [ 270.910484][T12483] syz.9.2832: attempt to access beyond end of device [ 270.910484][T12483] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 270.928021][T12390] veth1_macvtap: entered promiscuous mode [ 270.942412][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.952987][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.962985][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.973517][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.983493][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.992059][T12483] syz.9.2832: attempt to access beyond end of device [ 270.992059][T12483] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 270.994124][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.017411][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.027885][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.037784][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.048323][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.060161][T12483] syz.9.2832: attempt to access beyond end of device [ 271.060161][T12483] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 271.084674][T12390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.097026][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.107624][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.117570][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.128074][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.137988][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.148554][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.158456][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.170966][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.180839][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.191314][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.191331][T12390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.191345][T12390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.285775][T12390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.287109][T12390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.287192][T12390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.287226][T12390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.287256][T12390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.312259][T12522] loop3: detected capacity change from 0 to 2048 [ 271.430065][T12530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2847'. [ 271.464897][T12522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.605555][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.774371][T12542] loop5: detected capacity change from 0 to 512 [ 271.867193][T12542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.881077][T12542] syz.5.2845: attempt to access beyond end of device [ 271.881077][T12542] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 272.115000][T12547] loop1: detected capacity change from 0 to 128 [ 272.208292][T12549] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.212496][T12550] syz.1.2851: attempt to access beyond end of device [ 272.212496][T12550] loop1: rw=2049, sector=145, nr_sectors = 888 limit=128 [ 272.280859][T12547] syz.1.2851: attempt to access beyond end of device [ 272.280859][T12547] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 272.367481][T12560] bridge_slave_0: left allmulticast mode [ 272.373172][T12560] bridge_slave_0: left promiscuous mode [ 272.379046][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.450775][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.463975][T12560] bridge_slave_1: left allmulticast mode [ 272.469754][T12560] bridge_slave_1: left promiscuous mode [ 272.475600][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.496377][T12560] bond0: (slave bond_slave_0): Releasing backup interface [ 272.508700][T12560] bond0: (slave bond_slave_1): Releasing backup interface [ 272.544226][T12560] team0: Port device team_slave_0 removed [ 272.566925][T12560] team0: Port device team_slave_1 removed [ 272.574535][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.582169][T12560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.595970][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.603527][T12560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.655506][T12562] FAULT_INJECTION: forcing a failure. [ 272.655506][T12562] name failslab, interval 1, probability 0, space 0, times 0 [ 272.668214][T12562] CPU: 1 UID: 0 PID: 12562 Comm: syz.9.2858 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 272.668308][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 272.668323][T12562] Call Trace: [ 272.668329][T12562] [ 272.668336][T12562] dump_stack_lvl+0xf2/0x150 [ 272.668394][T12562] dump_stack+0x15/0x1a [ 272.668478][T12562] should_fail_ex+0x24a/0x260 [ 272.668553][T12562] ? ip_fib_metrics_init+0x65/0x480 [ 272.668588][T12562] should_failslab+0x8f/0xb0 [ 272.668619][T12562] __kmalloc_cache_noprof+0x4e/0x320 [ 272.668662][T12562] ip_fib_metrics_init+0x65/0x480 [ 272.668738][T12562] ? should_failslab+0x8f/0xb0 [ 272.668772][T12562] ? __kmalloc_noprof+0x1e3/0x3f0 [ 272.668808][T12562] fib_create_info+0x748/0x1550 [ 272.668841][T12562] fib_table_insert+0x10d/0xf90 [ 272.668929][T12562] ? fib_trie_table+0xce/0xf0 [ 272.668981][T12562] inet_rtm_newroute+0xa3/0x140 [ 272.669094][T12562] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 272.669196][T12562] rtnetlink_rcv_msg+0x6aa/0x710 [ 272.669230][T12562] ? ref_tracker_free+0x3a5/0x410 [ 272.669304][T12562] ? __dev_queue_xmit+0x186/0x2090 [ 272.669340][T12562] netlink_rcv_skb+0x12c/0x230 [ 272.669401][T12562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.669463][T12562] rtnetlink_rcv+0x1c/0x30 [ 272.669494][T12562] netlink_unicast+0x599/0x670 [ 272.669531][T12562] netlink_sendmsg+0x5cc/0x6e0 [ 272.669573][T12562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.669628][T12562] __sock_sendmsg+0x140/0x180 [ 272.669701][T12562] ____sys_sendmsg+0x312/0x410 [ 272.669802][T12562] __sys_sendmsg+0x19d/0x230 [ 272.669851][T12562] __x64_sys_sendmsg+0x46/0x50 [ 272.669885][T12562] x64_sys_call+0x2734/0x2dc0 [ 272.669928][T12562] do_syscall_64+0xc9/0x1c0 [ 272.669956][T12562] ? clear_bhb_loop+0x55/0xb0 [ 272.670000][T12562] ? clear_bhb_loop+0x55/0xb0 [ 272.670032][T12562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.670105][T12562] RIP: 0033:0x7fd04015cda9 [ 272.670128][T12562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.670224][T12562] RSP: 002b:00007fd03e7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.670246][T12562] RAX: ffffffffffffffda RBX: 00007fd040375fa0 RCX: 00007fd04015cda9 [ 272.670261][T12562] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 272.670275][T12562] RBP: 00007fd03e7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.670289][T12562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.670303][T12562] R13: 0000000000000000 R14: 00007fd040375fa0 R15: 00007ffc6163e038 [ 272.670325][T12562] [ 272.752587][T12578] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.138866][T12607] bridge0: port 3(syz_tun) entered blocking state [ 273.138932][T12607] bridge0: port 3(syz_tun) entered disabled state [ 273.139538][T12607] syz_tun: entered allmulticast mode [ 273.140528][T12607] syz_tun: entered promiscuous mode [ 273.140852][T12607] bridge0: port 3(syz_tun) entered blocking state [ 273.140886][T12607] bridge0: port 3(syz_tun) entered forwarding state [ 273.147832][T12607] loop1: detected capacity change from 0 to 512 [ 273.177266][T12607] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm GPL: bg 0: block 248: padding at end of block bitmap is not set [ 273.503915][T12625] loop9: detected capacity change from 0 to 512 [ 273.539992][T12625] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.542576][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 273.542593][ T29] audit: type=1400 audit(1738663460.564:13329): avc: denied { getopt } for pid=12621 comm="syz.3.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 273.569757][T12625] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.649957][T12607] Quota error (device loop1): write_blk: dquota write failed [ 273.657557][T12607] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 273.710873][T12607] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm GPL: Failed to acquire dquot type 1 [ 273.735865][T12632] loop3: detected capacity change from 0 to 128 [ 273.736980][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.743030][ T29] audit: type=1326 audit(1738663460.754:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f3c8cda9 code=0x7ffc0000 [ 273.774809][ T29] audit: type=1326 audit(1738663460.754:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f78f3c8cda9 code=0x7ffc0000 [ 273.798391][ T29] audit: type=1326 audit(1738663460.754:13332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f3c8cda9 code=0x7ffc0000 [ 273.822006][ T29] audit: type=1326 audit(1738663460.754:13333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f78f3c8cda9 code=0x7ffc0000 [ 273.845677][ T29] audit: type=1326 audit(1738663460.754:13334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f3c8cda9 code=0x7ffc0000 [ 273.869288][ T29] audit: type=1326 audit(1738663460.754:13335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f3c8cda9 code=0x7ffc0000 [ 273.892895][ T29] audit: type=1326 audit(1738663460.754:13336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12631 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f3c8cda9 code=0x7ffc0000 [ 273.924036][T12607] EXT4-fs (loop1): 1 truncate cleaned up [ 273.930390][T12607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.994749][T12607] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.073627][T12390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.170561][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2883'. [ 274.430817][T12657] loop9: detected capacity change from 0 to 1024 [ 274.465662][T12657] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 274.513180][T12657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 274.525960][T12657] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 274.537388][T12665] loop1: detected capacity change from 0 to 512 [ 274.564408][T12660] loop5: detected capacity change from 0 to 2048 [ 274.575335][T12665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.590356][T12657] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.612630][T12665] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.649060][T12660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.677572][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.694736][T12390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.842491][T12687] loop1: detected capacity change from 0 to 2048 [ 274.846833][T12689] loop3: detected capacity change from 0 to 2048 [ 274.868836][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.903420][T12687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.946679][T12689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.405527][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2922'. [ 275.414587][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2922'. [ 275.442201][T12738] lo speed is unknown, defaulting to 1000 [ 275.454235][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2923'. [ 275.632710][T12753] loop3: detected capacity change from 0 to 512 [ 275.733615][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2929'. [ 275.790589][T12770] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2932'. [ 275.871836][T12778] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.892960][T12772] lo speed is unknown, defaulting to 1000 [ 275.989232][T12776] lo speed is unknown, defaulting to 1000 [ 276.249960][T12806] loop9: detected capacity change from 0 to 512 [ 276.262812][T12806] EXT4-fs: dax option not supported [ 276.281706][T12806] FAULT_INJECTION: forcing a failure. [ 276.281706][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.294840][T12806] CPU: 0 UID: 0 PID: 12806 Comm: syz.9.2944 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 276.294878][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 276.294896][T12806] Call Trace: [ 276.294903][T12806] [ 276.294912][T12806] dump_stack_lvl+0xf2/0x150 [ 276.294944][T12806] dump_stack+0x15/0x1a [ 276.295080][T12806] should_fail_ex+0x24a/0x260 [ 276.295119][T12806] should_fail+0xb/0x10 [ 276.295155][T12806] should_fail_usercopy+0x1a/0x20 [ 276.295174][T12806] _copy_from_user+0x1c/0xa0 [ 276.295196][T12806] get_user_ifreq+0x8c/0x160 [ 276.295325][T12806] sock_do_ioctl+0xc6/0x260 [ 276.295367][T12806] sock_ioctl+0x40f/0x600 [ 276.295406][T12806] ? __pfx_sock_ioctl+0x10/0x10 [ 276.295451][T12806] __se_sys_ioctl+0xc9/0x140 [ 276.295477][T12806] __x64_sys_ioctl+0x43/0x50 [ 276.295496][T12806] x64_sys_call+0x1690/0x2dc0 [ 276.295521][T12806] do_syscall_64+0xc9/0x1c0 [ 276.295545][T12806] ? clear_bhb_loop+0x55/0xb0 [ 276.295606][T12806] ? clear_bhb_loop+0x55/0xb0 [ 276.295672][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.295701][T12806] RIP: 0033:0x7fd04015cda9 [ 276.295716][T12806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.295734][T12806] RSP: 002b:00007fd03e7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.295755][T12806] RAX: ffffffffffffffda RBX: 00007fd040375fa0 RCX: 00007fd04015cda9 [ 276.295769][T12806] RDX: 0000000020000340 RSI: 0000000000008946 RDI: 000000000000000e [ 276.295808][T12806] RBP: 00007fd03e7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.295822][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.295845][T12806] R13: 0000000000000000 R14: 00007fd040375fa0 R15: 00007ffc6163e038 [ 276.295869][T12806] [ 276.528123][T12808] loop1: detected capacity change from 0 to 512 [ 276.534663][T12808] EXT4-fs: dax option not supported [ 276.544659][T12808] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 276.553025][T12808] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 276.895968][T12833] loop3: detected capacity change from 0 to 512 [ 276.928198][T12831] loop9: detected capacity change from 0 to 2048 [ 277.144179][T12837] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.480905][T12849] netlink: 'syz.1.2961': attribute type 27 has an invalid length. [ 277.595935][T12849] bridge0: port 3(syz_tun) entered disabled state [ 277.606085][T12849] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.613423][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.667575][T12849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.678575][T12849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.712171][T12849] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.721188][T12849] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.730278][T12849] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.739440][T12849] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.752560][T12857] bridge0: entered allmulticast mode [ 277.878037][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2973'. [ 277.919554][T12867] lo speed is unknown, defaulting to 1000 [ 277.925915][T12884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 278.198666][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2981'. [ 278.237079][T12901] loop5: detected capacity change from 0 to 512 [ 278.256160][T12901] bio_check_eod: 16587 callbacks suppressed [ 278.256239][T12901] syz.5.2979: attempt to access beyond end of device [ 278.256239][T12901] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 278.335964][T12919] 9pnet_fd: Insufficient options for proto=fd [ 278.351565][T12919] loop3: detected capacity change from 0 to 512 [ 278.380238][T12919] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.439548][T12929] loop9: detected capacity change from 0 to 2048 [ 278.492920][T12929] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.700602][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2994'. [ 278.831430][ T3366] IPVS: starting estimator thread 0... [ 278.879456][T12959] 9pnet_fd: Insufficient options for proto=fd [ 278.889760][T12959] loop1: detected capacity change from 0 to 512 [ 278.907499][T12959] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.924975][T12955] IPVS: using max 2352 ests per chain, 117600 per kthread [ 279.047788][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 279.047805][ T29] audit: type=1326 audit(1738663466.094:13591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.077689][ T29] audit: type=1326 audit(1738663466.094:13592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.106711][T12969] loop5: detected capacity change from 0 to 512 [ 279.109281][T12967] loop9: detected capacity change from 0 to 2048 [ 279.113688][T12969] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.126382][ T29] audit: type=1326 audit(1738663466.154:13593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.150083][ T29] audit: type=1326 audit(1738663466.154:13594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.173902][ T29] audit: type=1326 audit(1738663466.154:13595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.197539][ T29] audit: type=1326 audit(1738663466.154:13596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.221229][ T29] audit: type=1326 audit(1738663466.154:13597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.244846][ T29] audit: type=1326 audit(1738663466.154:13598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.268473][ T29] audit: type=1326 audit(1738663466.154:13599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.282005][T12969] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3002: corrupted in-inode xattr: invalid ea_ino [ 279.292106][ T29] audit: type=1326 audit(1738663466.154:13600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.5.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 279.296340][T12972] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.338139][T12969] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3002: couldn't read orphan inode 15 (err -117) [ 279.502507][T12980] syzkaller0: left promiscuous mode [ 279.538897][T12980] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 279.776832][T13000] lo speed is unknown, defaulting to 1000 [ 279.956535][T13004] 9pnet_virtio: no channels available for device 127.0.0.1 [ 280.053135][T13000] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 280.059677][T13000] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 280.067536][T13000] vhci_hcd vhci_hcd.0: Device attached [ 280.101619][T13005] vhci_hcd: connection closed [ 280.102012][ T40] vhci_hcd: stop threads [ 280.111015][ T40] vhci_hcd: release socket [ 280.115508][ T40] vhci_hcd: disconnect device [ 280.498082][T13016] SELinux: syz.1.3018 (13016) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 280.605527][T13020] loop1: detected capacity change from 0 to 2048 [ 280.682240][T13031] loop3: detected capacity change from 0 to 512 [ 280.710279][T13020] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.761064][T13041] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.762643][T13031] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3024: bg 0: block 248: padding at end of block bitmap is not set [ 280.807312][T13031] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3024: Failed to acquire dquot type 1 [ 280.859284][T13031] EXT4-fs (loop3): 1 truncate cleaned up [ 280.878765][T13031] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.308002][T13072] FAULT_INJECTION: forcing a failure. [ 281.308002][T13072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.321117][T13072] CPU: 0 UID: 0 PID: 13072 Comm: syz.3.3038 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 281.321149][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 281.321188][T13072] Call Trace: [ 281.321196][T13072] [ 281.321204][T13072] dump_stack_lvl+0xf2/0x150 [ 281.321239][T13072] dump_stack+0x15/0x1a [ 281.321309][T13072] should_fail_ex+0x24a/0x260 [ 281.321351][T13072] should_fail+0xb/0x10 [ 281.321433][T13072] should_fail_usercopy+0x1a/0x20 [ 281.321451][T13072] _copy_to_user+0x20/0xa0 [ 281.321474][T13072] simple_read_from_buffer+0xa0/0x110 [ 281.321568][T13072] proc_fail_nth_read+0xf9/0x140 [ 281.321600][T13072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.321677][T13072] vfs_read+0x19b/0x6f0 [ 281.321701][T13072] ? __rcu_read_unlock+0x4e/0x70 [ 281.321727][T13072] ? __fget_files+0x17c/0x1c0 [ 281.321776][T13072] ksys_read+0xe8/0x1b0 [ 281.321803][T13072] __x64_sys_read+0x42/0x50 [ 281.321823][T13072] x64_sys_call+0x2874/0x2dc0 [ 281.321914][T13072] do_syscall_64+0xc9/0x1c0 [ 281.322010][T13072] ? clear_bhb_loop+0x55/0xb0 [ 281.322040][T13072] ? clear_bhb_loop+0x55/0xb0 [ 281.322088][T13072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.322121][T13072] RIP: 0033:0x7f78f3c8b7bc [ 281.322139][T13072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 281.322178][T13072] RSP: 002b:00007f78f22f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.322197][T13072] RAX: ffffffffffffffda RBX: 00007f78f3ea5fa0 RCX: 00007f78f3c8b7bc [ 281.322209][T13072] RDX: 000000000000000f RSI: 00007f78f22f70a0 RDI: 0000000000000004 [ 281.322220][T13072] RBP: 00007f78f22f7090 R08: 0000000000000000 R09: 0000000000000000 [ 281.322231][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.322274][T13072] R13: 0000000000000000 R14: 00007f78f3ea5fa0 R15: 00007ffe6c1897c8 [ 281.322298][T13072] [ 281.547414][T13075] loop5: detected capacity change from 0 to 164 [ 281.563124][T13075] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 281.597375][T13076] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 281.636695][T13080] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 281.678570][T13076] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 281.690143][T13075] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 281.780405][T13090] loop3: detected capacity change from 0 to 2048 [ 281.835478][T13090] loop3: p2 < > p4 [ 281.844394][T13090] loop3: p4 size 8192 extends beyond EOD, truncated [ 281.867756][T13090] pimreg: entered allmulticast mode [ 282.063998][T13090] lo speed is unknown, defaulting to 1000 [ 282.463471][T13108] lo speed is unknown, defaulting to 1000 [ 282.531518][T13110] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.893775][T13121] loop5: detected capacity change from 0 to 512 [ 282.910855][T13121] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.187045][T13129] loop1: detected capacity change from 0 to 128 [ 283.368882][T13129] syz.1.3059: attempt to access beyond end of device [ 283.368882][T13129] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 283.419953][T13129] syz.1.3059: attempt to access beyond end of device [ 283.419953][T13129] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 283.459810][T13129] syz.1.3059: attempt to access beyond end of device [ 283.459810][T13129] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.473928][T13129] syz.1.3059: attempt to access beyond end of device [ 283.473928][T13129] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.548575][T13149] syz.1.3059: attempt to access beyond end of device [ 283.548575][T13149] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.561851][T13129] syz.1.3059: attempt to access beyond end of device [ 283.561851][T13129] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.571112][T13153] loop5: detected capacity change from 0 to 2048 [ 283.592632][T13149] syz.1.3059: attempt to access beyond end of device [ 283.592632][T13149] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.648020][T13129] syz.1.3059: attempt to access beyond end of device [ 283.648020][T13129] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.648073][T13129] syz.1.3059: attempt to access beyond end of device [ 283.648073][T13129] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.648167][T13129] syz.1.3059: attempt to access beyond end of device [ 283.648167][T13129] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.682309][T13153] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.814422][T13159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21184 sclass=netlink_route_socket pid=13159 comm=syz.5.3067 [ 283.815835][T13157] loop9: detected capacity change from 0 to 2048 [ 284.082978][T13155] EXT4-fs error (device loop9): __ext4_iget:4984: inode #12: block 2: comm syz.9.3066: invalid block [ 284.553273][T13180] loop9: detected capacity change from 0 to 512 [ 284.875900][T13148] loop3: detected capacity change from 0 to 2048 [ 285.152274][T13187] loop1: detected capacity change from 0 to 512 [ 285.303262][ T7402] EXT4-fs unmount: 21 callbacks suppressed [ 285.303280][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.332674][T13187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.370459][T13148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.680877][T13199] loop9: detected capacity change from 0 to 2048 [ 285.752351][T12390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.782793][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 285.782810][ T29] audit: type=1326 audit(1738663472.824:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 285.788218][T13199] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.789055][ T29] audit: type=1326 audit(1738663472.824:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 285.843131][ T29] audit: type=1326 audit(1738663472.824:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 285.867266][ T29] audit: type=1326 audit(1738663472.824:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 285.890876][ T29] audit: type=1326 audit(1738663472.824:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 285.914598][ T29] audit: type=1326 audit(1738663472.824:13826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 285.938426][ T29] audit: type=1326 audit(1738663472.824:13827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 285.962179][ T29] audit: type=1326 audit(1738663472.824:13828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 285.985750][ T29] audit: type=1326 audit(1738663472.824:13829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 286.009463][ T29] audit: type=1326 audit(1738663472.824:13830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13198 comm="syz.9.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd04015cda9 code=0x7ffc0000 [ 286.163771][T13207] loop1: detected capacity change from 0 to 512 [ 286.194936][T13207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.240679][T13207] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.348092][T12390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.376483][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.498525][T13212] lo speed is unknown, defaulting to 1000 [ 287.284858][T13235] loop3: detected capacity change from 0 to 2048 [ 287.378196][T13235] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.427750][T13248] loop5: detected capacity change from 0 to 2048 [ 287.467741][T13248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.560586][T13262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3100'. [ 287.683337][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.774003][T13267] lo speed is unknown, defaulting to 1000 [ 287.911133][T13278] loop3: detected capacity change from 0 to 512 [ 287.957618][T13278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.426581][T13287] loop5: detected capacity change from 0 to 512 [ 288.509106][T13287] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3109: bg 0: block 248: padding at end of block bitmap is not set [ 288.568671][T13287] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3109: Failed to acquire dquot type 1 [ 288.593765][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.616115][T13287] EXT4-fs (loop5): 1 truncate cleaned up [ 288.622274][T13287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.643871][T13287] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.721617][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.742467][T13301] loop1: detected capacity change from 0 to 512 [ 288.802016][T13314] FAULT_INJECTION: forcing a failure. [ 288.802016][T13314] name failslab, interval 1, probability 0, space 0, times 0 [ 288.814703][T13314] CPU: 0 UID: 0 PID: 13314 Comm: syz.5.3116 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 288.814733][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 288.814746][T13314] Call Trace: [ 288.814753][T13314] [ 288.814762][T13314] dump_stack_lvl+0xf2/0x150 [ 288.814925][T13314] dump_stack+0x15/0x1a [ 288.814951][T13314] should_fail_ex+0x24a/0x260 [ 288.814994][T13314] should_failslab+0x8f/0xb0 [ 288.815034][T13314] kmem_cache_alloc_noprof+0x52/0x320 [ 288.815066][T13314] ? security_inode_alloc+0x37/0x100 [ 288.815107][T13314] security_inode_alloc+0x37/0x100 [ 288.815142][T13314] inode_init_always_gfp+0x4a2/0x4f0 [ 288.815175][T13314] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 288.815216][T13314] alloc_inode+0x82/0x160 [ 288.815301][T13314] new_inode+0x1e/0x100 [ 288.815335][T13314] shmem_get_inode+0x24e/0x730 [ 288.815405][T13314] __shmem_file_setup+0x127/0x1f0 [ 288.815443][T13314] shmem_file_setup+0x3b/0x50 [ 288.815479][T13314] __se_sys_memfd_create+0x2e1/0x5a0 [ 288.815506][T13314] __x64_sys_memfd_create+0x31/0x40 [ 288.815581][T13314] x64_sys_call+0x2d4c/0x2dc0 [ 288.815614][T13314] do_syscall_64+0xc9/0x1c0 [ 288.815642][T13314] ? clear_bhb_loop+0x55/0xb0 [ 288.815767][T13314] ? clear_bhb_loop+0x55/0xb0 [ 288.815800][T13314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.815834][T13314] RIP: 0033:0x7f072c65cda9 [ 288.815852][T13314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.815874][T13314] RSP: 002b:00007f072acc6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 288.815963][T13314] RAX: ffffffffffffffda RBX: 0000000000000563 RCX: 00007f072c65cda9 [ 288.815976][T13314] RDX: 00007f072acc6ef0 RSI: 0000000000000000 RDI: 00007f072c6dec51 [ 288.815990][T13314] RBP: 0000000020000f80 R08: 00007f072acc6bb7 R09: 00007f072acc6e40 [ 288.816004][T13314] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000540 [ 288.816019][T13314] R13: 00007f072acc6ef0 R14: 00007f072acc6eb0 R15: 0000000020000140 [ 288.816040][T13314] [ 289.027807][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3114'. [ 289.040932][T13308] loop9: detected capacity change from 0 to 512 [ 289.056276][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3114'. [ 289.083784][T13308] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.097082][T13308] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.142703][T13325] loop1: detected capacity change from 0 to 128 [ 289.189868][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.265499][T13339] bio_check_eod: 7154 callbacks suppressed [ 289.265517][T13339] syz.1.3120: attempt to access beyond end of device [ 289.265517][T13339] loop1: rw=2049, sector=145, nr_sectors = 160 limit=128 [ 289.300373][T13340] loop9: detected capacity change from 0 to 512 [ 289.328138][T13325] syz.1.3120: attempt to access beyond end of device [ 289.328138][T13325] loop1: rw=524288, sector=145, nr_sectors = 160 limit=128 [ 289.328556][T13340] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3127: bg 0: block 248: padding at end of block bitmap is not set [ 289.368059][T13325] syz.1.3120: attempt to access beyond end of device [ 289.368059][T13325] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 289.390745][T13339] syz.1.3120: attempt to access beyond end of device [ 289.390745][T13339] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 289.424608][T13325] syz.1.3120: attempt to access beyond end of device [ 289.424608][T13325] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 289.437961][T13339] syz.1.3120: attempt to access beyond end of device [ 289.437961][T13339] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 289.451639][T13340] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3127: Failed to acquire dquot type 1 [ 289.480527][T13325] syz.1.3120: attempt to access beyond end of device [ 289.480527][T13325] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 289.495255][T13340] EXT4-fs (loop9): 1 truncate cleaned up [ 289.501349][T13340] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.511371][T13325] syz.1.3120: attempt to access beyond end of device [ 289.511371][T13325] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 289.521066][T13340] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.529480][T13325] syz.1.3120: attempt to access beyond end of device [ 289.529480][T13325] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 289.592781][T13325] syz.1.3120: attempt to access beyond end of device [ 289.592781][T13325] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 289.622048][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.728104][T13355] tipc: Started in network mode [ 289.733058][T13355] tipc: Node identity ac14140f, cluster identity 4711 [ 289.741112][T13355] tipc: New replicast peer: 255.255.255.255 [ 289.747549][T13355] tipc: Enabled bearer , priority 10 [ 290.260196][T13401] loop9: detected capacity change from 0 to 512 [ 290.359241][T13412] FAULT_INJECTION: forcing a failure. [ 290.359241][T13412] name failslab, interval 1, probability 0, space 0, times 0 [ 290.371959][T13412] CPU: 0 UID: 0 PID: 13412 Comm: syz.5.3152 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 290.371990][T13412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 290.372005][T13412] Call Trace: [ 290.372013][T13412] [ 290.372023][T13412] dump_stack_lvl+0xf2/0x150 [ 290.372052][T13412] dump_stack+0x15/0x1a [ 290.372077][T13412] should_fail_ex+0x24a/0x260 [ 290.372118][T13412] should_failslab+0x8f/0xb0 [ 290.372147][T13412] kmem_cache_alloc_noprof+0x52/0x320 [ 290.372184][T13412] ? vm_area_dup+0x98/0x130 [ 290.372213][T13412] vm_area_dup+0x98/0x130 [ 290.372238][T13412] copy_mm+0x749/0x12d0 [ 290.372270][T13412] copy_process+0xd5b/0x1fb0 [ 290.372304][T13412] kernel_clone+0x167/0x5e0 [ 290.372338][T13412] ? __rcu_read_unlock+0x4e/0x70 [ 290.372360][T13412] __x64_sys_clone+0xe8/0x120 [ 290.372393][T13412] x64_sys_call+0x2d7e/0x2dc0 [ 290.372425][T13412] do_syscall_64+0xc9/0x1c0 [ 290.372448][T13412] ? clear_bhb_loop+0x55/0xb0 [ 290.372475][T13412] ? clear_bhb_loop+0x55/0xb0 [ 290.372522][T13412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.372553][T13412] RIP: 0033:0x7f072c65cda9 [ 290.372567][T13412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.372584][T13412] RSP: 002b:00007f072acc6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 290.372601][T13412] RAX: ffffffffffffffda RBX: 00007f072c875fa0 RCX: 00007f072c65cda9 [ 290.372619][T13412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040004000 [ 290.372634][T13412] RBP: 00007f072acc7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.372648][T13412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 290.372662][T13412] R13: 0000000000000000 R14: 00007f072c875fa0 R15: 00007fff04c6db58 [ 290.372681][T13412] [ 290.476579][T13401] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3148: bg 0: block 248: padding at end of block bitmap is not set [ 290.580774][T13401] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3148: Failed to acquire dquot type 1 [ 290.596175][T13401] EXT4-fs (loop9): 1 truncate cleaned up [ 290.602491][T13401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.648685][T13420] loop3: detected capacity change from 0 to 512 [ 290.652935][T13401] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.681618][T13423] loop5: detected capacity change from 0 to 1024 [ 290.689017][T13420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.704598][T13423] EXT4-fs: Ignoring removed nobh option [ 290.710369][T13423] EXT4-fs: Ignoring removed bh option [ 290.714480][T13420] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.743333][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.788571][T13423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.793976][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3160'. [ 290.813074][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 290.813091][ T29] audit: type=1400 audit(1738663477.864:13988): avc: denied { quotaon } for pid=13421 comm="syz.5.3157" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 290.850497][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.865179][ T4920] tipc: Node number set to 2886997007 [ 290.936178][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.948584][T13442] loop9: detected capacity change from 0 to 512 [ 290.969968][T13442] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.3164: casefold flag without casefold feature [ 290.970123][T13442] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.3164: couldn't read orphan inode 15 (err -117) [ 290.970669][T13442] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.003142][T13449] loop5: detected capacity change from 0 to 512 [ 291.032821][T13449] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.036814][ T29] audit: type=1400 audit(1738663478.084:13989): avc: denied { setattr } for pid=13441 comm="syz.9.3164" name="file0" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 291.057241][T13449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.061111][T13449] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.3165: corrupted inode contents [ 291.167133][T13449] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.3165: mark_inode_dirty error [ 291.167929][ T7402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.199971][T13449] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.3165: corrupted inode contents [ 291.273320][T13463] loop3: detected capacity change from 0 to 512 [ 291.275666][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.314439][T13463] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3171: bg 0: block 248: padding at end of block bitmap is not set [ 291.361126][T13471] loop5: detected capacity change from 0 to 512 [ 291.370843][T13463] Quota error (device loop3): write_blk: dquota write failed [ 291.378442][T13463] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 291.448302][T13471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.467219][T13463] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3171: Failed to acquire dquot type 1 [ 291.475035][T13471] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.502969][T13463] EXT4-fs (loop3): 1 truncate cleaned up [ 291.525303][T13463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.545347][ T3654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.582702][T13463] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.621766][ T29] audit: type=1400 audit(1738663478.664:13990): avc: denied { mount } for pid=13488 comm="syz.9.3179" name="/" dev="rpc_pipefs" ino=34625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 291.655872][T13489] loop9: detected capacity change from 0 to 256 [ 291.662454][T13489] vfat: Unknown parameter '1$E"wÈ}a̝Fwn"D*@ڍBr79 :t o!kWҤ@>섅ɮ' [ 291.688875][T13491] loop5: detected capacity change from 0 to 256 [ 291.713583][T13491] FAT-fs (loop5): bogus number of FAT sectors [ 291.719792][T13491] FAT-fs (loop5): Can't find a valid FAT filesystem [ 291.732810][T10473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.788291][T13494] sch_tbf: burst 3282 is lower than device lo mtu (65550) ! [ 291.801660][T13489] lo speed is unknown, defaulting to 1000 [ 291.913758][ T29] audit: type=1400 audit(1738663478.954:13991): avc: denied { ioctl } for pid=13504 comm="syz.3.3185" path="socket:[35535]" dev="sockfs" ino=35535 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 292.017373][ T29] audit: type=1326 audit(1738663479.024:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.5.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 292.041015][ T29] audit: type=1326 audit(1738663479.024:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.5.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 292.064657][ T29] audit: type=1326 audit(1738663479.034:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.5.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 292.088280][ T29] audit: type=1326 audit(1738663479.034:13995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz.5.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072c65cda9 code=0x7ffc0000 [ 292.148063][T13514] loop9: detected capacity change from 0 to 128 [ 292.399888][T13524] loop1: detected capacity change from 0 to 128 [ 292.464303][T13528] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3193'. [ 293.233390][T13561] FAULT_INJECTION: forcing a failure. [ 293.233390][T13561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 293.246689][T13561] CPU: 0 UID: 0 PID: 13561 Comm: syz.9.3203 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 293.246754][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 293.246768][T13561] Call Trace: [ 293.246775][T13561] [ 293.246784][T13561] dump_stack_lvl+0xf2/0x150 [ 293.246819][T13561] dump_stack+0x15/0x1a [ 293.246919][T13561] should_fail_ex+0x24a/0x260 [ 293.246962][T13561] should_fail_alloc_page+0xfd/0x110 [ 293.246997][T13561] __alloc_frozen_pages_noprof+0x109/0x340 [ 293.247063][T13561] alloc_pages_mpol+0xb4/0x260 [ 293.247098][T13561] vma_alloc_folio_noprof+0x1a0/0x310 [ 293.247138][T13561] handle_mm_fault+0xdd7/0x2ac0 [ 293.247240][T13561] exc_page_fault+0x3b9/0x650 [ 293.247267][T13561] asm_exc_page_fault+0x26/0x30 [ 293.247307][T13561] RIP: 0033:0x7fd04010a3db [ 293.247325][T13561] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 293.247343][T13561] RSP: 002b:00007fd03e7c4e10 EFLAGS: 00010246 [ 293.247402][T13561] RAX: 00007fd03e7c6f30 RBX: 00007fd04034c620 RCX: 0000000000000000 [ 293.247418][T13561] RDX: 00007fd03e7c6f78 RSI: 00007fd0401bcbd8 RDI: 00007fd03e7c4e30 [ 293.247433][T13561] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 293.247447][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.247462][T13561] R13: 0000000000000000 R14: 00007fd040375fa0 R15: 00007ffc6163e038 [ 293.247536][T13561] [ 293.247546][T13561] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 293.467874][T13562] ================================================================== [ 293.475985][T13562] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 293.482776][T13562] [ 293.485096][T13562] write to 0xffff888111fe1c78 of 8 bytes by task 13567 on cpu 1: [ 293.492828][T13562] vms_clear_ptes+0x1a2/0x300 [ 293.497529][T13562] mmap_region+0x659/0x1620 [ 293.502051][T13562] do_mmap+0x98a/0xc30 [ 293.506129][T13562] vm_mmap_pgoff+0x16d/0x2d0 [ 293.510728][T13562] ksys_mmap_pgoff+0x286/0x330 [ 293.515496][T13562] x64_sys_call+0x1940/0x2dc0 [ 293.520187][T13562] do_syscall_64+0xc9/0x1c0 [ 293.524701][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.530602][T13562] [ 293.532925][T13562] read to 0xffff888111fe1c78 of 8 bytes by task 13562 on cpu 0: [ 293.540564][T13562] getrusage+0xa15/0xb70 [ 293.544820][T13562] io_sq_thread+0x5f9/0x1100 [ 293.549425][T13562] ret_from_fork+0x4b/0x60 [ 293.553847][T13562] ret_from_fork_asm+0x1a/0x30 [ 293.558625][T13562] [ 293.560949][T13562] value changed: 0x00000000000014e5 -> 0x00000000000015ef [ 293.568051][T13562] [ 293.570373][T13562] Reported by Kernel Concurrency Sanitizer on: [ 293.576525][T13562] CPU: 0 UID: 0 PID: 13562 Comm: iou-sqp-13561 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 293.587558][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 293.597617][T13562] ==================================================================