last executing test programs: 31m17.146435764s ago: executing program 32 (id=2276): r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x140, 0x0, 0x0, 0x8, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21881e, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc}, {@block_validity}]}, 0x1, 0x514, &(0x7f0000000340)="$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") r1 = eventfd(0x800a6) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r2, 0x60ab, 0x0, 0x31, 0x0, 0x9) r6 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000008c0)='devlink_health_reporter_state_update\x00'}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB="df5b"]) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x18) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000880)={0x22, 0x7, 0x8, 0x38b9, 0x14, 0x5, &(0x7f0000000240)="212fd0f51ba40fee2ef788514bcac3a582480dc0"}) futex(0x0, 0xb, 0x40000002, 0x0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0xfffffffffffdfffb) socket$inet_smc(0x2b, 0x1, 0x0) 27m5.295591857s ago: executing program 33 (id=5327): syz_io_uring_setup(0x8512f, &(0x7f0000000180)={0x0, 0x42c5, 0x80, 0x3, 0x11a}, &(0x7f0000000000), &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xf1, 0x6, 0x81, 0x9, 0x2, 0x3e, 0x4, 0x3b8, 0x40, 0x35, 0x9e5f, 0xf0, 0x38, 0x3, 0xff, 0x8, 0x9}, [{0x1, 0xff, 0x9ad3, 0x0, 0x1, 0x40, 0x8, 0x7}, {0x4, 0x3, 0x2, 0x4, 0x5f56, 0x0, 0xff, 0x1}, {0x60000004, 0x6, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x4, 0x7}], "4d14d68662ad9766f1b46e5ed4d63716e99b5426c72aea6c2f2e9b4337cc61a9f49ca8d67e38c238737cae7ac670b35f35037afec5f6bf6fa011467e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x824) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{}, &(0x7f0000001380), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) unshare(0x68040200) perf_event_open(0x0, 0x0, 0x0, r2, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) 26m33.140342391s ago: executing program 34 (id=5662): r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000800)) syz_clone(0x80104000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0xd0, 0x7fff, r7}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001140)={0x0, 0x1}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0xc, 0xffffffff, 0x5, 0x0, 0x8, 0x3, 0x9, {0x0, @in6={{0xa, 0x4e22, 0x2, @mcast2, 0xeb07}}, 0x9, 0xa56, 0xff, 0xe}}, &(0x7f0000001c40)=0xb0) sendmmsg$inet_sctp(r0, &(0x7f0000001d80)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)="cc9ad7662ae6bc059e63286af24ac4e77d9a8c0b2c9a34e8b7f8d3b1ad2286f1379a54e609ef125fed5e5918345ab678a29c9ffeb14b268306a6d7c80802afbdfbc7d01874d003c273be6302a644ad1daee6cf10d2a9ff778d73a492b3c05295c16c60695b2e782f4bacbb486f8b024ef8a045c9b9d7e209d0882fcad0a46a209de0ef1796e793432002ff86e2aee72d2ac8f6fd052328454e33a38e23ebb66721c787e6dad89b4b92ba5ee26fa96216acb2760e4e382791d4618daf91e695689655c11f0dbfa7a577d2a99cf3340724da81beaa09a9e9311fa25fab6e255027d9ab75202d4f94974c3bb4e01f3c7e844b24fa", 0xf3}, {&(0x7f0000000340)="0ea6515b0f7cd8c1de45258e6ecab8859635f99d5b59119861e522a9b0c924112ca6e4e5b773d532d3388b1e016351112bf1a0c3c86891587e93001222acecda7fd33bd978eaa5c84d64844024ae786d893a27f8d3fecad798e7ced181d5ed1792bc20021288653e04cd57297f1823", 0x6f}, {&(0x7f00000003c0)="24fc633e74dda0cdacd1ebeb2b3e447630874b022970c08e9c0ef525f17d9797c852743cf2c365623650bc1bb6b11c4a22723f458bdc61637a3d4cdf21318f74eac46365b0a88214f5a4f1d77efcfbcb8a21801af70c677d95be36f9d9f5d54fc7c7e609bf8f1557bf297e7f64d66feb22a92e022d5ed4af1e35a767eaf76b016d87e4029b4d3baed69750ef95bb18e7e3452b4bb0f7ea0514dec5bb3e89675b5c3133cf8020177f7e7e72369e1e99a9dbfc2873716ba3b382631172bf95407b574c4620984a7e12dc0d6e8a9317730d0d5e6d14a713397e8bbda6e15382178bfa1e7ca56a6f34afb13a", 0xea}, {&(0x7f00000004c0)="9a92e16603fabfe30fca6481a638acbbaa1c311f496c04d329268168e435acb3571745e2f8ae1160faced76801b8f5db3e9e32d48aa07f5ddfe9632b3b0da67118009e3ea01a7c3ea1806029076830ecb97490098675e58a38f90f4a494d1f8820a81de88f561626033e4381560e4d05f62b4778456af0a6fa5a601edb87efd0bbfea5d8f791b7ad29afb338af411466f71a90ee222f11b1148cfe771432ad8a123cba34111508ed52b45d765e7e2ac83107aaa142279af4130d97b78aed14f4651b3cbdeae0c5b516", 0xc9}, {&(0x7f00000005c0)="3f9d80f646c4117c85991ca7788f7e34400e1a1ba8c75f1db7f7b546e97157bd512e9bd928aebf48c13e8c50259785a386ef5850612868e6099a546748b55a3d20057f0d60d08b7ec25d0b5744f4ed0d316f5dbee7510116d7bd4237a661b19f6a4787bdde49b709ab603f69de8ecfea8baea4d05a11d90b4d744648aa446ea34fe98513fa522897119fe553d7884e32abdd56487e7594921b0eda238e065139c962704e170bcc1a4ccdcaf4c7d1ea146c413a8c4a6d5ccec34894616789f66f1301796c6853c7f84c33847a138be603f4cbf7c6", 0xd4}, {&(0x7f0000000200)="032e68bbed1278063bc4f454df1a86277e9877c6b07067aa016835fc27c3fd91cc225d1ea75c90a255ee84c609c9b5e204a4f3a055cb6d49d852bf0157", 0x3d}], 0x6, &(0x7f0000000840)=[@authinfo={0x18, 0x84, 0x6, {0xb6fe}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndrcv={0x30, 0x84, 0x1, {0x14, 0xd162, 0x5, 0xdab, 0x1, 0x6, 0x1774613d, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x78, 0x20044040}, {&(0x7f00000008c0)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000b00)="6a57980164b095deff20e104490f6f356e7515c8655deec4c85d2dc5c39e3aeccd621d782a7c41e76f42a5734acab4327cba72916d07926813c97126fa73b5ee6b25b7b13a134bc37813f2f3e721c25089e47d7587376fb6d5af9ec9efb4e80010b53bf3530b75d63613041901bcae7edddd5482086f8dd9965ba1ca047ea5f8196725f871f62009eabc39db077aa0c3e68a320a4e41df46fc0ba7e6b6df0fa66e380af65e9cb1d42c0e010290d3e337517c3693fdf47a6f7be08f30fd2d9c7375314dea62b7863121c4dc4706792db75f3abfd8b95e806044123e3ffe0e7690eea8ce044df034185502102eea2801a07ce9bd63", 0xf4}, {&(0x7f0000000c00)="1691dc5b276bd79716aee9e313f0315b7b899d28c7e90c493b64c716805266c66c9c42578866fbaed97df533f4121d66992507c60c549288c59a7132778a04888f5cb58a50b8b86d041b02ce6ce3959ea407f81d49af49a660cbc26d3627cfa666d1533780fa395b8cb2fa3294805451bb83a0a3659adac955424a418560b0d9391fca746ba2f82cc17f564abdd6cf67da0c1ad5b456eb819ac4102da93aaef94e72a5aa4b530eb564b73a694d9176bf77bdc2bb174d61e077dc6a60cef3f068d3324bb55d923328d1bb1886ff", 0xcd}, {&(0x7f0000000d00)="1e631b355a9e4706ef327788b31c497231b8e83f576fb52d0a5f584c4682ee45831ad815c0d747fe84d2b200c013dff5a72544854b59978d69e3aacb7520d4ebe7efac51daef9eaf476c52888a1d9cba03b0571423bf605d69df93ba14e3fcb32464f1ce0e41a5bbbbce599463df6933dd592e5a6a6a6e1f19329c981a5d96fb10823b6b07aaae61d8dace2274489dc1307589ed3b84b93e10b864c4d2e6bcada586b3588190696ec902c8c298f26f181918b1656603d4c696b75fc26c02a297487cc43ebf35562aa97cf1e7b7c468377aa37e41d0280bd9edc07cc267bc867172626499926d165e3f4935aff184002c94265b8baacc3661f1", 0xf9}], 0x3, 0x0, 0x0, 0x4000}, {&(0x7f0000000a40)=@in={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000a80)="1f575870f9aa3d535dedf1c347d10f78139492629b876134418ec1becc9fe6ed6cbcdca95f5dc5b421b62746161e3dcedee6193dc86a9a4466c87edc4f088b", 0x3f}, {&(0x7f0000000e00)="ba3dea42a4cddcc78d9f1b9ced17bca49e6b7472645cf836a331cd1db735aa649d5de154138188df695c44936b0f9c02efffe76b2aac8decdd62d6df41c40fc2bee113a5a4184bce9d50d748cef5a2d8cee51738ad2949e8de3bbe7d3e42ecbf35bcd5b658083e21dfbeb9f98c9a6008ead64c708b31f3fe", 0x78}, {&(0x7f0000000e80)="77a35a46ab4a5dcb4d630d3e73c1c7f019ce6ba4b02db2e93662ed43c599e594cbc8a211397cca3045d6bbb034cac02684958ca33b6f9dbe63b2a3e6695ba106af4602305cf9ce715dd6b1c7aa4fb93b255ade04308401aaa8a38cc503973d17558774304dfedff41147d9f20349d90c2d805ecad71caa9c4fc598e66d6b84d849470e8af76c1987a963b9a881fdd97a960e7b449c006e5934b4d586c407e50ed1c9f77715f1e4ee63b8e776d04c6308141b3c075c655e70c149bba7cc65b5b6db20d5f246ce641fbc56129c393eb851748e8931624a48ffaf60a7c9a2e3c01037a538d43593e2c813ecd18e3bb7ed7c6338fa104554", 0xf6}, {&(0x7f0000000f80)="e935616c7b49282818a5ccfda00434e36c9bb42e690ebfa4d97b3514cebea6680f9482c861fd4caa57df2309740099a5e40874f61e1a75fd3a92a4d9fc14", 0x3e}, {&(0x7f0000000fc0)="f0d4619a31c4fb4b2b4403fedba061fbfb1faba71ad75ddaef7e2144b192da95515546eb1fe246ff489e80f2ecbe311915ee2a9c29aa2db4c7bd65fdef63f53edbff4d8ff4a5428f718be235d0830616637f1dd1229f19fa4ebd9a92fb", 0x5d}, {&(0x7f0000001040)="f232ac6738b2bed62dd29c0cfa18978712c377884eb61e4add8c09788d6c5098f975388e1803ef0288f9e305c4bb35756b71ce127bd3f3aaffbb0b8497ceba01bcdb1a168dc0dd87b401eb9f348ba47c3c6e5642ff5dfd4f62dc72a107552c6fe40831", 0x63}], 0x6, &(0x7f0000001600)=ANY=[@ANYBLOB="20000000000000008400000002000000000001000200000005000000", @ANYRES32=r7, @ANYBLOB="3000000000000000840000000100000003000600080000000700000001000000060000000000000012000000", @ANYRES32=r8, @ANYBLOB="1800000000000000840000000500000010000000ffffffa30eff"], 0x68, 0x10}, {&(0x7f0000001240)=@in6={0xa, 0x4e23, 0x8c28, @mcast2, 0x1357}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001280)="d8082971e6b3de56359f0c16cfc2b0683e48ec8116380714119b1347c547f13af46b7b43d2edb223f3026a08a444a512f9cfce1cbc25a18845b2dee82ffd6df601c164a6aa34a88145269c6b8165c9598105fcc76c1f687e090d37ad5297b4d1623c96f9866897e31a5e1be9961eab03113baa046fbae074b05a43fe905d75d0c45aaf06b1b3c9ed4f406e92f902a8b69830b3464719173afb2e1d35591237144b28bc9001995579ac58865677976ba45c808878711dad2c5275723beb8238f1c35a9da978d8a404fda59c7e29e615c5dd917fc05c601a24722841a86d67c6", 0xdf}, {&(0x7f0000001380)="231469520ee85fc8d5bd122d73085f267751fa9205333b79300115bfd6f72479ab0869fd5f9f2bb3f1f7a771c6b7ad68cb08f9eaf8e58ce354eee705786e5ea3083390f6d9bd209b0a7a50a61746f0fb766bffcf8042080fd1f483497f6cf748f0abae7b56b589b7fed3a1076a2e4db6621adbd85ecd03fe00e71b75d3c618dac44076", 0x83}, {&(0x7f0000001a40)="0da6d0399a7d910e7a37864382c033a8009f8a02b32abedf0759803b8c9738ac56cdb12d2384145afcb1cacff87ca6b65d1a2d17d34f7245edb98be498382ea7ea0a8437233893df5c6f2776dcf6b15c52ad8991f2d5be2b13a1a7ad007d4821043e8fb15a14fcf77d9912ad55ea1658618ae2b0e3ebad3e01b57b5485e7c4b89ed8477750835d180e43fd2386691c05481be5f982fea35fc31cde6331a44f2929ca9d39cc435c22780de77b3baab236f1d9e467d63a3290daae0f88", 0xbc}, {&(0x7f0000001500)="e05ca59c66fdfc35813e2376b8c43ee2e3784474e961af483edadf168525469ad60abc4d02d2a253f2656bb102103635cfe0e1725e98a5e64336762749ceb92e936d0f14d0aacbdd120e045bda787d194b5720ee96808cb88579f67a593135e326aa6aa82f46583cb7afd5763c612d1f7e5e35b6e12b907a161c61587404a1fdecdcfa86af7c9ca9f34be981f80300b738b521b8d6ced70af61bf268addf73dacbba6e961fb09dd8cf67bea51768e0f2f97c483c1f0fcfe4c0512c9fc3611ed86699d01cdcb38ca2456fb4fcc36e9d21bfe7bc0e", 0xd4}, {&(0x7f0000001440)="97a840cad4febddbe3c95ecf725d91eda3ffdf4b945080ded0a19e9b0589bb0435207d15b66053dfafb0dc8e570d4dec001022596f6be8c88d47f71a831d13bccec4e1cb046238df0ad22642ab4e028716d5b7a7655131107d2a79d64f3bbd62c1a899776c11741aff70d66183d1d81acf5e5c93ac027fc69fbb76c1fefbd522393bb51638ecd1520000", 0x8a}, {&(0x7f00000017c0)="afc4b1a7c73a6839af5502ef3642bb8a2d8a08a7fb601328fbf80aa4785f2ccefc2ab435b47e5c4bfced85d5ad88977586bfc48883a8837e31cdcbb82b9fb1a1915bed87c38aa8bca1fdcfd9f53ff3c74aee7bf5dc11ffad8c6d016371c629eaa274168814e4cd1cdadf0ce55f7aa7fb67215139c6451374b7a287262cb59f235b60ce20eb7e7c0ea1f11e39", 0x8c}, {&(0x7f0000001880)="90003a3ef4b2300875648cd5191d7980f39c95b3d4fa2d8241c108e31482e680162123cf39f2a30d0711010b1f8075479e6176c0c27c1d1c4d5c3082784dde5954242a23d1d1e0579bf1c79c4099b6c3611c92736c68e82df19f2725d41dbae400429a2cf0373fcfeed97229b914c5589335418508f23ea677308edc3e49273ab4e08f746184569276869c55121190b12672f6174fb099af1df6c0dad6a8da970cd9cf51f6e10280e362d2a42c3affbaa78cb1399ad8bf66e640da6743253d14cba002314f0b9563c38b", 0xca}, {&(0x7f0000001e80)="86f7be14fb118d366c9e0ffb82afa73d1887fe15bbf5b0506f777f0b5972b1b5664edc2125199a3e7043a43fed7d68bb26cb35c4db134378564987d4f737b0e706c5c0ffdd62a93fde8f12aa9ab5ee96e72da377f0d95278b38088d59621ee6842241d", 0x63}, {&(0x7f0000001a00)="3fa9a538145751807eeb48676f794d03030989aa937df1805a64eb69daf2942c00595397c846c7179a2b3f944f585db9d77f36", 0x33}], 0x9, &(0x7f0000001c80), 0x0, 0x40884}], 0x4, 0x8001) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc27, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010300000000fedbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) 25m56.894045539s ago: executing program 35 (id=5814): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x86042, 0xbb) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080a30800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0xffffffffffffffbd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) 25m52.274992042s ago: executing program 36 (id=5825): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x67) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x20) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') (fail_nth: 1) mount$bind(0x0, &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x23c2126, 0x0) 24m59.57138006s ago: executing program 37 (id=6279): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="643400000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x22, 0x2, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1b9080) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000180)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lstat(0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r6}, 0x10) lchown(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x1000000, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x200}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x2000, 0x10000, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x3, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x10}, {0xfffffffd, 0x0, 0x0, 0x5, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, {}, {0xfffffffb, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0xcb, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x1, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {}, {}, {0xffff0001, 0x0, 0x0, 0xfffffffc, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffb}, {}, {}, {0x4, 0x0, 0x40000000, 0x80000001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40000000}, {0x4}, {0x4, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x200000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket(0x11, 0x800000003, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x52000028) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) 19m53.562706341s ago: executing program 38 (id=9938): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) 7m58.027207933s ago: executing program 39 (id=16573): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7m11.546955901s ago: executing program 40 (id=16838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x22, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m56.349290242s ago: executing program 41 (id=17290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x80000033fb, 0x4) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_link_settings={0x37, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 5m18.401685012s ago: executing program 7 (id=17527): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000440)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="6a5e97e2a3deb362ff549dd60031881059b6d6ad1ead8d8939929fd2228ce42582395778b5a8706e9df70a1afa9b98564a2324ecef0ad6cbf1129d325ac4ec189a578338481c29ae7ad5e6d3e694d832481c245ed07950a4c5e91543e8a23ccd925b1bc4436bb8a67f2010bf59d295a6e1cf313ddc5adc04160e3fb798", 0x7d}, {&(0x7f0000000900)="bbc98decb1bb58df78462a2d9e7a553ae59a0e8afe2e17f303cde21c68e2a6ab7248cd9ca71d93a4ebc11616c302088ea2051befd1d47cf781ef74ed40ca97e0bd9f81fa61182e2cfb2f8a221dace4ed4fed399a85a6589c69aece57fd3e62f4aed4fe9c8b28", 0x66}], 0x2, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x60, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xcd, [@multicast2, @multicast2]}, @generic={0x89, 0x10, "3459d6427f54014e87449a30103f"}, @generic={0x94, 0xf, "a688cb55ce7dc0d0e1a52d5fbd"}, @timestamp_addr={0x44, 0x24, 0x89, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x255cf4b4}, {@empty, 0x8}, {@rand_addr=0x64010102}, {@local, 0x9}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc93}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0xb0}}, {{&(0x7f0000000a40)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000a80)}, {&(0x7f0000000ac0)="c57a05d711850c0654238b4404910353965c6ba7a5a856a729d830dd6b5a3c861e583086ae968926e13f478627440a2bd3b84aa151aab38cac445def6e63e0a747ed4ddf1b1e21428e46702061d2556c27754ae026017831f84f6a585d999360769e8d7e914ce7015b2ca0cc037d91aca1d7cc287dcd71d29bd439a0fe438d6013ab798123d3274a6bf9a17c73c885cd904aa4adaeae4a9cfaf634a46d9976f603861cbc9d59664fa99e204eabe37f25d29a33aa647b1cb5e96d1978bdffc0a9e1ab053962176312ad2f95429289c80a32a745460c6aded6939015e545def2", 0xdf}, {&(0x7f0000000bc0)="ee41a896043b1b045d43541d9a9143ddb5409d1997130de7604a5a1a63a3f5cbdb49dc68df13e61e785cb8772827ca8d66a73ec093e25832cf8c151d598b331ad8a99f1f82fa3a5e6d318afbeed7701216cb6a87e24a569e61ec16f55495713f442a19007d69f282c7d3b6a5679b5f8f438302fb11e3ecd4b3", 0x79}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="3a699dc265011ff7bc344a8c9b60107046c60a2b07e3779c2a58d23e1cff37c39c1a7b82cd538349eeb138ffa2b7580784cefba29c527aeb24068a2aec878d42b0afe6631a204158d547910f0c2127d19ceedcb05e31daef51b040041c9bc9012f148adca7295c3805fa506ee09277ac54166406a2154c", 0x77}, {&(0x7f0000000d00)="a0ce21fbde4426b0750344d0fd3246388b45437819260b208a81ef7c8680812c6a0a104f7e5eecf5d2072711048759aefa82d0756f99242029082d5b475491632af877189a69533a35a4d831635eb0a766cdcc3aed49b9862a55a7ad5e6a55ff4bac2122b57e58ab2f67614f5831e4512b61f9ff7e8f6786b6c50e14d794cbf9592841852c16646754080e0265067818b792999d78e6e2e20f46190d2af8279aa0a4c8227e68a1cd75a0b52dc5b6e4b17f164948d3ef0d3d6c263659ffc8a6de209cdf49ff455464ea19c3dee1c05b45675d8058af038c90d6e8db4b1891c32ea42ba26d98c65f", 0xe7}, {&(0x7f0000000e00)="97608d06901eb4bd96c93ca0ce5892574e7ac43071a6f893fc41a52326d63a372eec8145f29f5b6853", 0x29}], 0x7, &(0x7f0000000ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x10}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x20, 0x0, 0xe, [0x101, 0x9]}, @lsrr={0x83, 0x7, 0xa8, [@local]}, @ssrr={0x89, 0x1b, 0xc6, [@local, @multicast1, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0xa4, [@empty]}, @noop, @lsrr={0x83, 0x7, 0x59, [@private=0xa010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2b4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x50}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @rr={0x7, 0xb, 0xeb, [@empty, @multicast2]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x4, [0x0]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x3a, 0x3, 0x5, [{@rand_addr=0x64010101, 0xa8e8}, {@empty, 0x2}, {@broadcast, 0xffffffff}]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x128}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001040)="8015006cf1404d8cbb27ab3103632556b7912c5e8aa316ae9fc671f2249d8b7080e10a2cfedc2fbed952b688c27b1e3cdf634a8e32a365b7c511518706a0715b04fbb6ee8cb27cbb3436196a94b9907aec758d59371f29e9ebd2a3f4b1b07e45ff4f0b3f3dd3fa0fd96e8a19e9e129dc267f9d88b00546", 0x77}, {&(0x7f00000010c0)="eb3daed4984cdb3169b54331c174e96e2198eafd65817b33177be9a2d6", 0x1d}, {&(0x7f0000001180)="0ef6dde074e890ad44ce2cee764eb7f1b2cb7d706d4914f3696f65b182620a1b7fac010afcb4d2c5e069de79a61990bd9a16277011b9aa9a6b91024686e44a9a9e8ddc3b3bb46b6934ecb3da49a1a0e5beccafb713c45c21fccfe0239c20dea96b330d490f7ca2c9bf958a9e6abd25f306a8c073c17c3cb087a765843c8e32df4e816b3b9212d8fd84cbbaf3f7053ac9af", 0x91}, {&(0x7f0000001240)="eb6c3c7447f4d32298693a79967e46a6635e6205041a66802c9bd8dea3e9e153c44e56769d885a87f6f6114fd676eed524cf83625f624feae0ac332d813d3b51342d0af4c2a12c82", 0x48}, {&(0x7f00000012c0)="40a68448aa3a0ca5884736dc184cf923db518586f7d30ca91bc3986089f65f6a33d9d3fc08a2877c713f3f2ebaf33f9bea0d199df27c6643298349fc01da9b1f4bb03e4dac3881919d59c294014521f59c9aece3fe8dfb3837ddb03153e484d3a2f1d26d9414b0062c2be527c84a018ed92376f3c265e18020de90c8641a54718952e820eba00f0731e7098920af4ffebd36d47994561e795a2721f25b5c384afdaf5083201e9341ef92324d00d091d75bd16ff941c53aea7e49", 0xba}], 0x5, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd94}}, @ip_retopts={{0x60, 0x0, 0x7, {[@generic={0x94, 0xb, "bc268cd9dbe5ee5a69"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x3b}, @timestamp_addr={0x44, 0x3c, 0x14, 0x1, 0x0, [{@multicast1, 0xfffffbff}, {@multicast2, 0x6}, {@private=0xa010101, 0x9}, {@loopback}, {@loopback, 0xe}, {@broadcast, 0x401}, {@remote, 0xf56}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0xb0}}, {{&(0x7f0000001840)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001880)="33cc46236d939375f27f07b27e1d09fb34cd8847a0f9ecebc71adf4d791e971e2efdc3848b11876d240b4c2fee22c3ee244693988c3cd7f5cc65e07c886af9831f94", 0x42}, {0x0}], 0x2, &(0x7f00000019c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}], 0xc8}}, {{&(0x7f0000001ac0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001b00)="0303a8f8ae13684d5c753d95e222a107c6334516130c26b8492a98874ce7e66e9a065cc7ff39dcfd3bf1216a70ac224b8fbbcaffe674dfc8bd747789197c5d70fe2164c130a81038df227d5af3a2f21370678397849b5ccede2184b9213954a476ee79ad9464806529bf1b0c5fc49812cd53ac1c0faae5900bf420c0e3547e1bb7f9b7f38a2675adb449c22a4f51d5e73b8a1537e8d7f88d8842afe6438f19f63dcad8a462edabb74258ff6916eecdf26e0f3df41d299890c51f571ecbd36d16fa71360aa7473ced6beefe06bbf059779b84ceee95dd24a5fa7968f8bf", 0xdd}, {&(0x7f0000001c00)="19c23d423229c653349d0e9af89822bdaed84200519350d9199bbe7b37c14ac5e54de52230e3c9e6d1e4c57ac9240bf21858c710f905af36e81aa4b0ef3010e56646bd7167974baf8b730db594306367ff1b2061b80f2f5463360030fadc055199bc844bd485982daaab5e99d92ab828348475e5275aa7aea6f9c8f0985ab2b864b3aca09e2bd79c5b0d939a829a72", 0x8f}, {&(0x7f0000001cc0)="deeb38366c3d3792014fd8a5e806a661c89f9b175d63ad14f0558d6c9c1e14a3e47f0d6973eecb4c68f12713d560f8c2f83a423406e6b04b30d32cd728a53314c0a509426a33213cdc1ffdcd0820f534fa8e1f96c72af0a4714810c45f11e19b4abd88cddd3a67b2a6403a3f50ab5ff7c69563fe7f56d51fe754c8ca482a2b42e251120fd626d95121c399fc404c88d76b1a74e6fd7857d5e0e1164f4d01d478c5825fec1a05d8ebacc3bf46", 0xac}, {&(0x7f0000001d80)="965fe87eecb9b71ee518d8fa54107a42d6c590e129937acca14e0d9c95c60d96", 0x20}, {&(0x7f0000001e80)="c6187fd9bb38b166eeae5cc6cc88440d76c297aef4acb4846648730b836dc99cda85f4d6f267b419be1440ef85f4c5a391b43186ded785c0e42a3d7f18f8baa77dc817da3c46a6bf5374e6d8d44852e56a81278d677da46cb8be14c54bafb98914e6dc8db03bbefa1d2014f4ed7629a9c6911ec8947edb221fc8bfaa1b3257f8747094d4a92910e6d00829df432cec556a97de2e89f74e014c893445bc3633aca98ac636be77348913111fb65e8c70cecc494cd9393fb645d28a", 0xba}, {&(0x7f0000001f40)="3c5ff29ccf87ed8038004b7198fa8b76c7df27f48c21e0cd9c87373c40ec219668d5e80f67f1c139adf4baef189c3e57ed46deec1b040967711f4e2eae71e372433c53c95931010c87f399b6a9ef87aaf1e8555cf9b906ba87e3e25654eb1f0b37676708f70470149547e3bec80c3aa6d641389a172ca705c41d0c0684e9f244fa67d318dba6a1cdeb106d1fd12a0790ce561a399ed542e60cdb4c51f3482f505dc257086e7ecdf26e8d37da47", 0xad}, {&(0x7f0000002000)="8fedd188516f8138b63eb674dc6b62e361e57636a18fd2ec9d619f853afc5bea734112e2e246bfd6f467dc219ed8bd54e138842511abea28c72db2b31b7d6448a371c038d1ada23c453fee9cda581d18d2f02ddb844b7918bebe33c335c9bd8cce0453877c52f0f78ef7e1bf4fbe10bf1ef5372466871cd1455df898ea546801b241f9861839dc9ed4ed6d1e0540bae1aafe8f8548ae1e2fac3a9aa8ab8411e7574b71591c67b27daa1ba05b0bb37a2f3ee4259d98de50e790fb8533608eef46df5679cb5d9593502b9fe07293ac0ab5385b6b", 0xd3}], 0x7, &(0x7f0000002180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x50}}], 0x5, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) unshare(0x20400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_type(r4, &(0x7f0000000000), 0x9) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x880, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x64}}, 0x40) write$P9_RLERRORu(r5, &(0x7f0000000180)={0xd, 0x7, 0x2, {{}, 0x76c}}, 0xd) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda", 0x3}], 0x1) sendto$inet6(r3, 0x0, 0x0, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xfffffffffffffd09, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5m18.355804743s ago: executing program 7 (id=17529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newlinkprop={0x38, 0x6c, 0x1, 0x0, 0x25dfdbfd, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wlan0\x00'}]}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x204000, &(0x7f0000000380), 0xd, 0x5d8, &(0x7f0000000c00)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000b703000000000000000000"], 0x24, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x4010, &(0x7f00000001c0)={[], [{@dont_measure}]}, 0x0, 0x76f, &(0x7f0000001580)="$eJzs3c9rHOUbAPBnNknTpv1+E0HQegoIGijdmBpbBQ8VDyJYKOjZumy2oWaTLdlNaUJARQQvgooHQS89+6PevIk/rvpfeJCWqmmx4kEis5lNN81uk22TrHU/H5j2eWdm886zM/O+7+4MOwH0rNH0n1zE4Yh4P4kYzuYnETFQj/ojTq6td3NluZhOSayuvvxbUl/nxspyMZpekzqYFR6OiO/fiTiS21xvdXFpplAul+az8nht9vx4dXHp6LnZwnRpujR3fGJy8tiJp04c37lc//hp6dDVD154/MuTf7390OX3fkjiZBzKljXnsVNGYzTWUh9I38INnt/pyros6fYGcFfS47Nv7SyPwzEcffUIAPgveyMiVgGAHpPo/wGgxzS+B7ixslxsTN39RmJvXXsuIvav5d+4vrm2pD+7Zre/fh106Eay4cpIEhEjO1D/aER8+vWrn6dT7NJ1SIBW3vwmCza1/8mmexY69cQ21hm9raz9g73zbTr+ebrV+C+3Pv6JFuOfwRbn7t3Y+vzPXdmBatpKx3/PNt3bdrMp/8xIX1b6X33MN5CcPVcupW3b/yNiLAYG0/LEHeoYu/739XbLmsd/v3/4+mdp/en/t9bIXekf3PiaqUKtcC85N7v2VsQj/a3yT9b3f9Jm/Ht6m3W8+My7n7Rbluaf5tuYNue/u1YvRTzWcv/fuqMtueP9ieP1w2G8cVC08NXPHw/F+pm0UfP+T6e0/sZngb2Q7v+hO+c/kjTfr1ntvI4fLw1/127Z1vm3Pv73Ja/U433ZvIuFWm1+ImJf8tLm+cduvbZRbqyf5j/2aD3/A9kqm9q/Vsd/+pnwta0Szzai/+qvX9x9/rsrzX+qo/3feXD55kxfu/q3t/8n69FYNmc77d92N/Be3jsAAAAAAAAAAAAAAAAAAAAAAAAA2K5cRByKJJdfj3O5fH7tGd4PxlCuXKnWjpytLMxNRf1Z2SMxkGv81OVw0++hTmS/h98oH7ut/GREPBARHw0eqJfzxUp5qtvJAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDmYJvn/6d+Gez21gEAu2Z/tzcAANhz+n8A6D2d9v/GCwBw/9OfA0Dv0f8DQO/R/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDLTp86lU6rf64sF9Py1IXFhZnKhaNTpepMfnahmC9W5s/npyuV6XIpX6zMbvX3ypXK+cmYW7g4XitVa+PVxaUzs5WFudqZc7OF6dKZ0sCeZAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnakuLs0UyuXSvKCj4ED2/v1btkcg2Nmgyw0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH3inwAAAP//CDwgEQ==") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x1d9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095", @ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 5m18.269627274s ago: executing program 7 (id=17530): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 5m18.242164705s ago: executing program 7 (id=17531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair(0xb, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='comm\x00') write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800", 0x1e) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0) 5m17.765597182s ago: executing program 7 (id=17533): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5m17.414855307s ago: executing program 7 (id=17536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5m17.414623807s ago: executing program 42 (id=17536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3m56.277908367s ago: executing program 0 (id=17892): syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @empty, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock2(&(0x7f0000813000/0x2000)=nil, 0x2000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000280)={0x0, 0x380000, 0x7}) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0), 0xed) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect={0xffffff81}) 3m56.048692611s ago: executing program 0 (id=17894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x80, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x80}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 3m55.905685263s ago: executing program 0 (id=17895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1018e58, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") listxattr(0x0, 0x0, 0x0) 3m54.142796639s ago: executing program 4 (id=17898): syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @empty, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock2(&(0x7f0000813000/0x2000)=nil, 0x2000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0), 0xed) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect={0xffffff81}) 3m54.139810059s ago: executing program 0 (id=17899): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair(0xb, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='comm\x00') write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800", 0x1e) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0) 3m52.965269187s ago: executing program 0 (id=17902): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[], 0x0) 3m52.713556331s ago: executing program 4 (id=17904): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3m52.390850206s ago: executing program 0 (id=17906): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) timer_create(0x3, 0x0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) gettid() 3m52.316540227s ago: executing program 43 (id=17906): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) timer_create(0x3, 0x0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) gettid() 3m50.024002201s ago: executing program 4 (id=17912): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3m49.865135833s ago: executing program 4 (id=17913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair(0xb, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='comm\x00') write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800", 0x1e) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0) 3m49.519124729s ago: executing program 4 (id=17916): socket$kcm(0x10, 0x2, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="b8", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000400)=""/34, 0x22}], 0x1, &(0x7f0000000700)=""/13, 0xd}, 0x1) perf_event_open(0x0, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 3m49.266783282s ago: executing program 4 (id=17917): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r8 = fcntl$dupfd(r4, 0x0, r7) mmap(&(0x7f0000718000/0x1000)=nil, 0x1000, 0x0, 0x10, r8, 0xfffff000) r9 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r9, 0x2004, 0x0) 3m49.266457962s ago: executing program 44 (id=17917): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r8 = fcntl$dupfd(r4, 0x0, r7) mmap(&(0x7f0000718000/0x1000)=nil, 0x1000, 0x0, 0x10, r8, 0xfffff000) r9 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r9, 0x2004, 0x0) 3m31.391581021s ago: executing program 8 (id=18004): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40800, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[], 0x0) 3m30.244786208s ago: executing program 8 (id=18006): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 3m30.14365492s ago: executing program 8 (id=18008): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x70, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20089}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x3}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7aa, 0xe}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x3050100, 0x0, 0x1, 0x0, &(0x7f0000000000)) 3m29.295485333s ago: executing program 8 (id=18012): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair(0xb, 0x6, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='comm\x00') write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800", 0x1e) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0) 3m28.943293478s ago: executing program 8 (id=18017): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40800, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[], 0x0) 3m28.654805592s ago: executing program 8 (id=18022): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000400000000000000000000095b6e285f4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x56b8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x4}, {0x0, 0x9}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 3m28.192347779s ago: executing program 45 (id=18022): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000400000000000000000000095b6e285f4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x56b8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x4}, {0x0, 0x9}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 3m18.792001601s ago: executing program 6 (id=18061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0xf00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x58}, 0x0) 3m17.085859737s ago: executing program 6 (id=18071): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000a20000/0x2000)=nil) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) 3m13.928290914s ago: executing program 6 (id=18093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001f0000000000020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x60, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32092ba132800f03, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@debug}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x41, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000004000000040000000600000040020000", @ANYRES32=r6, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000030000000a00000000000c0000fc59dc821da03084e49e62792f97ff0000000000a54464e2ccc664efbffd017430d3f67a40385f81e8921e65f854de0fb6fbb8b4f06da37eebc61e7de497af1e582bef3dc2965aa3f1b0d6706b38551e432d66f5b8f364c7b54e54dbc2caca4d"], 0x50) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES64=r8, @ANYRES32=r5], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r11}, 0x18) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendfile(r6, r6, 0x0, 0x80000000) 3m12.745410422s ago: executing program 6 (id=18101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair(0xb, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='comm\x00') write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") recvmmsg(r0, &(0x7f00000001c0), 0x0, 0x48, 0x0) 3m12.22649111s ago: executing program 6 (id=18103): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ptrace$getregset(0x4204, r0, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 3m11.870615465s ago: executing program 6 (id=18106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 3m11.868641655s ago: executing program 46 (id=18106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 3.416682008s ago: executing program 2 (id=19274): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000c53, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYRES8], 0x0, 0xa13, &(0x7f0000000dc0)="$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") 3.196582451s ago: executing program 2 (id=19276): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xaa, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0xfdef) 3.116158342s ago: executing program 5 (id=19279): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) getpgrp(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=@framed={{}, [@call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='kmem_cache_free\x00') r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000580)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x9b, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x7, 0x2d1674ad}, {0x8, 0x3}]}, 0x18, 0x1) 3.112909142s ago: executing program 2 (id=19280): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 3.038591414s ago: executing program 5 (id=19282): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x20811, &(0x7f0000000180)={[{@init_itable}, {@resgid}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x600, &(0x7f0000000ac0)="$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") ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="4c866d49b2d823921c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x34, 0x2e, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x8}, {0x4, 0x2}, {0xd, 0xffe0}}, [{0x8, 0xb, 0x34}, {0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x884) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 3.002558054s ago: executing program 5 (id=19283): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x10001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}, [0x8, 0x3ff, 0x3, 0xff, 0x2, 0x2, 0x8, 0x2, 0x9, 0x7, 0xfffffffffffff001, 0x0, 0xc2, 0x6, 0x4]}, &(0x7f00000000c0)=0x100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000050900000000fbdbdf2500004c00", @ANYRES32=0x0, @ANYBLOB="818003007433ad9f08010000000100000000100006000000"], 0x30}, 0x1, 0xffffa888, 0x0, 0x8801}, 0x20008004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001080006"], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r8, @ANYBLOB="0000000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8941, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="100000000000000091ffffff0080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0100000000000000feffffbf1d00"/28], 0x50) 2.769541928s ago: executing program 5 (id=19289): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r0) 2.734856998s ago: executing program 5 (id=19291): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ptrace$getregset(0x4204, 0x0, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 2.208011876s ago: executing program 2 (id=19301): unshare(0x24060400) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300000000000000040000000000000002005d00"], 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(r1, 0xc0045878) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)=',-\x10*\x00', &(0x7f0000000140)='\xbd`\xf4|\xfd\xe5\x1a\x9a\xfd\xd5f\xb4\xad\x00', 0x0) read(r8, 0x0, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) syz_usb_connect$uac1(0x0, 0x71, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e000000000000000000080003000300000014000380100003800c0001800800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') 1.95805825s ago: executing program 9 (id=19309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x22a01, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) (fail_nth: 6) 1.687849854s ago: executing program 9 (id=19311): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="68e5f79534f143de82e0f8c25654f84218fb147794a311141d195a69cddc741b22d53e0d9d2baff237453abf728a2ba49ac5aaf7f4100b42a21cac169c2965385a891cbe9ccbcd64c0428f41c32e67099f8e9b3829e6c5ba64973725", @ANYRESOCT=r1, @ANYBLOB="e57a1437dde51038e8f3631093c7ab032871c3945e2cbd4c6144d0f2"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac141400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff0000000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c00"], 0x184}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f00000005c0)="bf47ece3244cd9c80b223171d4aab184b74b054a7084913f0c561a104a188a5e2ef1fe45651c1831a7090c75dcd4cbfd613e6979cdfecc25746c5375d669532c609c4eb7565c6f9543217d559206333455a8d68b0cd63b0e74cccab845f80bf7df55fc784e8902e066af37e05a616ec91e780be9741bff5d59cb014e1eb09762ddd4c7f3bdc16d15431a70e1f430c636d7107e64c8da3e7b4c24d42ea3eadbabec355abd93051ca0b99089ead570b9715173bad2d1621c", 0xb7}], 0x1, 0xe7b, 0x30000000, 0x8) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xc, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55710c64e30cd8655910b3eb2d1451a6bf4b04dc0af703f4c87963ba"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$tipc(0xffffffffffffffff, 0x0, 0x0) 1.687185544s ago: executing program 5 (id=19312): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000a20000/0x2000)=nil) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x20050800) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000015a09259000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100001200009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8024) 1.626366585s ago: executing program 3 (id=19313): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) (fail_nth: 7) 1.428296538s ago: executing program 3 (id=19314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000040000000000000800"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 1.409672868s ago: executing program 9 (id=19316): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00'}, 0x10) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 1.26399142s ago: executing program 1 (id=19317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={0x0, r1}, 0x18) 1.166669862s ago: executing program 2 (id=19318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000040000000000000800"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) (fail_nth: 2) 1.155611622s ago: executing program 9 (id=19319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0xffffffffffffffc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$cgroup_int(r5, 0x0, 0x0) 919.578525ms ago: executing program 3 (id=19320): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x204800, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x2edb07e375f426c0, 0x80, 0x3, 0xff, 0x7, 0x5, 0x0, 0x80, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1085, 0x0, 0x5, 0x7, 0x5, 0x7f, 0x80, 0x0, 0x7, 0x0, 0xbca0}, r1, 0x5, r1, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x28, 0xa, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x3, 0x6, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x8, 0x9}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @multicast2, @local}, &(0x7f0000000540)=0xc) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="f34c69381b01e84ac78f76230f604015d01ed3afd9f3f6b0aec42f22a9db91034297c9a8624adac1f1977ce79b85700131c886f2ab6cefebfd37b0f148440baf484ba7cf7ffcc06f22043f7ba8bdd20f2bc81f7e3ccf4c84ee1e76c244e4fea81fd4eb4a", 0x64}, {&(0x7f0000000280)="c765aa1a56f41d9487dc2dbc119f5a971fe17ff7efdd1b6f11bb0f8b736371918580927423deca6aafedb4bab063e7f533abbe32abb5cae6c79bec35d5923eb5961af2b6a16c01c5b2088709b8eae12431645c4ec865e53de31c8580665b4ef88e409a43166d8cc3f9e30fdb743986da64138358bd04f3", 0x77}, {&(0x7f0000000300)="48dca74f25824684cd4cc8d533aeaa30b0da916a747a4e3b421e183cb1f047fff4146cf56db955dab5196d6c7149724d02518d884f69067491c1dfa2f3273aa85c48c9604b7848a5d2945b5e08734ca4a0cce6e86246828f88aa822c4cb8d9f29ed5d4141cb19d07f74ca97fd7ddb180126d47fff7d2550beff598475ccd69c18e87ad405fde629b554aab531b258477826d16a44aaa71da1df78e5eb1c18228c0552478e23e01d8f3f902b0a5a06a542d6884aeac71998ccad19b6b81940b4b472d1017d1c728cf71ac4fff8f37d1684e8ce8b695a5d6e5a6aeeb74af6c00ee541b4807c268", 0xe6}], 0x3, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x14, 0xbb, 0x3, 0x8, [{@private=0xa010100, 0x20000}, {@empty}]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@rr={0x7, 0x23, 0x9e, [@local, @local, @rand_addr=0x64010102, @multicast1, @multicast1, @multicast2, @broadcast, @loopback]}, @lsrr={0x83, 0xf, 0x6, [@broadcast, @remote, @local]}, @generic={0x86, 0x11, "e08b08da27597f153d82e5ec99e63c"}, @cipso={0x86, 0x2e, 0x0, [{0x6, 0x6, "b7a5975f"}, {0x5, 0xe, "e74299e5821205f888719d87"}, {0x5, 0x4, "27ca"}, {0x0, 0x10, "671c412bcf617e0c9c0856059314"}]}, @timestamp={0x44, 0x8, 0xb, 0x0, 0x1, [0x286d]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x34}}}}], 0x140}, 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0xfe, 0x0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0x1d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x5e, &(0x7f0000000840)=""/94, 0x41100, 0x2, '\x00', r8, @sk_msg, r1, 0x8, &(0x7f0000000900)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xb, 0x80000001, 0x7ff}, 0x10, r9, r1, 0x3, 0x0, &(0x7f00000009c0)=[{0x3, 0x4, 0x10}, {0x4, 0x5, 0xb, 0x7}, {0x0, 0x3, 0x5, 0x4}], 0x10, 0x8, @void, @value}, 0x94) bind$inet(r5, &(0x7f0000000ac0)={0x2, 0x4e24, @empty}, 0x10) sendmsg$tipc(r5, &(0x7f0000000e40)={&(0x7f0000000b00)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x4}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000b40)="282856f56bbe46ac8be321edaaaa95995c1647c32fe78cbcb93dda4beebc8385786b2cc19ef005e3cbbc755ca88e2d0ca32907bdd80ebb8561466a1dd84222e2d3d09dce3b6f678a9f8a433592ab8c9444d41e0d816a1fdad919d89ca0b4a735011589596057e8bb574848ea9e3701da260b2d16d8d8d58b9fa89df684d0dc4bf8663667d32d100bb8fcf15a5dfd7738e5a037f374f12985a4af27f8b75cca60975c143fa92f616befa7b548b7307ed5faef859e0aaff081e5acb1765f0ecbc22b6e057dba7857eed80277df716580601b79b41d", 0xd4}, {&(0x7f0000000c40)="d4052994534f2bdd736c5047f57a5410fdf30b6034b3a5af0369c8cb143ed6f8971f96549b905f22ac9389b7f62a54b962d1e9ca53324147bc94685ee0c8bb351a853dd1d819510b4a927dd861bdff462a69d3bc8fabaae25981739defc987181a1673be11815b675fed70d2ac4ff99182a3a44b3f515e7486fcf73d73c95fb2636af34f6bb8260f1a6a697c715cdd8225a497e0caa731", 0x97}, {&(0x7f0000000d00)="5b97383374c2252518e8801216c65c2ff1988d1f5ca8b42881485833245df294deecaad2764c2c335af0d0a078e80cc6324d374ce4ebde088b09956cfb2ae1b29916", 0x42}], 0x3, &(0x7f0000000dc0)="7a57cfc4ec4def4d80ccc89ab20edbacfa3c918af7ee08c217d9550698204a00fa8cb716242d9c917ee3feacbca90f7c145cfa487206ecf851edace91df58f087160dc395f26413ef44bec1ec602c778ee959312d7c64ae1232e68cb667348485e09685cf10c149e1a97111e0637802318", 0x71, 0x44071}, 0x24008104) r11 = syz_open_dev$vcsu(&(0x7f0000000e80), 0x34000000000000, 0xf676f90c19093faa) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000f00)=[r12, r0, r10], 0x3) read$eventfd(r1, &(0x7f0000000f40), 0x8) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000f80)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gretap0\x00', &(0x7f0000000fc0)={'ip_vti0\x00', r6, 0x7800, 0x20, 0x7cf16002, 0x0, {{0xb, 0x4, 0x3, 0x4, 0x2c, 0x68, 0x0, 0xfc, 0x2f, 0x0, @multicast1, @local, {[@rr={0x7, 0x17, 0x6d, [@rand_addr=0x64010102, @private=0xa010100, @multicast1, @empty, @multicast1]}]}}}}}) setsockopt$inet6_udp_int(r1, 0x11, 0x2c9a88288270159f, &(0x7f0000001080)=0x7, 0x4) r13 = socket(0x0, 0x7, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f00000010c0)={0x0, 0x5270}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000011c0)={r14, 0x68, &(0x7f0000001140)=[@in6={0xa, 0x4e21, 0x2, @loopback, 0x40}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0xa01b, @remote}]}, &(0x7f0000001200)=0x10) bind$can_j1939(r13, &(0x7f0000001240)={0x1d, r7, 0x0, {0x0, 0xf0, 0x3}, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r11}, &(0x7f0000001280), &(0x7f00000012c0)=r10}, 0x20) 837.450547ms ago: executing program 2 (id=19321): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x70, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20089}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x3}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7aa, 0xe}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x3050100, 0x0, 0x1, 0x0, &(0x7f0000000000)) 836.969947ms ago: executing program 1 (id=19322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 6) 836.115817ms ago: executing program 3 (id=19323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x1, @dev, 0x4}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = inotify_init1(0x0) r9 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x400) r10 = dup(r8) inotify_rm_watch(r10, r9) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, &(0x7f0000000040)=0x44, 0x4) r12 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x145342, 0x0) socketpair(0x6, 0x4, 0x400, &(0x7f0000000000)) io_uring_setup(0xe61, &(0x7f0000000140)={0x0, 0x9923, 0x0, 0x0, 0x277, 0x0, r12}) setsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x5, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 726.641938ms ago: executing program 1 (id=19324): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='mr_integ_alloc\x00', r2}, 0x18) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x69) close(r0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x232000, 0x1000}, 0x20) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x128, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xe4, 0x4, 0x0, 0x1, [{0xe0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_NAME={0xc, 0x1, 'iprange\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xaf, 0x3, "e78b548e94726cacfad89cfbb0cf7a417a0b215685d376e8ea771fb66a955f18d7bd9b165cba41047b36730f03a4348a26f0ba88b31bef9d8e5fe69cbd7fb813aa0914eb0a8ae9ff0ed81be5608518f15bf6152f56f7f160d84b2d9b010fe39b8379e85a7b506c8e4c717828d1c916d030a1ce8fb15d9da2e1c9f5b0087ff254e45e9739a36522a91ce27a1e158bdde431fba88b9d34090c5fe9bb60cd77d0fe28bcff451576db56c05a07"}]}}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x150}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80001, 0xc) mount_setattr(r7, &(0x7f00000001c0)='./file0\x00', 0x900, &(0x7f0000000240)={0xb1, 0x100008, 0x80000, {r0}}, 0x20) 726.145038ms ago: executing program 9 (id=19325): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 324.354615ms ago: executing program 3 (id=19326): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="91f27222e2485a", 0x7}], 0x1}}], 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) chdir(&(0x7f000009df00)='./file0\x00') r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x80880) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f00000002c0)={0xa51f, 0x7, 0x0, 'queue0\x00', 0x6}) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 289.456865ms ago: executing program 1 (id=19327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20c00e0072009fb300000000fedbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) 289.106975ms ago: executing program 9 (id=19328): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000084000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r3}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="002726bd70442dfab0775666bd088b01e1b52207fcb883000000df"], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x814) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}]}, 0x18, 0x0) 39.821108ms ago: executing program 1 (id=19329): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, 0x0, 0xfffe}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 22.889089ms ago: executing program 3 (id=19330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) (async) 0s ago: executing program 1 (id=19331): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x70, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20089}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x3}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7aa, 0xe}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x3050100, 0x0, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): s on: batadv_slave_1 [ 1996.784249][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.794061][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.804496][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.814399][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.824898][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.834807][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.845256][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.855088][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.865595][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.875436][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.886138][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.895954][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.906381][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.916462][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.926944][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.936787][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.947278][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.957185][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.967656][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.977488][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1996.988006][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1996.997834][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.008335][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.018154][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.028592][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.038576][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.049080][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.058899][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.069359][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.079183][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.089678][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.099530][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.109962][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.119779][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.130215][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.140219][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.150684][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.160521][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.170964][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.180781][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.191220][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.201059][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.211495][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.221353][ T2556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.231777][ T2556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.243692][ T2556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1997.257438][ T2641] smc: net device bond0 applied user defined pnetid SYZ2 [ 1997.259166][ T2556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.272926][ T2642] smc: net device bond0 erased user defined pnetid SYZ2 [ 1997.273269][ T2556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.288929][ T2556] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.297734][ T2556] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.526876][ T2649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.535545][ T2649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.004567][ T2670] xt_bpf: check failed: parse error [ 1998.116359][ T2675] smc: net device bond0 applied user defined pnetid SYZ2 [ 1998.137818][ T2672] dvmrp0: entered allmulticast mode [ 1998.146484][ T2675] smc: net device bond0 erased user defined pnetid SYZ2 [ 1998.182276][ T2672] dvmrp0: left allmulticast mode [ 1998.396765][ T2680] xt_bpf: check failed: parse error [ 1999.791417][ T2694] loop2: detected capacity change from 0 to 512 [ 1999.810842][ T2694] EXT4-fs: Ignoring removed i_version option [ 1999.817041][ T2694] EXT4-fs: Ignoring removed mblk_io_submit option [ 1999.830682][ T2694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1999.850628][ T2694] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 2000.815606][ T2707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2000.824404][ T2707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.203139][ T2712] smc: net device bond0 applied user defined pnetid SYZ2 [ 2001.235135][ T2712] smc: net device bond0 erased user defined pnetid SYZ2 [ 2002.884095][ T2742] netlink: 16 bytes leftover after parsing attributes in process `syz.9.18763'. [ 2002.912739][ T2747] xt_bpf: check failed: parse error [ 2003.078713][ T2749] smc: net device bond0 applied user defined pnetid SYZ2 [ 2003.109142][ T2749] smc: net device bond0 erased user defined pnetid SYZ2 [ 2003.495817][ T2763] loop2: detected capacity change from 0 to 1024 [ 2003.502567][ T2763] EXT4-fs: Ignoring removed i_version option [ 2003.537665][ T2763] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2003.571765][ T2763] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.18770: Invalid block bitmap block 0 in block_group 0 [ 2003.585752][ T2763] __quota_error: 2 callbacks suppressed [ 2003.585762][ T2763] Quota error (device loop2): write_blk: dquota write failed [ 2003.598842][ T2763] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2003.608830][ T2763] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.18770: Failed to acquire dquot type 0 [ 2003.621146][ T2763] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.18770: Freeing blocks not in datazone - block = 0, count = 4096 [ 2003.635510][ T2763] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.18770: Invalid inode bitmap blk 0 in block_group 0 [ 2003.648491][T25612] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 2003.657475][T25612] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 2003.671321][ T2763] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 2003.680186][ T2763] EXT4-fs (loop2): 1 orphan inode deleted [ 2003.686309][ T2763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2004.959384][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2005.064813][ T2789] smc: net device bond0 applied user defined pnetid SYZ2 [ 2005.131188][ T2791] loop2: detected capacity change from 0 to 1024 [ 2005.137855][ T2791] EXT4-fs: Ignoring removed i_version option [ 2005.148808][ T2791] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2005.237852][ T2794] smc: net device bond0 erased user defined pnetid SYZ2 [ 2005.257266][ T2791] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.18777: Invalid block bitmap block 0 in block_group 0 [ 2005.275793][ T2791] Quota error (device loop2): write_blk: dquota write failed [ 2005.283313][ T2791] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2005.293389][ T2791] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.18777: Failed to acquire dquot type 0 [ 2005.307108][ T2791] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.18777: Freeing blocks not in datazone - block = 0, count = 4096 [ 2005.320947][ T2791] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.18777: Invalid inode bitmap blk 0 in block_group 0 [ 2005.333828][ T2791] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 2005.342767][ T2791] EXT4-fs (loop2): 1 orphan inode deleted [ 2005.349588][ T2791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2005.365432][T10471] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 2005.374453][T10471] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:32: Failed to release dquot type 0 [ 2006.262114][ T2803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2006.270882][ T2803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2006.758763][ T2806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2006.767592][ T2806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2006.844668][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2007.452726][ T2825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18788'. [ 2007.501704][ T2826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.510520][ T2826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.900716][ T2832] smc: net device bond0 applied user defined pnetid SYZ2 [ 2007.911943][ T2832] smc: net device bond0 erased user defined pnetid SYZ2 [ 2009.494622][ T2841] loop2: detected capacity change from 0 to 1024 [ 2009.501312][ T2841] EXT4-fs: Ignoring removed i_version option [ 2010.135862][ T2841] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2010.161837][ T2841] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.18794: Invalid block bitmap block 0 in block_group 0 [ 2010.175792][ T2841] Quota error (device loop2): write_blk: dquota write failed [ 2010.183274][ T2841] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2010.193379][ T2841] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.18794: Failed to acquire dquot type 0 [ 2010.205036][ T2841] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.18794: Freeing blocks not in datazone - block = 0, count = 4096 [ 2010.218921][ T2841] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.18794: Invalid inode bitmap blk 0 in block_group 0 [ 2010.234722][ T2841] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 2010.243411][T25612] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 2010.252387][T25612] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 2010.275994][ T2841] EXT4-fs (loop2): 1 orphan inode deleted [ 2010.282393][ T2841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2010.656294][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.914106][ T2869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.922763][ T2869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.058653][ T2874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.067554][ T2874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.105024][ T2873] dvmrp0: entered allmulticast mode [ 2011.123567][ T2869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18803'. [ 2011.141124][ T2876] dvmrp0: left allmulticast mode [ 2011.202027][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.223336][ T2869] bridge_slave_0 (unregistering): left allmulticast mode [ 2011.230871][ T2869] bridge_slave_0 (unregistering): left promiscuous mode [ 2011.237852][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.361721][ T2879] smc: net device bond0 applied user defined pnetid SYZ2 [ 2011.369097][ T2879] smc: net device bond0 erased user defined pnetid SYZ2 [ 2011.674075][ T2889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.683038][ T2889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.367832][ T2891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.376622][ T2891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.542337][ T2896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18810'. [ 2012.615649][ T2899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.624316][ T2899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2013.677688][ T2905] loop2: detected capacity change from 0 to 2048 [ 2013.704094][ T2905] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 2013.712287][ T2905] System zones: 0-4 [ 2013.716879][ T2905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2013.729077][ T2905] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2013.971972][ T2909] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.18812: bg 0: block 345: padding at end of block bitmap is not set [ 2014.010727][ T2909] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 2014.023350][ T2909] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2014.023350][ T2909] [ 2014.073366][T25612] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 2014.086078][T25612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2014.086078][T25612] [ 2014.117931][T25612] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 2014.130828][T25612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2014.130828][T25612] [ 2014.140609][T25612] EXT4-fs (loop2): Total free blocks count 0 [ 2014.146613][T25612] EXT4-fs (loop2): Free/Dirty block details [ 2014.152566][T25612] EXT4-fs (loop2): free_blocks=0 [ 2014.575720][ T2938] loop2: detected capacity change from 0 to 1024 [ 2014.582749][ T2938] EXT4-fs: Ignoring removed i_version option [ 2014.594615][ T2938] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2014.607885][ T2938] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.18820: Invalid block bitmap block 0 in block_group 0 [ 2014.621665][ T2938] Quota error (device loop2): write_blk: dquota write failed [ 2014.629078][ T2938] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2014.639118][ T2938] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.18820: Failed to acquire dquot type 0 [ 2014.650879][ T2938] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.18820: Freeing blocks not in datazone - block = 0, count = 4096 [ 2014.664563][ T2938] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.18820: Invalid inode bitmap blk 0 in block_group 0 [ 2014.679545][T25612] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 2014.688691][T25612] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 2014.700445][ T2938] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 2014.709337][ T2938] EXT4-fs (loop2): 1 orphan inode deleted [ 2014.715677][ T2938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2015.247938][ T2945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.256936][ T2945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2016.018424][ T2956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2016.027155][ T2956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2016.075989][ T2946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18824'. [ 2016.103998][ T2958] xt_bpf: check failed: parse error [ 2016.563566][ T2971] dvmrp0: entered allmulticast mode [ 2016.607838][ T2971] dvmrp0: left allmulticast mode [ 2016.701065][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2016.814333][ T2975] loop2: detected capacity change from 0 to 512 [ 2016.826681][ T2975] EXT4-fs: Ignoring removed i_version option [ 2016.832830][ T2975] EXT4-fs: Ignoring removed mblk_io_submit option [ 2016.839691][ T2975] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2016.849803][ T2975] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 2017.327015][ T2991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.335798][ T2991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2017.661782][ T2994] loop2: detected capacity change from 0 to 2048 [ 2017.675487][ T2994] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 2017.683675][ T2994] System zones: 0-4 [ 2017.687969][ T2994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2017.700189][ T2994] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2017.950760][ T2998] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.18838: bg 0: block 345: padding at end of block bitmap is not set [ 2017.979846][ T2998] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 2017.992412][ T2998] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2017.992412][ T2998] [ 2018.058518][T25606] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 2018.071240][T25606] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2018.071240][T25606] [ 2018.128653][T25606] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 2018.141519][T25606] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2018.141519][T25606] [ 2018.151290][T25606] EXT4-fs (loop2): Total free blocks count 0 [ 2018.157311][T25606] EXT4-fs (loop2): Free/Dirty block details [ 2018.163271][T25606] EXT4-fs (loop2): free_blocks=0 [ 2018.359601][ T3014] xt_bpf: check failed: parse error [ 2018.454875][ T3022] loop2: detected capacity change from 0 to 128 [ 2018.501749][ T3022] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2018.529761][ T3022] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2018.669166][ T3027] xt_bpf: check failed: parse error [ 2019.283914][T32210] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2019.834812][ T3062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18859'. [ 2020.098431][ T3070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.107137][ T3070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.634925][ T3079] xt_bpf: check failed: parse error [ 2021.452537][ T3087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18868'. [ 2022.581585][ T3116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.590449][ T3116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.496277][ T3146] xt_bpf: check failed: parse error [ 2026.105524][ T29] audit: type=1326 audit(2000001060.454:20477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.1.18893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fd908d169 code=0x0 [ 2026.185860][ T3176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18892'. [ 2026.212550][ T3169] loop2: detected capacity change from 0 to 128 [ 2026.236307][ T3169] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2026.269357][ T3169] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2026.674363][T32210] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2027.835445][ T3266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.844241][ T3266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.171799][ T3267] loop2: detected capacity change from 0 to 2048 [ 2028.241161][ T3267] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 2028.282269][ T3267] System zones: 0-4 [ 2028.295776][ T3267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2028.335247][ T3267] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2029.361992][ T3182] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 2029.378254][ T3326] dvmrp0: entered allmulticast mode [ 2029.435247][T10478] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1742 with error 117 [ 2029.447927][T10478] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2029.447927][T10478] [ 2029.469055][ T3326] dvmrp0: left allmulticast mode [ 2029.664366][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2029.958141][ T3338] xt_bpf: check failed: parse error [ 2030.147938][ T3342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.156653][ T3342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.060483][ T3374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.069251][ T3374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.794967][ T3393] smc: net device bond0 applied user defined pnetid SYZ2 [ 2031.810755][ T3393] smc: net device bond0 erased user defined pnetid SYZ2 [ 2032.039385][ T3397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2032.048182][ T3397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.646417][ T3407] xt_bpf: check failed: parse error [ 2032.883640][ T3420] loop2: detected capacity change from 0 to 1024 [ 2032.902823][ T3420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2032.965894][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2033.058475][ T3429] smc: net device bond0 applied user defined pnetid SYZ2 [ 2033.065836][ T3429] smc: net device bond0 erased user defined pnetid SYZ2 [ 2033.429229][ T3442] xt_bpf: check failed: parse error [ 2033.851781][ T3449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.860537][ T3449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.307281][ T3451] xt_bpf: check failed: parse error [ 2034.710284][ T3455] loop2: detected capacity change from 0 to 128 [ 2034.748683][ T3455] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2034.866612][ T3455] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2034.926991][ T3467] smc: net device bond0 applied user defined pnetid SYZ2 [ 2034.943438][ T3467] smc: net device bond0 erased user defined pnetid SYZ2 [ 2035.002031][ T3468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.010848][ T3468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.255298][ T3470] smc: net device bond0 applied user defined pnetid SYZ2 [ 2035.294870][ T3470] smc: net device bond0 erased user defined pnetid SYZ2 [ 2035.433225][ T3474] dvmrp0: entered allmulticast mode [ 2035.440057][T32210] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2035.459670][ T3474] dvmrp0: left allmulticast mode [ 2035.608918][ T3483] loop2: detected capacity change from 0 to 512 [ 2035.662804][ T3483] EXT4-fs: Ignoring removed i_version option [ 2035.669016][ T3483] EXT4-fs: Ignoring removed mblk_io_submit option [ 2035.689520][ T3483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2035.709252][ T3483] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 2035.751465][ T3486] dvmrp0: entered allmulticast mode [ 2036.053012][ T3490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2036.062061][ T3490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2036.439551][ T3495] loop2: detected capacity change from 0 to 2048 [ 2036.455849][ T3495] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 2036.464121][ T3495] System zones: 0-4 [ 2036.528569][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2036.565140][ T3500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2036.574085][ T3500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2036.600090][ T3495] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2036.628699][ T3502] xt_bpf: check failed: parse error [ 2037.012349][ T3503] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.18950: bg 0: block 345: padding at end of block bitmap is not set [ 2037.027127][ T3503] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 2037.039608][ T3503] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2037.039608][ T3503] [ 2037.089357][T10478] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 2037.102046][T10478] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2037.102046][T10478] [ 2037.150440][T10478] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 2037.163259][T10478] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2037.163259][T10478] [ 2037.172901][T10478] EXT4-fs (loop2): Total free blocks count 0 [ 2037.178944][T10478] EXT4-fs (loop2): Free/Dirty block details [ 2037.184867][T10478] EXT4-fs (loop2): free_blocks=0 [ 2037.286852][ T3510] smc: net device bond0 applied user defined pnetid SYZ2 [ 2037.301773][ T3510] smc: net device bond0 erased user defined pnetid SYZ2 [ 2037.671695][ T3525] loop2: detected capacity change from 0 to 1024 [ 2037.713911][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.722680][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.741631][ T3525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2037.927042][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2038.099999][ T3532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2038.107259][ T3532] IPv6: NLM_F_CREATE should be set when creating new route [ 2038.114469][ T3532] IPv6: NLM_F_CREATE should be set when creating new route [ 2038.137532][ T3534] xt_bpf: check failed: parse error [ 2038.893480][ T3548] smc: net device bond0 applied user defined pnetid SYZ2 [ 2038.900959][ T3548] smc: net device bond0 erased user defined pnetid SYZ2 [ 2038.996233][ T29] audit: type=1326 audit(2000001074.284:20478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.062141][ T29] audit: type=1326 audit(2000001074.316:20479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.085864][ T29] audit: type=1326 audit(2000001074.316:20480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.109475][ T29] audit: type=1326 audit(2000001074.316:20481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.133171][ T29] audit: type=1326 audit(2000001074.316:20482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.156806][ T29] audit: type=1326 audit(2000001074.316:20483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.180360][ T29] audit: type=1326 audit(2000001074.316:20484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.204075][ T29] audit: type=1326 audit(2000001074.316:20485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.227659][ T29] audit: type=1326 audit(2000001074.316:20486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.251244][ T29] audit: type=1326 audit(2000001074.316:20487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.18971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8e534d169 code=0x7ffc0000 [ 2039.332271][ T3565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2039.339526][ T3565] IPv6: NLM_F_CREATE should be set when creating new route [ 2039.456212][ T3575] smc: net device bond0 applied user defined pnetid SYZ2 [ 2039.475323][ T3575] smc: net device bond0 erased user defined pnetid SYZ2 [ 2039.575420][ T3579] xt_bpf: check failed: parse error [ 2039.752307][ T3586] FAULT_INJECTION: forcing a failure. [ 2039.752307][ T3586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2039.765502][ T3586] CPU: 1 UID: 0 PID: 3586 Comm: syz.1.18983 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2039.765534][ T3586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2039.765625][ T3586] Call Trace: [ 2039.765798][ T3586] [ 2039.765813][ T3586] dump_stack_lvl+0xf6/0x150 [ 2039.765855][ T3586] dump_stack+0x15/0x1a [ 2039.765872][ T3586] should_fail_ex+0x261/0x270 [ 2039.765890][ T3586] should_fail+0xb/0x10 [ 2039.765928][ T3586] should_fail_usercopy+0x1a/0x20 [ 2039.765972][ T3586] _copy_from_user+0x1c/0xa0 [ 2039.765994][ T3586] do_ip6t_set_ctl+0x44d/0x8c0 [ 2039.766013][ T3586] ? kstrtouint+0x7b/0xc0 [ 2039.766050][ T3586] nf_setsockopt+0x195/0x1b0 [ 2039.766123][ T3586] ipv6_setsockopt+0x10f/0x130 [ 2039.766139][ T3586] tcp_setsockopt+0x93/0xb0 [ 2039.766165][ T3586] sock_common_setsockopt+0x64/0x80 [ 2039.766246][ T3586] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2039.766277][ T3586] __sys_setsockopt+0x187/0x200 [ 2039.766379][ T3586] __x64_sys_setsockopt+0x66/0x80 [ 2039.766425][ T3586] x64_sys_call+0x2a09/0x2e10 [ 2039.766448][ T3586] do_syscall_64+0xc9/0x1c0 [ 2039.766530][ T3586] ? clear_bhb_loop+0x25/0x80 [ 2039.766549][ T3586] ? clear_bhb_loop+0x25/0x80 [ 2039.766568][ T3586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2039.766591][ T3586] RIP: 0033:0x7f6fd908d169 [ 2039.766635][ T3586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2039.766654][ T3586] RSP: 002b:00007f6fd76ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2039.766670][ T3586] RAX: ffffffffffffffda RBX: 00007f6fd92a6160 RCX: 00007f6fd908d169 [ 2039.766722][ T3586] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 2039.766732][ T3586] RBP: 00007f6fd76ad090 R08: 0000000000000300 R09: 0000000000000000 [ 2039.766744][ T3586] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2039.766758][ T3586] R13: 0000000000000000 R14: 00007f6fd92a6160 R15: 00007ffef22293b8 [ 2039.766776][ T3586] [ 2040.108820][ T3589] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2040.116195][ T3589] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 2040.180364][T31266] block device autoloading is deprecated and will be removed. [ 2040.286008][ T3606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2040.293261][ T3606] IPv6: NLM_F_CREATE should be set when creating new route [ 2040.411623][ T3608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2040.420433][ T3608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2040.630948][ T3614] smc: net device bond0 applied user defined pnetid SYZ2 [ 2040.656931][ T3614] smc: net device bond0 erased user defined pnetid SYZ2 [ 2042.244899][ T3650] xt_bpf: check failed: parse error [ 2042.496136][ T3658] bridge0: port 1(syz_tun) entered blocking state [ 2042.502690][ T3658] bridge0: port 1(syz_tun) entered disabled state [ 2042.509547][ T3658] syz_tun: entered allmulticast mode [ 2042.517235][ T3658] syz_tun: entered promiscuous mode [ 2042.522761][ T3658] bridge0: port 1(syz_tun) entered blocking state [ 2042.529366][ T3658] bridge0: port 1(syz_tun) entered forwarding state [ 2042.598489][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19007'. [ 2043.472592][ T3664] loop2: detected capacity change from 0 to 1024 [ 2043.545582][ T3664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2044.826997][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2045.128987][ T3684] atomic_op ffff888114a75128 conn xmit_atomic 0000000000000000 [ 2045.665324][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2045.674165][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2046.253088][ T3714] loop2: detected capacity change from 0 to 1024 [ 2046.259740][ T3714] EXT4-fs: Ignoring removed i_version option [ 2046.295291][ T3716] xt_bpf: check failed: parse error [ 2046.377459][ T3714] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2046.562396][ T3724] smc: net device bond0 applied user defined pnetid SYZ2 [ 2046.578043][ T3724] smc: net device bond0 erased user defined pnetid SYZ2 [ 2046.683644][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2046.692361][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2046.959973][ T3714] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.19012: Invalid block bitmap block 0 in block_group 0 [ 2046.997720][ T3714] __quota_error: 39 callbacks suppressed [ 2046.997735][ T3714] Quota error (device loop2): write_blk: dquota write failed [ 2047.010864][ T3714] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2047.020935][ T3714] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.19012: Failed to acquire dquot type 0 [ 2047.036843][ T3714] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.19012: Freeing blocks not in datazone - block = 0, count = 4096 [ 2047.050565][ T3714] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.19012: Invalid inode bitmap blk 0 in block_group 0 [ 2047.063560][ T3714] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 2047.072274][ T3714] EXT4-fs (loop2): 1 orphan inode deleted [ 2047.078380][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2047.093009][T25606] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 2047.102369][T25606] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 2047.972619][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2048.406789][ T3764] FAULT_INJECTION: forcing a failure. [ 2048.406789][ T3764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2048.419928][ T3764] CPU: 1 UID: 0 PID: 3764 Comm: syz.5.19038 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2048.419999][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2048.420012][ T3764] Call Trace: [ 2048.420018][ T3764] [ 2048.420024][ T3764] dump_stack_lvl+0xf6/0x150 [ 2048.420050][ T3764] dump_stack+0x15/0x1a [ 2048.420068][ T3764] should_fail_ex+0x261/0x270 [ 2048.420149][ T3764] should_fail+0xb/0x10 [ 2048.420167][ T3764] should_fail_usercopy+0x1a/0x20 [ 2048.420247][ T3764] _copy_from_user+0x1c/0xa0 [ 2048.420275][ T3764] memdup_user_nul+0x71/0xf0 [ 2048.420299][ T3764] sel_write_validatetrans+0x1a0/0x370 [ 2048.420326][ T3764] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 2048.420354][ T3764] vfs_write+0x295/0x950 [ 2048.420382][ T3764] ? putname+0xe1/0x100 [ 2048.420413][ T3764] ? __fget_files+0x186/0x1c0 [ 2048.420445][ T3764] ksys_write+0xeb/0x1b0 [ 2048.420522][ T3764] __x64_sys_write+0x42/0x50 [ 2048.420545][ T3764] x64_sys_call+0x2a45/0x2e10 [ 2048.420568][ T3764] do_syscall_64+0xc9/0x1c0 [ 2048.420589][ T3764] ? clear_bhb_loop+0x25/0x80 [ 2048.420661][ T3764] ? clear_bhb_loop+0x25/0x80 [ 2048.420684][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.420754][ T3764] RIP: 0033:0x7f630345d169 [ 2048.420769][ T3764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2048.420788][ T3764] RSP: 002b:00007f6301abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2048.420807][ T3764] RAX: ffffffffffffffda RBX: 00007f6303675fa0 RCX: 00007f630345d169 [ 2048.420850][ T3764] RDX: 0000000000000071 RSI: 0000000000000000 RDI: 0000000000000003 [ 2048.420875][ T3764] RBP: 00007f6301abf090 R08: 0000000000000000 R09: 0000000000000000 [ 2048.420887][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2048.420899][ T3764] R13: 0000000000000000 R14: 00007f6303675fa0 R15: 00007ffc00c945c8 [ 2048.420944][ T3764] [ 2048.630793][ T3770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.652908][ T3771] xt_bpf: check failed: parse error [ 2048.665380][ T3770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.722731][ T3772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19039'. [ 2048.748132][ T3761] netlink: 88 bytes leftover after parsing attributes in process `syz.1.19039'. [ 2049.272248][ T3776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2049.463725][ T3780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.472352][ T3780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.260933][ T3806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.270538][ T3806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.280209][ T3806] netlink: 'syz.5.19052': attribute type 1 has an invalid length. [ 2050.558521][ T29] audit: type=1326 audit(2000001086.686:20527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.1.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2050.558907][ T3809] FAULT_INJECTION: forcing a failure. [ 2050.558907][ T3809] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.582143][ T29] audit: type=1326 audit(2000001086.686:20528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.1.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2050.597319][ T29] audit: type=1326 audit(2000001086.686:20529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.1.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2050.618353][ T3809] CPU: 0 UID: 0 PID: 3809 Comm: syz.1.19053 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2050.618397][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2050.618410][ T3809] Call Trace: [ 2050.618416][ T3809] [ 2050.618423][ T3809] dump_stack_lvl+0xf6/0x150 [ 2050.618447][ T3809] dump_stack+0x15/0x1a [ 2050.618531][ T3809] should_fail_ex+0x261/0x270 [ 2050.618555][ T3809] should_failslab+0x8f/0xb0 [ 2050.618582][ T3809] __kmalloc_cache_noprof+0x55/0x320 [ 2050.618664][ T3809] ? audit_log_d_path+0x8e/0x150 [ 2050.618692][ T3809] audit_log_d_path+0x8e/0x150 [ 2050.618793][ T3809] audit_log_d_path_exe+0x42/0x70 [ 2050.618818][ T3809] audit_log_task+0x1f1/0x250 [ 2050.618841][ T3809] audit_seccomp+0x68/0x130 [ 2050.618861][ T3809] __seccomp_filter+0x694/0x10e0 [ 2050.618895][ T3809] ? vfs_write+0x669/0x950 [ 2050.618956][ T3809] ? putname+0xe1/0x100 [ 2050.619061][ T3809] __secure_computing+0x7e/0x160 [ 2050.619091][ T3809] syscall_trace_enter+0xcf/0x1f0 [ 2050.619123][ T3809] ? fpregs_assert_state_consistent+0x83/0xa0 [ 2050.619219][ T3809] do_syscall_64+0xaa/0x1c0 [ 2050.619240][ T3809] ? clear_bhb_loop+0x25/0x80 [ 2050.619259][ T3809] ? clear_bhb_loop+0x25/0x80 [ 2050.619276][ T3809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2050.619294][ T3809] RIP: 0033:0x7f6fd908d169 [ 2050.619310][ T3809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2050.619329][ T3809] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2050.619349][ T3809] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2050.619362][ T3809] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000000002 [ 2050.619375][ T3809] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2050.619388][ T3809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2050.619481][ T3809] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2050.619500][ T3809] [ 2050.793633][ T3814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2050.800955][ T29] audit: type=1326 audit(2000001086.686:20530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.1.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fd908bad0 code=0x7ffc0000 [ 2050.808825][ T3814] IPv6: NLM_F_CREATE should be set when creating new route [ 2050.834655][ T3816] smc: net device bond0 applied user defined pnetid SYZ2 [ 2050.841039][ T29] audit: type=1326 audit(2000001086.686:20531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.1.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6fd908bc1f code=0x7ffc0000 [ 2050.843055][ T29] audit: type=1326 audit(2000001086.686:20532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.1.19053" exe="" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2050.884939][ T3817] smc: net device bond0 erased user defined pnetid SYZ2 [ 2050.889487][ T29] audit: type=1326 audit(2000001086.826:20533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.1.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6fd908bb7c code=0x7ffc0000 [ 2050.971697][ T3821] xt_bpf: check failed: parse error [ 2051.116978][ T3830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2051.135771][ T3830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2051.890795][ T3860] FAULT_INJECTION: forcing a failure. [ 2051.890795][ T3860] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.903497][ T3860] CPU: 1 UID: 0 PID: 3860 Comm: syz.5.19073 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2051.903547][ T3860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2051.903558][ T3860] Call Trace: [ 2051.903563][ T3860] [ 2051.903568][ T3860] dump_stack_lvl+0xf6/0x150 [ 2051.903591][ T3860] dump_stack+0x15/0x1a [ 2051.903609][ T3860] should_fail_ex+0x261/0x270 [ 2051.903631][ T3860] should_failslab+0x8f/0xb0 [ 2051.903673][ T3860] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 2051.903702][ T3860] ? __alloc_skb+0x10d/0x320 [ 2051.903734][ T3860] __alloc_skb+0x10d/0x320 [ 2051.903820][ T3860] netlink_alloc_large_skb+0xad/0xe0 [ 2051.903963][ T3860] netlink_sendmsg+0x3da/0x720 [ 2051.903991][ T3860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2051.904019][ T3860] __sock_sendmsg+0x140/0x180 [ 2051.904045][ T3860] ____sys_sendmsg+0x350/0x4e0 [ 2051.904140][ T3860] __sys_sendmsg+0x1a0/0x240 [ 2051.904170][ T3860] __x64_sys_sendmsg+0x46/0x50 [ 2051.904189][ T3860] x64_sys_call+0x26f3/0x2e10 [ 2051.904273][ T3860] do_syscall_64+0xc9/0x1c0 [ 2051.904289][ T3860] ? clear_bhb_loop+0x25/0x80 [ 2051.904307][ T3860] ? clear_bhb_loop+0x25/0x80 [ 2051.904325][ T3860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2051.904347][ T3860] RIP: 0033:0x7f630345d169 [ 2051.904362][ T3860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2051.904449][ T3860] RSP: 002b:00007f6301abf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2051.904465][ T3860] RAX: ffffffffffffffda RBX: 00007f6303675fa0 RCX: 00007f630345d169 [ 2051.904486][ T3860] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 2051.904495][ T3860] RBP: 00007f6301abf090 R08: 0000000000000000 R09: 0000000000000000 [ 2051.904504][ T3860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2051.904514][ T3860] R13: 0000000000000000 R14: 00007f6303675fa0 R15: 00007ffc00c945c8 [ 2051.904529][ T3860] [ 2052.244256][ T3864] FAULT_INJECTION: forcing a failure. [ 2052.244256][ T3864] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.256996][ T3864] CPU: 0 UID: 0 PID: 3864 Comm: syz.5.19075 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2052.257017][ T3864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2052.257031][ T3864] Call Trace: [ 2052.257037][ T3864] [ 2052.257044][ T3864] dump_stack_lvl+0xf6/0x150 [ 2052.257074][ T3864] dump_stack+0x15/0x1a [ 2052.257112][ T3864] should_fail_ex+0x261/0x270 [ 2052.257128][ T3864] should_failslab+0x8f/0xb0 [ 2052.257186][ T3864] __kmalloc_noprof+0xad/0x410 [ 2052.257212][ T3864] ? bpf_test_init+0xa9/0x160 [ 2052.257239][ T3864] bpf_test_init+0xa9/0x160 [ 2052.257303][ T3864] bpf_prog_test_run_skb+0x175/0xbe0 [ 2052.257335][ T3864] ? __fget_files+0x186/0x1c0 [ 2052.257363][ T3864] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2052.257420][ T3864] bpf_prog_test_run+0x20e/0x3a0 [ 2052.257445][ T3864] __sys_bpf+0x440/0x800 [ 2052.257471][ T3864] __x64_sys_bpf+0x43/0x50 [ 2052.257513][ T3864] x64_sys_call+0x23da/0x2e10 [ 2052.257608][ T3864] do_syscall_64+0xc9/0x1c0 [ 2052.257624][ T3864] ? clear_bhb_loop+0x25/0x80 [ 2052.257641][ T3864] ? clear_bhb_loop+0x25/0x80 [ 2052.257658][ T3864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2052.257752][ T3864] RIP: 0033:0x7f630345d169 [ 2052.257767][ T3864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2052.257785][ T3864] RSP: 002b:00007f6301abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2052.257804][ T3864] RAX: ffffffffffffffda RBX: 00007f6303675fa0 RCX: 00007f630345d169 [ 2052.257818][ T3864] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 2052.257830][ T3864] RBP: 00007f6301abf090 R08: 0000000000000000 R09: 0000000000000000 [ 2052.257916][ T3864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2052.257928][ T3864] R13: 0000000000000000 R14: 00007f6303675fa0 R15: 00007ffc00c945c8 [ 2052.257943][ T3864] [ 2052.528241][ T3866] FAULT_INJECTION: forcing a failure. [ 2052.528241][ T3866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2052.541346][ T3866] CPU: 1 UID: 0 PID: 3866 Comm: syz.3.19076 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2052.541387][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2052.541397][ T3866] Call Trace: [ 2052.541403][ T3866] [ 2052.541410][ T3866] dump_stack_lvl+0xf6/0x150 [ 2052.541505][ T3866] dump_stack+0x15/0x1a [ 2052.541524][ T3866] should_fail_ex+0x261/0x270 [ 2052.541546][ T3866] should_fail+0xb/0x10 [ 2052.541628][ T3866] should_fail_usercopy+0x1a/0x20 [ 2052.541652][ T3866] _copy_to_user+0x20/0xa0 [ 2052.541678][ T3866] simple_read_from_buffer+0xb2/0x130 [ 2052.541703][ T3866] proc_fail_nth_read+0x103/0x140 [ 2052.541774][ T3866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2052.541809][ T3866] vfs_read+0x1b2/0x710 [ 2052.541826][ T3866] ? __rcu_read_unlock+0x4e/0x70 [ 2052.541848][ T3866] ? __fget_files+0x186/0x1c0 [ 2052.541989][ T3866] ksys_read+0xeb/0x1b0 [ 2052.542015][ T3866] __x64_sys_read+0x42/0x50 [ 2052.542036][ T3866] x64_sys_call+0x2a3b/0x2e10 [ 2052.542054][ T3866] do_syscall_64+0xc9/0x1c0 [ 2052.542070][ T3866] ? clear_bhb_loop+0x25/0x80 [ 2052.542129][ T3866] ? clear_bhb_loop+0x25/0x80 [ 2052.542153][ T3866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2052.542175][ T3866] RIP: 0033:0x7fc64b62bb7c [ 2052.542190][ T3866] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2052.542205][ T3866] RSP: 002b:00007fc649c97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2052.542221][ T3866] RAX: ffffffffffffffda RBX: 00007fc64b845fa0 RCX: 00007fc64b62bb7c [ 2052.542230][ T3866] RDX: 000000000000000f RSI: 00007fc649c970a0 RDI: 0000000000000007 [ 2052.542318][ T3866] RBP: 00007fc649c97090 R08: 0000000000000000 R09: 0000000000000000 [ 2052.542332][ T3866] R10: 0000000000000619 R11: 0000000000000246 R12: 0000000000000001 [ 2052.542344][ T3866] R13: 0000000000000000 R14: 00007fc64b845fa0 R15: 00007ffdc6026068 [ 2052.542363][ T3866] [ 2052.757641][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 2052.757656][ T29] audit: type=1400 audit(2000001088.800:20564): avc: denied { create } for pid=3865 comm="syz.3.19076" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2052.784680][ T29] audit: type=1400 audit(2000001088.800:20565): avc: denied { mounton } for pid=3865 comm="syz.3.19076" path="/276/file0" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2052.808131][ T29] audit: type=1400 audit(2000001088.800:20566): avc: denied { mount } for pid=3865 comm="syz.3.19076" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2052.847342][ T3872] program syz.2.19079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2052.920923][ T29] audit: type=1400 audit(2000001089.175:20567): avc: denied { unmount } for pid=30638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2053.035672][ T29] audit: type=1400 audit(2000001089.251:20568): avc: denied { unlink } for pid=30638 comm="syz-executor" name="file0" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2053.043090][ T3880] loop2: detected capacity change from 0 to 512 [ 2053.058786][ T29] audit: type=1400 audit(2000001089.336:20569): avc: denied { audit_write } for pid=3879 comm="syz.2.19081" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2053.086227][ T29] audit: type=1107 audit(2000001089.336:20570): pid=3879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2053.461980][ T29] audit: type=1326 audit(2000001089.798:20571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.1.19085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2053.515558][ T3880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2053.553166][ T3880] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2053.563800][ T29] audit: type=1326 audit(2000001089.830:20572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.1.19085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2053.587569][ T29] audit: type=1326 audit(2000001089.830:20573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.1.19085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2053.650662][ T3902] smc: net device bond0 applied user defined pnetid SYZ2 [ 2053.658435][ T3902] smc: net device bond0 erased user defined pnetid SYZ2 [ 2053.681839][ T3904] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2053.693705][ T3904] bridge0: port 4(syz_tun) entered disabled state [ 2053.693782][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2053.700180][ T3904] bridge0: port 3(veth0_to_bond) entered disabled state [ 2053.700258][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.726406][ T3906] random: crng reseeded on system resumption [ 2053.972401][ T3933] random: crng reseeded on system resumption [ 2054.067034][ T3933] FAULT_INJECTION: forcing a failure. [ 2054.067034][ T3933] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.079786][ T3933] CPU: 0 UID: 0 PID: 3933 Comm: syz.3.19098 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2054.079813][ T3933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2054.079824][ T3933] Call Trace: [ 2054.079829][ T3933] [ 2054.079835][ T3933] dump_stack_lvl+0xf6/0x150 [ 2054.079934][ T3933] dump_stack+0x15/0x1a [ 2054.079949][ T3933] should_fail_ex+0x261/0x270 [ 2054.079967][ T3933] should_failslab+0x8f/0xb0 [ 2054.079989][ T3933] __kmalloc_cache_noprof+0x55/0x320 [ 2054.080018][ T3933] ? audit_log_d_path+0x8e/0x150 [ 2054.080067][ T3933] audit_log_d_path+0x8e/0x150 [ 2054.080087][ T3933] audit_log_d_path_exe+0x42/0x70 [ 2054.080107][ T3933] audit_log_task+0x1f1/0x250 [ 2054.080124][ T3933] audit_seccomp+0x68/0x130 [ 2054.080140][ T3933] __seccomp_filter+0x694/0x10e0 [ 2054.080177][ T3933] ? vfs_write+0x669/0x950 [ 2054.080196][ T3933] ? putname+0xe1/0x100 [ 2054.080225][ T3933] __secure_computing+0x7e/0x160 [ 2054.080321][ T3933] syscall_trace_enter+0xcf/0x1f0 [ 2054.080347][ T3933] ? fpregs_assert_state_consistent+0x83/0xa0 [ 2054.080376][ T3933] do_syscall_64+0xaa/0x1c0 [ 2054.080393][ T3933] ? clear_bhb_loop+0x25/0x80 [ 2054.080411][ T3933] ? clear_bhb_loop+0x25/0x80 [ 2054.080436][ T3933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2054.080456][ T3933] RIP: 0033:0x7fc64b62d169 [ 2054.080469][ T3933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2054.080522][ T3933] RSP: 002b:00007fc649c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2054.080636][ T3933] RAX: ffffffffffffffda RBX: 00007fc64b845fa0 RCX: 00007fc64b62d169 [ 2054.080647][ T3933] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000000002 [ 2054.080672][ T3933] RBP: 00007fc649c97090 R08: 0000000000000000 R09: 0000000000000000 [ 2054.080682][ T3933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2054.080692][ T3933] R13: 0000000000000000 R14: 00007fc64b845fa0 R15: 00007ffdc6026068 [ 2054.080786][ T3933] [ 2054.424961][ T3944] FAULT_INJECTION: forcing a failure. [ 2054.424961][ T3944] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.437794][ T3944] CPU: 1 UID: 0 PID: 3944 Comm: syz.3.19102 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2054.437821][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2054.437834][ T3944] Call Trace: [ 2054.437841][ T3944] [ 2054.437848][ T3944] dump_stack_lvl+0xf6/0x150 [ 2054.437870][ T3944] dump_stack+0x15/0x1a [ 2054.437894][ T3944] should_fail_ex+0x261/0x270 [ 2054.437974][ T3944] should_failslab+0x8f/0xb0 [ 2054.438000][ T3944] __kmalloc_cache_noprof+0x55/0x320 [ 2054.438077][ T3944] ? sctp_association_new+0x71/0x1280 [ 2054.438099][ T3944] ? __list_add_valid_or_report+0x38/0xe0 [ 2054.438123][ T3944] sctp_association_new+0x71/0x1280 [ 2054.438152][ T3944] sctp_connect_new_asoc+0x1c4/0x3c0 [ 2054.438185][ T3944] sctp_sendmsg+0xe96/0x1870 [ 2054.438275][ T3944] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2054.438345][ T3944] inet_sendmsg+0xc5/0xd0 [ 2054.438375][ T3944] __sock_sendmsg+0x102/0x180 [ 2054.438426][ T3944] ____sys_sendmsg+0x350/0x4e0 [ 2054.438449][ T3944] __sys_sendmmsg+0x22a/0x4b0 [ 2054.438494][ T3944] __x64_sys_sendmmsg+0x57/0x70 [ 2054.438509][ T3944] x64_sys_call+0x2b53/0x2e10 [ 2054.438527][ T3944] do_syscall_64+0xc9/0x1c0 [ 2054.438544][ T3944] ? clear_bhb_loop+0x25/0x80 [ 2054.438570][ T3944] ? clear_bhb_loop+0x25/0x80 [ 2054.438587][ T3944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2054.438608][ T3944] RIP: 0033:0x7fc64b62d169 [ 2054.438623][ T3944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2054.438707][ T3944] RSP: 002b:00007fc649c97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2054.438722][ T3944] RAX: ffffffffffffffda RBX: 00007fc64b845fa0 RCX: 00007fc64b62d169 [ 2054.438732][ T3944] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 2054.438744][ T3944] RBP: 00007fc649c97090 R08: 0000000000000000 R09: 0000000000000000 [ 2054.438756][ T3944] R10: 0000000014004841 R11: 0000000000000246 R12: 0000000000000001 [ 2054.438769][ T3944] R13: 0000000000000000 R14: 00007fc64b845fa0 R15: 00007ffdc6026068 [ 2054.438789][ T3944] [ 2054.694854][ T3946] FAULT_INJECTION: forcing a failure. [ 2054.694854][ T3946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2054.708128][ T3946] CPU: 1 UID: 0 PID: 3946 Comm: syz.9.19103 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2054.708155][ T3946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2054.708165][ T3946] Call Trace: [ 2054.708196][ T3946] [ 2054.708204][ T3946] dump_stack_lvl+0xf6/0x150 [ 2054.708228][ T3946] dump_stack+0x15/0x1a [ 2054.708284][ T3946] should_fail_ex+0x261/0x270 [ 2054.708305][ T3946] should_fail+0xb/0x10 [ 2054.708319][ T3946] should_fail_usercopy+0x1a/0x20 [ 2054.708373][ T3946] _copy_to_user+0x20/0xa0 [ 2054.708401][ T3946] vfs_readlink+0x206/0x3a0 [ 2054.708433][ T3946] do_readlinkat+0x13f/0x210 [ 2054.708536][ T3946] __x64_sys_readlinkat+0x53/0x60 [ 2054.708571][ T3946] x64_sys_call+0x2653/0x2e10 [ 2054.708594][ T3946] do_syscall_64+0xc9/0x1c0 [ 2054.708622][ T3946] ? clear_bhb_loop+0x25/0x80 [ 2054.708641][ T3946] ? clear_bhb_loop+0x25/0x80 [ 2054.708723][ T3946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2054.708820][ T3946] RIP: 0033:0x7f4b851ad169 [ 2054.708832][ T3946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2054.708848][ T3946] RSP: 002b:00007f4b8380f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 2054.708867][ T3946] RAX: ffffffffffffffda RBX: 00007f4b853c5fa0 RCX: 00007f4b851ad169 [ 2054.708880][ T3946] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 0000000000000004 [ 2054.708893][ T3946] RBP: 00007f4b8380f090 R08: 0000000000000000 R09: 0000000000000000 [ 2054.708930][ T3946] R10: 00000000000000cc R11: 0000000000000246 R12: 0000000000000001 [ 2054.709052][ T3946] R13: 0000000000000000 R14: 00007f4b853c5fa0 R15: 00007ffead6f8a78 [ 2054.709067][ T3946] [ 2054.919123][ T3952] loop2: detected capacity change from 0 to 2048 [ 2055.021879][ T3973] FAULT_INJECTION: forcing a failure. [ 2055.021879][ T3973] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.034660][ T3973] CPU: 1 UID: 0 PID: 3973 Comm: syz.5.19111 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2055.034683][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2055.034692][ T3973] Call Trace: [ 2055.034697][ T3973] [ 2055.034703][ T3973] dump_stack_lvl+0xf6/0x150 [ 2055.034726][ T3973] dump_stack+0x15/0x1a [ 2055.034774][ T3973] should_fail_ex+0x261/0x270 [ 2055.034796][ T3973] should_failslab+0x8f/0xb0 [ 2055.034821][ T3973] __kmalloc_noprof+0xad/0x410 [ 2055.034959][ T3973] ? iter_file_splice_write+0xf9/0x980 [ 2055.035006][ T3973] iter_file_splice_write+0xf9/0x980 [ 2055.035030][ T3973] ? copy_splice_read+0x5a1/0x5d0 [ 2055.035054][ T3973] ? copy_splice_read+0x5a1/0x5d0 [ 2055.035075][ T3973] ? __traceiter_kfree+0x2b/0x50 [ 2055.035151][ T3973] ? copy_splice_read+0x5a1/0x5d0 [ 2055.035170][ T3973] ? copy_splice_read+0x5a1/0x5d0 [ 2055.035189][ T3973] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2055.035285][ T3973] direct_splice_actor+0x160/0x2c0 [ 2055.035387][ T3973] splice_direct_to_actor+0x305/0x680 [ 2055.035412][ T3973] ? __pfx_direct_splice_actor+0x10/0x10 [ 2055.035446][ T3973] do_splice_direct+0xd9/0x150 [ 2055.035469][ T3973] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2055.035619][ T3973] do_sendfile+0x40a/0x690 [ 2055.035652][ T3973] __x64_sys_sendfile64+0x113/0x160 [ 2055.035681][ T3973] x64_sys_call+0xfc3/0x2e10 [ 2055.035699][ T3973] do_syscall_64+0xc9/0x1c0 [ 2055.035715][ T3973] ? clear_bhb_loop+0x25/0x80 [ 2055.035789][ T3973] ? clear_bhb_loop+0x25/0x80 [ 2055.035806][ T3973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.035836][ T3973] RIP: 0033:0x7f630345d169 [ 2055.035857][ T3973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2055.035873][ T3973] RSP: 002b:00007f6301abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2055.035888][ T3973] RAX: ffffffffffffffda RBX: 00007f6303675fa0 RCX: 00007f630345d169 [ 2055.035898][ T3973] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2055.035907][ T3973] RBP: 00007f6301abf090 R08: 0000000000000000 R09: 0000000000000000 [ 2055.035953][ T3973] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000001 [ 2055.035965][ T3973] R13: 0000000000000000 R14: 00007f6303675fa0 R15: 00007ffc00c945c8 [ 2055.035983][ T3973] [ 2055.269219][ T3975] @ÿ: renamed from bond_slave_0 (while UP) [ 2055.326410][ T3978] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 4, id = 0 [ 2055.363796][ T3987] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 2055.363796][ T3987] program syz.3.19116 not setting count and/or reply_len properly [ 2055.397548][ T3983] netlink: 28 bytes leftover after parsing attributes in process `syz.9.19115'. [ 2055.445124][ T3991] netlink: 80 bytes leftover after parsing attributes in process `syz.1.19118'. [ 2055.472807][ T3997] FAULT_INJECTION: forcing a failure. [ 2055.472807][ T3997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2055.486016][ T3997] CPU: 1 UID: 0 PID: 3997 Comm: syz.3.19121 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2055.486042][ T3997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2055.486055][ T3997] Call Trace: [ 2055.486061][ T3997] [ 2055.486068][ T3997] dump_stack_lvl+0xf6/0x150 [ 2055.486093][ T3997] dump_stack+0x15/0x1a [ 2055.486110][ T3997] should_fail_ex+0x261/0x270 [ 2055.486206][ T3997] should_fail+0xb/0x10 [ 2055.486222][ T3997] should_fail_usercopy+0x1a/0x20 [ 2055.486299][ T3997] strncpy_from_user+0x25/0x230 [ 2055.486336][ T3997] ? __fget_files+0x186/0x1c0 [ 2055.486367][ T3997] __se_sys_add_key+0x80/0x330 [ 2055.486420][ T3997] ? fput+0x99/0xd0 [ 2055.486453][ T3997] __x64_sys_add_key+0x67/0x80 [ 2055.486522][ T3997] x64_sys_call+0x1f10/0x2e10 [ 2055.486544][ T3997] do_syscall_64+0xc9/0x1c0 [ 2055.486571][ T3997] ? clear_bhb_loop+0x25/0x80 [ 2055.486592][ T3997] ? clear_bhb_loop+0x25/0x80 [ 2055.486658][ T3997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.486675][ T3997] RIP: 0033:0x7fc64b62d169 [ 2055.486687][ T3997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2055.486705][ T3997] RSP: 002b:00007fc649c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2055.486723][ T3997] RAX: ffffffffffffffda RBX: 00007fc64b845fa0 RCX: 00007fc64b62d169 [ 2055.486736][ T3997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 2055.486816][ T3997] RBP: 00007fc649c97090 R08: fffffffffffffff8 R09: 0000000000000000 [ 2055.486825][ T3997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2055.486835][ T3997] R13: 0000000000000001 R14: 00007fc64b845fa0 R15: 00007ffdc6026068 [ 2055.486849][ T3997] [ 2055.735260][ T4011] FAULT_INJECTION: forcing a failure. [ 2055.735260][ T4011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2055.748570][ T4011] CPU: 0 UID: 0 PID: 4011 Comm: syz.5.19126 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2055.748608][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2055.748621][ T4011] Call Trace: [ 2055.748627][ T4011] [ 2055.748634][ T4011] dump_stack_lvl+0xf6/0x150 [ 2055.748719][ T4011] dump_stack+0x15/0x1a [ 2055.748734][ T4011] should_fail_ex+0x261/0x270 [ 2055.748755][ T4011] should_fail+0xb/0x10 [ 2055.748773][ T4011] should_fail_usercopy+0x1a/0x20 [ 2055.748795][ T4011] strncpy_from_user+0x25/0x230 [ 2055.748907][ T4011] ? __fget_files+0x186/0x1c0 [ 2055.748958][ T4011] __se_sys_add_key+0x80/0x330 [ 2055.748992][ T4011] ? fput+0x99/0xd0 [ 2055.749022][ T4011] __x64_sys_add_key+0x67/0x80 [ 2055.749052][ T4011] x64_sys_call+0x1f10/0x2e10 [ 2055.749070][ T4011] do_syscall_64+0xc9/0x1c0 [ 2055.749108][ T4011] ? clear_bhb_loop+0x25/0x80 [ 2055.749130][ T4011] ? clear_bhb_loop+0x25/0x80 [ 2055.749152][ T4011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.749194][ T4011] RIP: 0033:0x7f630345d169 [ 2055.749206][ T4011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2055.749220][ T4011] RSP: 002b:00007f6301abf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2055.749235][ T4011] RAX: ffffffffffffffda RBX: 00007f6303675fa0 RCX: 00007f630345d169 [ 2055.749246][ T4011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 2055.749258][ T4011] RBP: 00007f6301abf090 R08: fffffffffffffff8 R09: 0000000000000000 [ 2055.749271][ T4011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2055.749317][ T4011] R13: 0000000000000000 R14: 00007f6303675fa0 R15: 00007ffc00c945c8 [ 2055.749400][ T4011] [ 2056.069421][ T4025] sg_write: data in/out 987/94 bytes for SCSI command 0x40-- guessing data in; [ 2056.069421][ T4025] program syz.1.19132 not setting count and/or reply_len properly [ 2056.139483][ T4033] FAULT_INJECTION: forcing a failure. [ 2056.139483][ T4033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2056.152644][ T4033] CPU: 0 UID: 0 PID: 4033 Comm: syz.3.19135 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2056.152673][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2056.152686][ T4033] Call Trace: [ 2056.152692][ T4033] [ 2056.152700][ T4033] dump_stack_lvl+0xf6/0x150 [ 2056.152736][ T4033] dump_stack+0x15/0x1a [ 2056.152753][ T4033] should_fail_ex+0x261/0x270 [ 2056.152780][ T4033] should_fail+0xb/0x10 [ 2056.152797][ T4033] should_fail_usercopy+0x1a/0x20 [ 2056.152820][ T4033] strncpy_from_user+0x25/0x230 [ 2056.152851][ T4033] ? getname_flags+0x81/0x3b0 [ 2056.152917][ T4033] getname_flags+0xb0/0x3b0 [ 2056.152986][ T4033] __x64_sys_renameat2+0x61/0xa0 [ 2056.153010][ T4033] x64_sys_call+0x2cf7/0x2e10 [ 2056.153028][ T4033] do_syscall_64+0xc9/0x1c0 [ 2056.153043][ T4033] ? clear_bhb_loop+0x25/0x80 [ 2056.153108][ T4033] ? clear_bhb_loop+0x25/0x80 [ 2056.153193][ T4033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.153210][ T4033] RIP: 0033:0x7fc64b62d169 [ 2056.153222][ T4033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2056.153310][ T4033] RSP: 002b:00007fc649c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 2056.153327][ T4033] RAX: ffffffffffffffda RBX: 00007fc64b845fa0 RCX: 00007fc64b62d169 [ 2056.153340][ T4033] RDX: ffffffffffffff9c RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 2056.153353][ T4033] RBP: 00007fc649c97090 R08: 0000000000000004 R09: 0000000000000000 [ 2056.153366][ T4033] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 2056.153379][ T4033] R13: 0000000000000000 R14: 00007fc64b845fa0 R15: 00007ffdc6026068 [ 2056.153397][ T4033] [ 2056.404654][ T4046] loop2: detected capacity change from 0 to 512 [ 2056.462536][ T4046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2056.475919][ T4046] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2056.515912][T32210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2056.720389][ T4089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2056.729441][ T4089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.316367][ T4092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19152'. [ 2057.586522][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 2057.586539][ T29] audit: type=1400 audit(2000001094.218:20759): avc: denied { ioctl } for pid=4096 comm="syz.1.19154" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2057.647971][ T4092] gretap1: entered allmulticast mode [ 2057.677171][ T4101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2057.685790][ T4102] FAULT_INJECTION: forcing a failure. [ 2057.685790][ T4102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2057.698941][ T4102] CPU: 0 UID: 0 PID: 4102 Comm: syz.1.19155 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2057.698994][ T4102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2057.699004][ T4102] Call Trace: [ 2057.699009][ T4102] [ 2057.699015][ T4102] dump_stack_lvl+0xf6/0x150 [ 2057.699103][ T4102] dump_stack+0x15/0x1a [ 2057.699117][ T4102] should_fail_ex+0x261/0x270 [ 2057.699260][ T4102] should_fail+0xb/0x10 [ 2057.699277][ T4102] should_fail_usercopy+0x1a/0x20 [ 2057.699295][ T4102] _copy_to_user+0x20/0xa0 [ 2057.699317][ T4102] simple_read_from_buffer+0xb2/0x130 [ 2057.699378][ T4102] proc_fail_nth_read+0x103/0x140 [ 2057.699407][ T4102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2057.699465][ T4102] vfs_read+0x1b2/0x710 [ 2057.699486][ T4102] ? __rcu_read_unlock+0x4e/0x70 [ 2057.699509][ T4102] ? __fget_files+0x186/0x1c0 [ 2057.699606][ T4102] ksys_read+0xeb/0x1b0 [ 2057.699629][ T4102] __x64_sys_read+0x42/0x50 [ 2057.699652][ T4102] x64_sys_call+0x2a3b/0x2e10 [ 2057.699751][ T4102] do_syscall_64+0xc9/0x1c0 [ 2057.699771][ T4102] ? clear_bhb_loop+0x25/0x80 [ 2057.699823][ T4102] ? clear_bhb_loop+0x25/0x80 [ 2057.699842][ T4102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2057.699902][ T4102] RIP: 0033:0x7f6fd908bb7c [ 2057.699914][ T4102] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2057.699977][ T4102] RSP: 002b:00007f6fd76ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2057.700000][ T4102] RAX: ffffffffffffffda RBX: 00007f6fd92a6080 RCX: 00007f6fd908bb7c [ 2057.700010][ T4102] RDX: 000000000000000f RSI: 00007f6fd76ce0a0 RDI: 0000000000000005 [ 2057.700020][ T4102] RBP: 00007f6fd76ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2057.700029][ T4102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2057.700039][ T4102] R13: 0000000000000000 R14: 00007f6fd92a6080 R15: 00007ffef22293b8 [ 2057.700053][ T4102] [ 2058.030700][ T4110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2058.037989][ T4110] IPv6: NLM_F_CREATE should be set when creating new route [ 2058.045195][ T4110] IPv6: NLM_F_CREATE should be set when creating new route [ 2058.204171][ T29] audit: type=1400 audit(2000001094.894:20760): avc: denied { write } for pid=4119 comm="syz.1.19163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2058.224880][ T29] audit: type=1400 audit(2000001094.894:20761): avc: denied { read } for pid=4119 comm="syz.1.19163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2058.245462][ T29] audit: type=1400 audit(2000001094.894:20762): avc: denied { map_create } for pid=4119 comm="syz.1.19163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2058.264799][ T29] audit: type=1400 audit(2000001094.894:20763): avc: denied { perfmon } for pid=4119 comm="syz.1.19163" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2058.286077][ T29] audit: type=1400 audit(2000001094.894:20764): avc: denied { map_read map_write } for pid=4119 comm="syz.1.19163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2058.306238][ T29] audit: type=1400 audit(2000001094.894:20765): avc: denied { prog_load } for pid=4119 comm="syz.1.19163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2058.325659][ T29] audit: type=1400 audit(2000001094.894:20766): avc: denied { bpf } for pid=4119 comm="syz.1.19163" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2058.346388][ T29] audit: type=1400 audit(2000001094.894:20767): avc: denied { prog_run } for pid=4119 comm="syz.1.19163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2058.378674][ T4120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19163'. [ 2058.468840][ T29] audit: type=1400 audit(2000001095.066:20768): avc: denied { create } for pid=4119 comm="syz.1.19163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2058.576281][ T4136] FAULT_INJECTION: forcing a failure. [ 2058.576281][ T4136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2058.589597][ T4136] CPU: 0 UID: 0 PID: 4136 Comm: syz.1.19169 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2058.589629][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2058.589639][ T4136] Call Trace: [ 2058.589643][ T4136] [ 2058.589720][ T4136] dump_stack_lvl+0xf6/0x150 [ 2058.589744][ T4136] dump_stack+0x15/0x1a [ 2058.589759][ T4136] should_fail_ex+0x261/0x270 [ 2058.589777][ T4136] should_fail+0xb/0x10 [ 2058.589790][ T4136] should_fail_usercopy+0x1a/0x20 [ 2058.589808][ T4136] _copy_from_iter+0xd8/0xd10 [ 2058.589881][ T4136] ? kmalloc_reserve+0x16e/0x190 [ 2058.589913][ T4136] ? __build_skb_around+0x199/0x1f0 [ 2058.589941][ T4136] ? __alloc_skb+0x227/0x320 [ 2058.590035][ T4136] ? __virt_addr_valid+0x1ed/0x250 [ 2058.590052][ T4136] ? __check_object_size+0x367/0x510 [ 2058.590071][ T4136] netlink_sendmsg+0x492/0x720 [ 2058.590108][ T4136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2058.590204][ T4136] __sock_sendmsg+0x140/0x180 [ 2058.590274][ T4136] ____sys_sendmsg+0x350/0x4e0 [ 2058.590308][ T4136] __sys_sendmsg+0x1a0/0x240 [ 2058.590340][ T4136] __x64_sys_sendmsg+0x46/0x50 [ 2058.590355][ T4136] x64_sys_call+0x26f3/0x2e10 [ 2058.590375][ T4136] do_syscall_64+0xc9/0x1c0 [ 2058.590390][ T4136] ? clear_bhb_loop+0x25/0x80 [ 2058.590438][ T4136] ? clear_bhb_loop+0x25/0x80 [ 2058.590457][ T4136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.590474][ T4136] RIP: 0033:0x7f6fd908d169 [ 2058.590487][ T4136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2058.590562][ T4136] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2058.590579][ T4136] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2058.590589][ T4136] RDX: 0000000000000800 RSI: 0000200000000700 RDI: 0000000000000005 [ 2058.590598][ T4136] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2058.590612][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2058.590621][ T4136] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2058.590635][ T4136] [ 2058.859736][ T4144] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19173'. [ 2058.906640][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19174'. [ 2058.925421][ T4150] hsr0: entered promiscuous mode [ 2059.030508][ T4162] bond1: entered promiscuous mode [ 2059.035637][ T4162] bond1: entered allmulticast mode [ 2059.041352][ T4162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2059.070812][ T4162] bond1 (unregistering): Released all slaves [ 2059.160999][ T4168] FAULT_INJECTION: forcing a failure. [ 2059.160999][ T4168] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.173781][ T4168] CPU: 1 UID: 0 PID: 4168 Comm: syz.1.19180 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2059.173804][ T4168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2059.173814][ T4168] Call Trace: [ 2059.173819][ T4168] [ 2059.173825][ T4168] dump_stack_lvl+0xf6/0x150 [ 2059.173929][ T4168] dump_stack+0x15/0x1a [ 2059.173946][ T4168] should_fail_ex+0x261/0x270 [ 2059.173963][ T4168] should_failslab+0x8f/0xb0 [ 2059.173988][ T4168] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 2059.174015][ T4168] ? __alloc_skb+0x10d/0x320 [ 2059.174114][ T4168] __alloc_skb+0x10d/0x320 [ 2059.174186][ T4168] netlink_alloc_large_skb+0xad/0xe0 [ 2059.174216][ T4168] netlink_sendmsg+0x3da/0x720 [ 2059.174316][ T4168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2059.174349][ T4168] __sock_sendmsg+0x140/0x180 [ 2059.174372][ T4168] sock_write_iter+0x186/0x1c0 [ 2059.174394][ T4168] vfs_write+0x79b/0x950 [ 2059.174439][ T4168] ? __pfx_sock_write_iter+0x10/0x10 [ 2059.174468][ T4168] ksys_write+0xeb/0x1b0 [ 2059.174488][ T4168] __x64_sys_write+0x42/0x50 [ 2059.174585][ T4168] x64_sys_call+0x2a45/0x2e10 [ 2059.174606][ T4168] do_syscall_64+0xc9/0x1c0 [ 2059.174625][ T4168] ? clear_bhb_loop+0x25/0x80 [ 2059.174648][ T4168] ? clear_bhb_loop+0x25/0x80 [ 2059.174670][ T4168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2059.174731][ T4168] RIP: 0033:0x7f6fd908d169 [ 2059.174746][ T4168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2059.174761][ T4168] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2059.174778][ T4168] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2059.174788][ T4168] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000005 [ 2059.174797][ T4168] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2059.174886][ T4168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2059.174895][ T4168] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2059.174914][ T4168] [ 2059.559650][ T4187] FAULT_INJECTION: forcing a failure. [ 2059.559650][ T4187] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.572480][ T4187] CPU: 0 UID: 0 PID: 4187 Comm: syz.2.19189 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2059.572581][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2059.572592][ T4187] Call Trace: [ 2059.572596][ T4187] [ 2059.572602][ T4187] dump_stack_lvl+0xf6/0x150 [ 2059.572623][ T4187] dump_stack+0x15/0x1a [ 2059.572640][ T4187] should_fail_ex+0x261/0x270 [ 2059.572661][ T4187] should_failslab+0x8f/0xb0 [ 2059.572688][ T4187] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 2059.572791][ T4187] ? __alloc_skb+0x10d/0x320 [ 2059.572823][ T4187] __alloc_skb+0x10d/0x320 [ 2059.572877][ T4187] netlink_alloc_large_skb+0xad/0xe0 [ 2059.572901][ T4187] netlink_sendmsg+0x3da/0x720 [ 2059.572928][ T4187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2059.573024][ T4187] __sock_sendmsg+0x140/0x180 [ 2059.573045][ T4187] ____sys_sendmsg+0x350/0x4e0 [ 2059.573065][ T4187] __sys_sendmsg+0x1a0/0x240 [ 2059.573092][ T4187] __x64_sys_sendmsg+0x46/0x50 [ 2059.573111][ T4187] x64_sys_call+0x26f3/0x2e10 [ 2059.573133][ T4187] do_syscall_64+0xc9/0x1c0 [ 2059.573149][ T4187] ? clear_bhb_loop+0x25/0x80 [ 2059.573233][ T4187] ? clear_bhb_loop+0x25/0x80 [ 2059.573255][ T4187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2059.573277][ T4187] RIP: 0033:0x7fb8e534d169 [ 2059.573292][ T4187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2059.573310][ T4187] RSP: 002b:00007fb8e39af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2059.573342][ T4187] RAX: ffffffffffffffda RBX: 00007fb8e5565fa0 RCX: 00007fb8e534d169 [ 2059.573352][ T4187] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 2059.573363][ T4187] RBP: 00007fb8e39af090 R08: 0000000000000000 R09: 0000000000000000 [ 2059.573375][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2059.573385][ T4187] R13: 0000000000000000 R14: 00007fb8e5565fa0 R15: 00007ffe9a710d98 [ 2059.573428][ T4187] [ 2059.784351][ T4191] No source specified [ 2059.823683][ T4193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2059.967931][ T4198] xt_connbytes: Forcing CT accounting to be enabled [ 2059.974830][ T4198] Cannot find add_set index 0 as target [ 2060.041005][ T4203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.049907][ T4203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.348557][ T4213] tmpfs: Unknown parameter 'grpquota' [ 2060.354756][ T4213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.363647][ T4213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.459756][ T4218] smc: net device bond0 applied user defined pnetid SYZ2 [ 2060.467158][ T4218] smc: net device bond0 erased user defined pnetid SYZ2 [ 2060.573961][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.9.19206'. [ 2060.592887][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.9.19206'. [ 2060.662722][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19207'. [ 2060.671839][ T4236] syz_tun: left allmulticast mode [ 2060.676869][ T4236] syz_tun: left promiscuous mode [ 2060.681982][ T4236] bridge0: port 3(syz_tun) entered disabled state [ 2060.689689][ T4236] veth0_to_bond: left allmulticast mode [ 2060.695250][ T4236] veth0_to_bond: left promiscuous mode [ 2060.701111][ T4236] bridge0: port 1(veth0_to_bond) entered disabled state [ 2060.709494][ T4236] bridge_slave_1: left allmulticast mode [ 2060.715207][ T4236] bridge_slave_1: left promiscuous mode [ 2060.720902][ T4236] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.924564][ T4238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19208'. [ 2060.934347][ T4238] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2060.988256][ T4240] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 2061.008759][ T4245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19211'. [ 2061.294039][ T4263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19219'. [ 2061.493090][ T4268] netlink: 96 bytes leftover after parsing attributes in process `syz.5.19220'. [ 2061.535671][ T4277] FAULT_INJECTION: forcing a failure. [ 2061.535671][ T4277] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.548400][ T4277] CPU: 1 UID: 0 PID: 4277 Comm: syz.1.19223 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2061.548481][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2061.548494][ T4277] Call Trace: [ 2061.548500][ T4277] [ 2061.548507][ T4277] dump_stack_lvl+0xf6/0x150 [ 2061.548576][ T4277] dump_stack+0x15/0x1a [ 2061.548595][ T4277] should_fail_ex+0x261/0x270 [ 2061.548617][ T4277] should_failslab+0x8f/0xb0 [ 2061.548645][ T4277] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 2061.548680][ T4277] ? __d_alloc+0x3d/0x350 [ 2061.548699][ T4277] ? selinux_file_open+0x356/0x3c0 [ 2061.548784][ T4277] __d_alloc+0x3d/0x350 [ 2061.548799][ T4277] d_alloc_parallel+0x57/0xcb0 [ 2061.548856][ T4277] ? selinux_inode_permission+0x358/0x430 [ 2061.548889][ T4277] ? lockref_get_not_dead+0x120/0x1c0 [ 2061.548918][ T4277] ? down_read+0x173/0x4c0 [ 2061.548983][ T4277] __lookup_slow+0x8f/0x280 [ 2061.549003][ T4277] lookup_slow+0x3c/0x60 [ 2061.549054][ T4277] walk_component+0x204/0x240 [ 2061.549082][ T4277] ? path_lookupat+0xf6/0x2a0 [ 2061.549113][ T4277] path_lookupat+0x103/0x2a0 [ 2061.549145][ T4277] filename_lookup+0x14b/0x340 [ 2061.549188][ T4277] do_readlinkat+0x8b/0x210 [ 2061.549223][ T4277] __x64_sys_readlink+0x47/0x60 [ 2061.549308][ T4277] x64_sys_call+0x2a81/0x2e10 [ 2061.549329][ T4277] do_syscall_64+0xc9/0x1c0 [ 2061.549421][ T4277] ? clear_bhb_loop+0x25/0x80 [ 2061.549507][ T4277] ? clear_bhb_loop+0x25/0x80 [ 2061.549529][ T4277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.549552][ T4277] RIP: 0033:0x7f6fd908d169 [ 2061.549567][ T4277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2061.549585][ T4277] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 2061.549604][ T4277] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2061.549689][ T4277] RDX: 00000000000000d3 RSI: 0000200000000040 RDI: 0000200000000000 [ 2061.549703][ T4277] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2061.549715][ T4277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2061.549727][ T4277] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2061.549756][ T4277] [ 2061.550581][ T4279] netlink: 33892 bytes leftover after parsing attributes in process `syz.5.19224'. [ 2061.681356][ T4284] netlink: 'syz.5.19224': attribute type 21 has an invalid length. [ 2061.984776][ T4290] smc: net device bond0 applied user defined pnetid SYZ2 [ 2061.992230][ T4290] smc: net device bond0 erased user defined pnetid SYZ2 [ 2062.021786][ T4292] smc: net device bond0 applied user defined pnetid SYZ2 [ 2062.029495][ T4292] smc: net device bond0 erased user defined pnetid SYZ2 [ 2062.130533][ T4296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2062.137934][ T4296] IPv6: NLM_F_CREATE should be set when creating new route [ 2062.145151][ T4296] IPv6: NLM_F_CREATE should be set when creating new route [ 2062.423745][ T4301] FAULT_INJECTION: forcing a failure. [ 2062.423745][ T4301] name failslab, interval 1, probability 0, space 0, times 0 [ 2062.436425][ T4301] CPU: 0 UID: 0 PID: 4301 Comm: syz.1.19233 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2062.436499][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2062.436512][ T4301] Call Trace: [ 2062.436517][ T4301] [ 2062.436523][ T4301] dump_stack_lvl+0xf6/0x150 [ 2062.436542][ T4301] dump_stack+0x15/0x1a [ 2062.436610][ T4301] should_fail_ex+0x261/0x270 [ 2062.436631][ T4301] should_failslab+0x8f/0xb0 [ 2062.436653][ T4301] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 2062.436740][ T4301] ? __alloc_skb+0x10d/0x320 [ 2062.436771][ T4301] __alloc_skb+0x10d/0x320 [ 2062.436815][ T4301] netlink_alloc_large_skb+0xad/0xe0 [ 2062.436839][ T4301] netlink_sendmsg+0x3da/0x720 [ 2062.436927][ T4301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2062.436954][ T4301] __sock_sendmsg+0x140/0x180 [ 2062.436992][ T4301] ____sys_sendmsg+0x350/0x4e0 [ 2062.437015][ T4301] __sys_sendmsg+0x1a0/0x240 [ 2062.437047][ T4301] __x64_sys_sendmsg+0x46/0x50 [ 2062.437062][ T4301] x64_sys_call+0x26f3/0x2e10 [ 2062.437081][ T4301] do_syscall_64+0xc9/0x1c0 [ 2062.437100][ T4301] ? clear_bhb_loop+0x25/0x80 [ 2062.437122][ T4301] ? clear_bhb_loop+0x25/0x80 [ 2062.437145][ T4301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2062.437167][ T4301] RIP: 0033:0x7f6fd908d169 [ 2062.437204][ T4301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2062.437219][ T4301] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2062.437234][ T4301] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2062.437244][ T4301] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2062.437256][ T4301] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2062.437269][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2062.437281][ T4301] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2062.437299][ T4301] [ 2062.735971][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 2062.735985][ T29] audit: type=1400 audit(2000001099.754:21065): avc: denied { execmem } for pid=4308 comm="syz.3.19237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2062.821456][ T29] audit: type=1400 audit(2000001099.829:21066): avc: denied { read write } for pid=32210 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2062.845989][ T29] audit: type=1400 audit(2000001099.829:21067): avc: denied { open } for pid=32210 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2062.870421][ T29] audit: type=1400 audit(2000001099.829:21068): avc: denied { ioctl } for pid=32210 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=1269 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2062.933078][ T4311] netlink: 84 bytes leftover after parsing attributes in process `syz.2.19239'. [ 2062.950915][ T29] audit: type=1400 audit(2000001099.958:21069): avc: denied { create } for pid=4310 comm="syz.2.19239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2062.971392][ T29] audit: type=1400 audit(2000001099.958:21070): avc: denied { write } for pid=4310 comm="syz.2.19239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2062.991934][ T29] audit: type=1400 audit(2000001099.958:21071): avc: denied { nlmsg_write } for pid=4310 comm="syz.2.19239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2063.035711][ T29] audit: type=1400 audit(2000001100.065:21072): avc: denied { setopt } for pid=4312 comm="syz.9.19238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2063.056518][ T4311] xt_bpf: check failed: parse error [ 2063.113340][ T29] audit: type=1400 audit(2000001100.098:21073): avc: denied { map } for pid=4312 comm="syz.9.19238" path="socket:[207849]" dev="sockfs" ino=207849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2063.137162][ T29] audit: type=1400 audit(2000001100.098:21074): avc: denied { read } for pid=4312 comm="syz.9.19238" path="socket:[207849]" dev="sockfs" ino=207849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2063.379292][ T4338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2063.495907][ T4347] FAULT_INJECTION: forcing a failure. [ 2063.495907][ T4347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2063.509103][ T4347] CPU: 0 UID: 0 PID: 4347 Comm: syz.1.19252 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2063.509130][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2063.509143][ T4347] Call Trace: [ 2063.509218][ T4347] [ 2063.509224][ T4347] dump_stack_lvl+0xf6/0x150 [ 2063.509247][ T4347] dump_stack+0x15/0x1a [ 2063.509271][ T4347] should_fail_ex+0x261/0x270 [ 2063.509293][ T4347] should_fail+0xb/0x10 [ 2063.509310][ T4347] should_fail_usercopy+0x1a/0x20 [ 2063.509364][ T4347] _copy_from_user+0x1c/0xa0 [ 2063.509387][ T4347] vlan_ioctl_handler+0x50/0x4f0 [ 2063.509419][ T4347] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 2063.509447][ T4347] sock_ioctl+0x4ca/0x630 [ 2063.509549][ T4347] ? __pfx_sock_ioctl+0x10/0x10 [ 2063.509572][ T4347] __se_sys_ioctl+0xc9/0x140 [ 2063.509652][ T4347] __x64_sys_ioctl+0x43/0x50 [ 2063.509672][ T4347] x64_sys_call+0x168d/0x2e10 [ 2063.509690][ T4347] do_syscall_64+0xc9/0x1c0 [ 2063.509709][ T4347] ? clear_bhb_loop+0x25/0x80 [ 2063.509769][ T4347] ? clear_bhb_loop+0x25/0x80 [ 2063.509790][ T4347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.509808][ T4347] RIP: 0033:0x7f6fd908d169 [ 2063.509820][ T4347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2063.509835][ T4347] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2063.509850][ T4347] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2063.509916][ T4347] RDX: 0000200000002800 RSI: 0000000000008982 RDI: 0000000000000008 [ 2063.509927][ T4347] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2063.509939][ T4347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2063.509951][ T4347] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2063.509969][ T4347] [ 2063.789106][ T4351] sd 0:0:1:0: device reset [ 2063.857029][ T4351] netlink: 'syz.2.19254': attribute type 3 has an invalid length. [ 2063.924315][ T4356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19256'. [ 2063.994525][ T4360] loop2: detected capacity change from 0 to 128 [ 2064.028380][ T4362] FAULT_INJECTION: forcing a failure. [ 2064.028380][ T4362] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.041102][ T4362] CPU: 0 UID: 0 PID: 4362 Comm: syz.1.19259 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2064.041132][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2064.041143][ T4362] Call Trace: [ 2064.041149][ T4362] [ 2064.041215][ T4362] dump_stack_lvl+0xf6/0x150 [ 2064.041289][ T4362] dump_stack+0x15/0x1a [ 2064.041333][ T4362] should_fail_ex+0x261/0x270 [ 2064.041358][ T4362] should_failslab+0x8f/0xb0 [ 2064.041386][ T4362] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 2064.041426][ T4362] ? __alloc_skb+0x10d/0x320 [ 2064.041528][ T4362] __alloc_skb+0x10d/0x320 [ 2064.041565][ T4362] netlink_alloc_large_skb+0xad/0xe0 [ 2064.041592][ T4362] netlink_sendmsg+0x3da/0x720 [ 2064.041627][ T4362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2064.041717][ T4362] __sock_sendmsg+0x140/0x180 [ 2064.041748][ T4362] ____sys_sendmsg+0x350/0x4e0 [ 2064.041790][ T4362] __sys_sendmsg+0x1a0/0x240 [ 2064.041829][ T4362] __x64_sys_sendmsg+0x46/0x50 [ 2064.041861][ T4362] x64_sys_call+0x26f3/0x2e10 [ 2064.041961][ T4362] do_syscall_64+0xc9/0x1c0 [ 2064.042042][ T4362] ? clear_bhb_loop+0x25/0x80 [ 2064.042066][ T4362] ? clear_bhb_loop+0x25/0x80 [ 2064.042111][ T4362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.042174][ T4362] RIP: 0033:0x7f6fd908d169 [ 2064.042191][ T4362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2064.042275][ T4362] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2064.042292][ T4362] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2064.042304][ T4362] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 2064.042317][ T4362] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2064.042330][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2064.042344][ T4362] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2064.042365][ T4362] [ 2064.239427][ T4360] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2064.255308][ T4360] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2064.449739][ T4379] futex_wake_op: syz.9.19265 tries to shift op by -1; fix this program [ 2064.499830][ T4379] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 2064.524299][ T4387] FAULT_INJECTION: forcing a failure. [ 2064.524299][ T4387] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.536987][ T4387] CPU: 0 UID: 0 PID: 4387 Comm: syz.9.19268 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2064.537009][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2064.537022][ T4387] Call Trace: [ 2064.537029][ T4387] [ 2064.537036][ T4387] dump_stack_lvl+0xf6/0x150 [ 2064.537058][ T4387] dump_stack+0x15/0x1a [ 2064.537122][ T4387] should_fail_ex+0x261/0x270 [ 2064.537139][ T4387] should_failslab+0x8f/0xb0 [ 2064.537245][ T4387] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 2064.537273][ T4387] ? __alloc_skb+0x10d/0x320 [ 2064.537304][ T4387] __alloc_skb+0x10d/0x320 [ 2064.537396][ T4387] netlink_alloc_large_skb+0xad/0xe0 [ 2064.537423][ T4387] netlink_sendmsg+0x3da/0x720 [ 2064.537485][ T4387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2064.537518][ T4387] __sock_sendmsg+0x140/0x180 [ 2064.537545][ T4387] ____sys_sendmsg+0x350/0x4e0 [ 2064.537568][ T4387] __sys_sendmsg+0x1a0/0x240 [ 2064.537610][ T4387] __x64_sys_sendmsg+0x46/0x50 [ 2064.537628][ T4387] x64_sys_call+0x26f3/0x2e10 [ 2064.537653][ T4387] do_syscall_64+0xc9/0x1c0 [ 2064.537669][ T4387] ? clear_bhb_loop+0x25/0x80 [ 2064.537686][ T4387] ? clear_bhb_loop+0x25/0x80 [ 2064.537707][ T4387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.537729][ T4387] RIP: 0033:0x7f4b851ad169 [ 2064.537783][ T4387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2064.537804][ T4387] RSP: 002b:00007f4b8380f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2064.537819][ T4387] RAX: ffffffffffffffda RBX: 00007f4b853c5fa0 RCX: 00007f4b851ad169 [ 2064.537829][ T4387] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2064.537838][ T4387] RBP: 00007f4b8380f090 R08: 0000000000000000 R09: 0000000000000000 [ 2064.537848][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2064.537857][ T4387] R13: 0000000000000000 R14: 00007f4b853c5fa0 R15: 00007ffead6f8a78 [ 2064.537927][ T4387] [ 2064.813394][ T4398] 0ªX¹¦À: renamed from caif0 [ 2064.819800][ T4398] 0ªX¹¦À: entered allmulticast mode [ 2064.825155][ T4398] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 2064.863935][ T4403] FAULT_INJECTION: forcing a failure. [ 2064.863935][ T4403] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.876576][ T4403] CPU: 1 UID: 0 PID: 4403 Comm: syz.9.19273 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2064.876601][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2064.876636][ T4403] Call Trace: [ 2064.876642][ T4403] [ 2064.876649][ T4403] dump_stack_lvl+0xf6/0x150 [ 2064.876670][ T4403] dump_stack+0x15/0x1a [ 2064.876683][ T4403] should_fail_ex+0x261/0x270 [ 2064.876700][ T4403] should_failslab+0x8f/0xb0 [ 2064.876724][ T4403] __kmalloc_noprof+0xad/0x410 [ 2064.876854][ T4403] ? sock_kmalloc+0x83/0xc0 [ 2064.876869][ T4403] ? ip_mc_find_dev+0x11d/0x150 [ 2064.876886][ T4403] sock_kmalloc+0x83/0xc0 [ 2064.876946][ T4403] __ip_mc_join_group+0x1c0/0x2c0 [ 2064.876965][ T4403] ip_mc_join_group_ssm+0x24/0x30 [ 2064.876981][ T4403] do_ip_setsockopt+0x1c91/0x22a0 [ 2064.877004][ T4403] ip_setsockopt+0x63/0x100 [ 2064.877071][ T4403] tcp_setsockopt+0x93/0xb0 [ 2064.877101][ T4403] sock_common_setsockopt+0x64/0x80 [ 2064.877182][ T4403] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2064.877251][ T4403] __sys_setsockopt+0x187/0x200 [ 2064.877340][ T4403] __x64_sys_setsockopt+0x66/0x80 [ 2064.877418][ T4403] x64_sys_call+0x2a09/0x2e10 [ 2064.877475][ T4403] do_syscall_64+0xc9/0x1c0 [ 2064.877491][ T4403] ? clear_bhb_loop+0x25/0x80 [ 2064.877586][ T4403] ? clear_bhb_loop+0x25/0x80 [ 2064.877608][ T4403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.877630][ T4403] RIP: 0033:0x7f4b851ad169 [ 2064.877644][ T4403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2064.877707][ T4403] RSP: 002b:00007f4b8380f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2064.877726][ T4403] RAX: ffffffffffffffda RBX: 00007f4b853c5fa0 RCX: 00007f4b851ad169 [ 2064.877738][ T4403] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000006 [ 2064.877748][ T4403] RBP: 00007f4b8380f090 R08: 000000000000000c R09: 0000000000000000 [ 2064.877758][ T4403] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2064.877767][ T4403] R13: 0000000000000000 R14: 00007f4b853c5fa0 R15: 00007ffead6f8a78 [ 2064.877782][ T4403] [ 2065.096083][T32210] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2065.120569][ T4407] loop2: detected capacity change from 0 to 1764 [ 2065.128357][ T4407] iso9660: Unknown parameter '0xffffffffffffffff0x000000000000000000000000000000000000000ÿÿÿÿÿ' [ 2065.219252][ T4411] gretap1: entered allmulticast mode [ 2065.322633][ T4421] netlink: 'syz.5.19282': attribute type 1 has an invalid length. [ 2065.339198][ T4421] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 2065.349554][ T4421] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 2065.362527][ T4421] bond1: (slave ip6gre1): making interface the new active one [ 2065.371181][ T4421] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 2065.411279][ T4424] bridge0: port 1(syz_tun) entered disabled state [ 2065.442732][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.448513][ T4427] __nla_validate_parse: 3 callbacks suppressed [ 2065.448528][ T4427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19283'. [ 2065.494387][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19285'. [ 2065.513924][ T4426] hsr0: entered promiscuous mode [ 2065.540699][ T4429] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.603658][ T4429] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.690472][ T4443] SELinux: ebitmap: truncated map [ 2065.691653][ T4429] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.697780][ T4443] SELinux: failed to load policy [ 2065.766611][ T4429] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.790459][ T4452] smc: net device bond0 applied user defined pnetid SYZ2 [ 2065.805344][ T4452] smc: net device bond0 erased user defined pnetid SYZ2 [ 2065.831579][ T4429] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.847975][ T4429] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.874061][ T4429] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.886885][ T4429] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.895836][ T4459] FAULT_INJECTION: forcing a failure. [ 2065.895836][ T4459] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.908537][ T4459] CPU: 0 UID: 0 PID: 4459 Comm: syz.1.19297 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2065.908568][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2065.908578][ T4459] Call Trace: [ 2065.908584][ T4459] [ 2065.908589][ T4459] dump_stack_lvl+0xf6/0x150 [ 2065.908647][ T4459] dump_stack+0x15/0x1a [ 2065.908661][ T4459] should_fail_ex+0x261/0x270 [ 2065.908679][ T4459] should_failslab+0x8f/0xb0 [ 2065.908701][ T4459] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 2065.908763][ T4459] ? __d_alloc+0x3d/0x350 [ 2065.908779][ T4459] __d_alloc+0x3d/0x350 [ 2065.908793][ T4459] ? mpol_shared_policy_init+0xd2/0x510 [ 2065.908811][ T4459] d_alloc_pseudo+0x1e/0x80 [ 2065.908827][ T4459] alloc_file_pseudo+0x75/0x160 [ 2065.908923][ T4459] __shmem_file_setup+0x1bb/0x1f0 [ 2065.908949][ T4459] shmem_file_setup+0x3b/0x50 [ 2065.908987][ T4459] __se_sys_memfd_create+0x2e1/0x5a0 [ 2065.909006][ T4459] __x64_sys_memfd_create+0x31/0x40 [ 2065.909024][ T4459] x64_sys_call+0x1163/0x2e10 [ 2065.909070][ T4459] do_syscall_64+0xc9/0x1c0 [ 2065.909088][ T4459] ? clear_bhb_loop+0x25/0x80 [ 2065.909117][ T4459] ? clear_bhb_loop+0x25/0x80 [ 2065.909136][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.909153][ T4459] RIP: 0033:0x7f6fd908d169 [ 2065.909165][ T4459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2065.909181][ T4459] RSP: 002b:00007f6fd76eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 2065.909236][ T4459] RAX: ffffffffffffffda RBX: 0000000000000699 RCX: 00007f6fd908d169 [ 2065.909246][ T4459] RDX: 00007f6fd76eeef0 RSI: 0000000000000000 RDI: 00007f6fd910ec3c [ 2065.909256][ T4459] RBP: 0000200000000140 R08: 00007f6fd76eebb7 R09: 00007f6fd76eee40 [ 2065.909266][ T4459] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000800 [ 2065.909346][ T4459] R13: 00007f6fd76eeef0 R14: 00007f6fd76eeeb0 R15: 0000200000000980 [ 2065.909362][ T4459] [ 2066.182865][ T4462] syzkaller0: entered allmulticast mode [ 2066.188768][ T4462] syzkaller0: entered promiscuous mode [ 2066.197478][ T4462] syzkaller0 (unregistering): left promiscuous mode [ 2066.204090][ T4462] syzkaller0 (unregistering): left allmulticast mode [ 2066.207305][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19301'. [ 2066.287399][ T4466] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2066.465078][ T4487] FAULT_INJECTION: forcing a failure. [ 2066.465078][ T4487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2066.478289][ T4487] CPU: 1 UID: 0 PID: 4487 Comm: syz.9.19309 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2066.478491][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2066.478503][ T4487] Call Trace: [ 2066.478509][ T4487] [ 2066.478516][ T4487] dump_stack_lvl+0xf6/0x150 [ 2066.478536][ T4487] dump_stack+0x15/0x1a [ 2066.478549][ T4487] should_fail_ex+0x261/0x270 [ 2066.478570][ T4487] should_fail+0xb/0x10 [ 2066.478587][ T4487] should_fail_usercopy+0x1a/0x20 [ 2066.478686][ T4487] _copy_to_user+0x20/0xa0 [ 2066.478763][ T4487] simple_read_from_buffer+0xb2/0x130 [ 2066.478790][ T4487] proc_fail_nth_read+0x103/0x140 [ 2066.478890][ T4487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2066.478920][ T4487] vfs_read+0x1b2/0x710 [ 2066.478941][ T4487] ? __rcu_read_unlock+0x4e/0x70 [ 2066.478971][ T4487] ? __fget_files+0x186/0x1c0 [ 2066.479016][ T4487] ksys_read+0xeb/0x1b0 [ 2066.479066][ T4487] __x64_sys_read+0x42/0x50 [ 2066.479137][ T4487] x64_sys_call+0x2a3b/0x2e10 [ 2066.479155][ T4487] do_syscall_64+0xc9/0x1c0 [ 2066.479171][ T4487] ? clear_bhb_loop+0x25/0x80 [ 2066.479211][ T4487] ? clear_bhb_loop+0x25/0x80 [ 2066.479233][ T4487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2066.479256][ T4487] RIP: 0033:0x7f4b851abb7c [ 2066.479270][ T4487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2066.479289][ T4487] RSP: 002b:00007f4b8380f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2066.479305][ T4487] RAX: ffffffffffffffda RBX: 00007f4b853c5fa0 RCX: 00007f4b851abb7c [ 2066.479327][ T4487] RDX: 000000000000000f RSI: 00007f4b8380f0a0 RDI: 0000000000000006 [ 2066.479337][ T4487] RBP: 00007f4b8380f090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.479347][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.479405][ T4487] R13: 0000000000000000 R14: 00007f4b853c5fa0 R15: 00007ffead6f8a78 [ 2066.479420][ T4487] [ 2066.726686][ T4500] FAULT_INJECTION: forcing a failure. [ 2066.726686][ T4500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2066.739812][ T4500] CPU: 0 UID: 0 PID: 4500 Comm: syz.3.19313 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2066.739834][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2066.739844][ T4500] Call Trace: [ 2066.739850][ T4500] [ 2066.739857][ T4500] dump_stack_lvl+0xf6/0x150 [ 2066.739881][ T4500] dump_stack+0x15/0x1a [ 2066.739899][ T4500] should_fail_ex+0x261/0x270 [ 2066.739999][ T4500] should_fail+0xb/0x10 [ 2066.740016][ T4500] should_fail_usercopy+0x1a/0x20 [ 2066.740082][ T4500] _copy_from_user+0x1c/0xa0 [ 2066.740103][ T4500] rds_rdma_extra_size+0xf1/0x280 [ 2066.740174][ T4500] ? krealloc_noprof+0x12d/0x2c0 [ 2066.740210][ T4500] rds_rm_size+0x31b/0x480 [ 2066.740233][ T4500] rds_sendmsg+0x810/0x14a0 [ 2066.740256][ T4500] ? __pfx_rds_sendmsg+0x10/0x10 [ 2066.740272][ T4500] __sock_sendmsg+0x140/0x180 [ 2066.740354][ T4500] ____sys_sendmsg+0x350/0x4e0 [ 2066.740376][ T4500] __sys_sendmsg+0x1a0/0x240 [ 2066.740464][ T4500] __x64_sys_sendmsg+0x46/0x50 [ 2066.740484][ T4500] x64_sys_call+0x26f3/0x2e10 [ 2066.740567][ T4500] do_syscall_64+0xc9/0x1c0 [ 2066.740587][ T4500] ? clear_bhb_loop+0x25/0x80 [ 2066.740609][ T4500] ? clear_bhb_loop+0x25/0x80 [ 2066.740627][ T4500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2066.740665][ T4500] RIP: 0033:0x7fc64b62d169 [ 2066.740677][ T4500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2066.740715][ T4500] RSP: 002b:00007fc649c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2066.740731][ T4500] RAX: ffffffffffffffda RBX: 00007fc64b845fa0 RCX: 00007fc64b62d169 [ 2066.740757][ T4500] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 2066.740767][ T4500] RBP: 00007fc649c97090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.740776][ T4500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.740865][ T4500] R13: 0000000000000000 R14: 00007fc64b845fa0 R15: 00007ffdc6026068 [ 2066.740880][ T4500] [ 2066.954404][ T4494] netlink: 68 bytes leftover after parsing attributes in process `syz.9.19311'. [ 2066.991422][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19315'. [ 2067.050063][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.058960][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.092400][ T4507] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19314'. [ 2067.237846][ T4511] FAULT_INJECTION: forcing a failure. [ 2067.237846][ T4511] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.250642][ T4511] CPU: 1 UID: 0 PID: 4511 Comm: syz.2.19318 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2067.250665][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2067.250675][ T4511] Call Trace: [ 2067.250686][ T4511] [ 2067.250693][ T4511] dump_stack_lvl+0xf6/0x150 [ 2067.250713][ T4511] dump_stack+0x15/0x1a [ 2067.250727][ T4511] should_fail_ex+0x261/0x270 [ 2067.250747][ T4511] should_failslab+0x8f/0xb0 [ 2067.250817][ T4511] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 2067.250846][ T4511] ? __alloc_skb+0x10d/0x320 [ 2067.250871][ T4511] __alloc_skb+0x10d/0x320 [ 2067.250903][ T4511] netlink_alloc_large_skb+0xad/0xe0 [ 2067.250934][ T4511] netlink_sendmsg+0x3da/0x720 [ 2067.250970][ T4511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2067.250996][ T4511] __sock_sendmsg+0x140/0x180 [ 2067.251031][ T4511] ____sys_sendmsg+0x350/0x4e0 [ 2067.251054][ T4511] __sys_sendmsg+0x1a0/0x240 [ 2067.251081][ T4511] __x64_sys_sendmsg+0x46/0x50 [ 2067.251096][ T4511] x64_sys_call+0x26f3/0x2e10 [ 2067.251118][ T4511] do_syscall_64+0xc9/0x1c0 [ 2067.251139][ T4511] ? clear_bhb_loop+0x25/0x80 [ 2067.251171][ T4511] ? clear_bhb_loop+0x25/0x80 [ 2067.251188][ T4511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.251205][ T4511] RIP: 0033:0x7fb8e534d169 [ 2067.251217][ T4511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2067.251270][ T4511] RSP: 002b:00007fb8e39af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2067.251288][ T4511] RAX: ffffffffffffffda RBX: 00007fb8e5565fa0 RCX: 00007fb8e534d169 [ 2067.251301][ T4511] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000006 [ 2067.251310][ T4511] RBP: 00007fb8e39af090 R08: 0000000000000000 R09: 0000000000000000 [ 2067.251322][ T4511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2067.251335][ T4511] R13: 0000000000000000 R14: 00007fb8e5565fa0 R15: 00007ffe9a710d98 [ 2067.251353][ T4511] [ 2067.476798][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 2067.476812][ T29] audit: type=1400 audit(2000001104.840:21474): avc: denied { create } for pid=4515 comm="syz.3.19320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2067.524555][ T29] audit: type=1400 audit(2000001104.872:21475): avc: denied { setopt } for pid=4515 comm="syz.3.19320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2067.556367][ T4521] FAULT_INJECTION: forcing a failure. [ 2067.556367][ T4521] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.569063][ T4521] CPU: 1 UID: 0 PID: 4521 Comm: syz.1.19322 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2067.569091][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2067.569147][ T4521] Call Trace: [ 2067.569153][ T4521] [ 2067.569160][ T4521] dump_stack_lvl+0xf6/0x150 [ 2067.569183][ T4521] dump_stack+0x15/0x1a [ 2067.569196][ T4521] should_fail_ex+0x261/0x270 [ 2067.569216][ T4521] should_failslab+0x8f/0xb0 [ 2067.569242][ T4521] __kmalloc_noprof+0xad/0x410 [ 2067.569334][ T4521] ? fib_nl2rule+0x210/0xcf0 [ 2067.569351][ T4521] fib_nl2rule+0x210/0xcf0 [ 2067.569408][ T4521] fib_newrule+0x28c/0x930 [ 2067.569430][ T4521] ? __rcu_read_unlock+0x4e/0x70 [ 2067.569469][ T4521] fib_nl_newrule+0x46/0x60 [ 2067.569486][ T4521] ? __pfx_fib_nl_newrule+0x10/0x10 [ 2067.569520][ T4521] rtnetlink_rcv_msg+0x65a/0x740 [ 2067.569547][ T4521] ? should_fail_ex+0xd7/0x270 [ 2067.569566][ T4521] ? ref_tracker_free+0x3b8/0x420 [ 2067.569584][ T4521] netlink_rcv_skb+0x12f/0x230 [ 2067.569667][ T4521] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2067.569693][ T4521] rtnetlink_rcv+0x1c/0x30 [ 2067.569710][ T4521] netlink_unicast+0x605/0x6c0 [ 2067.569772][ T4521] netlink_sendmsg+0x609/0x720 [ 2067.569917][ T4521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2067.569945][ T4521] __sock_sendmsg+0x140/0x180 [ 2067.569969][ T4521] ____sys_sendmsg+0x350/0x4e0 [ 2067.569993][ T4521] __sys_sendmsg+0x1a0/0x240 [ 2067.570026][ T4521] __x64_sys_sendmsg+0x46/0x50 [ 2067.570059][ T4521] x64_sys_call+0x26f3/0x2e10 [ 2067.570117][ T4521] do_syscall_64+0xc9/0x1c0 [ 2067.570179][ T4521] ? clear_bhb_loop+0x25/0x80 [ 2067.570200][ T4521] ? clear_bhb_loop+0x25/0x80 [ 2067.570223][ T4521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.570260][ T4521] RIP: 0033:0x7f6fd908d169 [ 2067.570272][ T4521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2067.570288][ T4521] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2067.570332][ T4521] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2067.570344][ T4521] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 2067.570355][ T4521] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2067.570415][ T4521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2067.570427][ T4521] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2067.570445][ T4521] [ 2067.571912][ T4523] loop2: detected capacity change from 0 to 128 [ 2067.625849][ T29] audit: type=1326 audit(2000001105.001:21476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.19324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2067.799073][ T4523] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2067.806376][ T29] audit: type=1326 audit(2000001105.044:21477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.19324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2067.855800][ T4523] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2067.857530][ T29] audit: type=1326 audit(2000001105.044:21478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.19324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2067.936611][ T29] audit: type=1326 audit(2000001105.044:21479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.19324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2067.960231][ T29] audit: type=1326 audit(2000001105.044:21480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.19324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2067.983881][ T29] audit: type=1326 audit(2000001105.044:21481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.19324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2068.007568][ T29] audit: type=1326 audit(2000001105.044:21482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.19324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2068.031205][ T29] audit: type=1326 audit(2000001105.044:21483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.1.19324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd908d169 code=0x7ffc0000 [ 2068.140974][ T4545] FAULT_INJECTION: forcing a failure. [ 2068.140974][ T4545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2068.154245][ T4545] CPU: 1 UID: 0 PID: 4545 Comm: syz.1.19329 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2068.154267][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2068.154279][ T4545] Call Trace: [ 2068.154285][ T4545] [ 2068.154292][ T4545] dump_stack_lvl+0xf6/0x150 [ 2068.154317][ T4545] dump_stack+0x15/0x1a [ 2068.154334][ T4545] should_fail_ex+0x261/0x270 [ 2068.154357][ T4545] should_fail+0xb/0x10 [ 2068.154402][ T4545] should_fail_usercopy+0x1a/0x20 [ 2068.154429][ T4545] _copy_from_user+0x1c/0xa0 [ 2068.154450][ T4545] usbdev_ioctl+0x1037/0x3e70 [ 2068.154479][ T4545] ? do_vfs_ioctl+0x977/0x1570 [ 2068.154503][ T4545] ? selinux_file_ioctl+0x2f9/0x380 [ 2068.154537][ T4545] ? __fget_files+0x186/0x1c0 [ 2068.154637][ T4545] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2068.154657][ T4545] __se_sys_ioctl+0xc9/0x140 [ 2068.154729][ T4545] __x64_sys_ioctl+0x43/0x50 [ 2068.154746][ T4545] x64_sys_call+0x168d/0x2e10 [ 2068.154828][ T4545] do_syscall_64+0xc9/0x1c0 [ 2068.154938][ T4545] ? clear_bhb_loop+0x25/0x80 [ 2068.154957][ T4545] ? clear_bhb_loop+0x25/0x80 [ 2068.154976][ T4545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.154997][ T4545] RIP: 0033:0x7f6fd908d169 [ 2068.155012][ T4545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2068.155104][ T4545] RSP: 002b:00007f6fd76ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2068.155147][ T4545] RAX: ffffffffffffffda RBX: 00007f6fd92a5fa0 RCX: 00007f6fd908d169 [ 2068.155160][ T4545] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000004 [ 2068.155195][ T4545] RBP: 00007f6fd76ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2068.155208][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2068.155218][ T4545] R13: 0000000000000000 R14: 00007f6fd92a5fa0 R15: 00007ffef22293b8 [ 2068.155232][ T4545] [ 2068.468521][ T4553] ================================================================== [ 2068.476638][ T4553] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 2068.483502][ T4553] [ 2068.485827][ T4553] write to 0xffff888104b37a08 of 8 bytes by task 4547 on cpu 0: [ 2068.493452][ T4553] call_rcu+0x49/0x430 [ 2068.497536][ T4553] mas_wmb_replace+0xcea/0x1510 [ 2068.502388][ T4553] mas_wr_store_entry+0x158c/0x2460 [ 2068.507609][ T4553] mas_store_prealloc+0x6d5/0x960 [ 2068.512637][ T4553] vma_complete+0x3a7/0x760 [ 2068.517146][ T4553] __split_vma+0x5d9/0x6a0 [ 2068.521579][ T4553] vma_modify+0x105/0x200 [ 2068.525909][ T4553] vma_modify_flags+0xf3/0x120 [ 2068.530680][ T4553] mprotect_fixup+0x323/0x600 [ 2068.535361][ T4553] do_mprotect_pkey+0x6ce/0x9a0 [ 2068.540219][ T4553] __x64_sys_mprotect+0x48/0x60 [ 2068.545074][ T4553] x64_sys_call+0x272f/0x2e10 [ 2068.549749][ T4553] do_syscall_64+0xc9/0x1c0 [ 2068.554246][ T4553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.560134][ T4553] [ 2068.562447][ T4553] read to 0xffff888104b37a08 of 8 bytes by task 4553 on cpu 1: [ 2068.569981][ T4553] mtree_range_walk+0x143/0x460 [ 2068.574828][ T4553] mas_walk+0x16e/0x320 [ 2068.578985][ T4553] lock_vma_under_rcu+0x97/0x290 [ 2068.583924][ T4553] exc_page_fault+0x150/0x650 [ 2068.588607][ T4553] asm_exc_page_fault+0x26/0x30 [ 2068.593451][ T4553] [ 2068.595767][ T4553] value changed: 0x0000555591815fff -> 0xffff88810925f908 [ 2068.602864][ T4553] [ 2068.605175][ T4553] Reported by Kernel Concurrency Sanitizer on: [ 2068.611321][ T4553] CPU: 1 UID: 0 PID: 4553 Comm: syz.3.19330 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 2068.623471][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2068.633526][ T4553] ================================================================== [ 2068.714089][T32210] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2069.254259][ T3424] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3