last executing test programs: 2m48.84486812s ago: executing program 3 (id=18): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000000004) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r8, &(0x7f0000000000)=""/41, 0x29) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0xf}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private0, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="effdecb37df863ae0000000000000094f3b88713", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0x0, 0x7, 0x4, 0xca0, 0x5, 0xdd, 0xad38, 0x400, 0x4, 0xbf15, 0xfffffffe, 0x2, 0x2, 0x8, 0x5, 0x7191, 0x4, 0x6261, 0x4010000, 0x1, 0xffffff01, 0x400, 0x3, 0x401, 0x8, 0xfffff801, 0x7, 0x1, 0xfffffff5, 0x3, 0x3ff, 0x0, 0x3, 0x1, 0x8, 0xbef, 0x7, 0xbd, 0xff, 0x4, 0x6, 0x4, 0xffffffe0, 0xffffff80, 0x81, 0x10001, 0x80000000, 0xf7, 0x4, 0x3, 0xe41, 0xffffffff, 0xff, 0x80000001, 0x1, 0x3, 0x1ff, 0x1, 0x6, 0x6, 0xb, 0x8, 0x9, 0x2, 0xe, 0x200, 0x9, 0x8, 0x2, 0x10, 0x2, 0x9, 0x8, 0x1, 0xaf3, 0xce, 0x1000, 0x7, 0xfffffff8, 0x5d97, 0x4, 0x3, 0x3, 0x2, 0x5, 0x15a9, 0x0, 0x865, 0x1ff, 0x8, 0x5, 0x6, 0xa, 0x2, 0x8000, 0x9, 0x7, 0x1, 0x8, 0x7, 0xffff, 0x1, 0xec5a, 0xfffffff9, 0x74, 0xefcd, 0x8, 0x8, 0x8, 0xfffffffc, 0x2, 0x5, 0x7, 0x5f, 0x8, 0x6, 0x9, 0x3, 0x3, 0x8001, 0x40, 0x1, 0x6, 0x1ffa, 0x0, 0x8001], "154dff8b6f78f817070da857f4091aac07e0f1256b0cd04ffa593599baaa5cbe24ccf76aa38ec1b6bd3b7a4b0d54b2e4df0fb665842ab4a7ee5213315b5b6e71fe25df2225f79326a3bd575f6b6beb1bcc768596278a2b2182857d18cd1d79be466595b4245d1acd57bb14e9113e2e5bdcfa0a7bee950f24f5138abd33526b50615bce7cc8f380023d262ae9e6be56c97d635fb74822d836c7853ac8d5ecfb14c282522019addae4c74d8c938aeebd89ef235c00e4b32f5377d9fc5fed2604994f8d5c37c84f9437bbdc67ec2e381a29e49035872d892457"}}) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10) 2m48.63987789s ago: executing program 3 (id=19): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020704050400000026bd7000fddbdf2502000100000004d27f011403000000804facc998664d6d2467094e27bf806dc36390ea8a5261f55ab41cabd129dcc2c993cc80c247686829f9450705bde1abc522e66c0e76a1b2b9f3edaf39f370d80146bf0c025ad7888357aa"], 0x20}}, 0x10804) 2m47.736944376s ago: executing program 3 (id=27): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0xf}) gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2m47.532389595s ago: executing program 3 (id=29): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 2m47.003593283s ago: executing program 3 (id=32): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m45.159860106s ago: executing program 3 (id=39): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0xf}) gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2m45.141574586s ago: executing program 32 (id=39): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0xf}) gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2m44.199472092s ago: executing program 4 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r6, 0x407, 0x6) 2m43.77324636s ago: executing program 4 (id=53): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100003040000000000adb5710677ebf97d38238705d821bf0207f776f21e60018fa7310e7749f5c8950094508bafefd157fca200b902ff8b28a5af8cfb2829d7", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600270004000000"], 0x3c}}, 0x4000090) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="180400000018200c008e62bb214b9ca07006", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000230000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x72799540ad7d3b76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000100000000020000000000000dbb8569277a70c1f556bc5e998915360ffa367560ac65e27d13d903f0bbbb982214c17806dc2fdc1a319aed9653e6e6e195f2dd5a69cb673da9199b3e09840df8d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3, @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000000600), 0x4) r11 = fcntl$dupfd(r9, 0x0, r9) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r12, 0x89ed, 0x0) 2m43.025188317s ago: executing program 2 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) getpriority(0x1, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x25, 0x801, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, 0x0, 0x0, 0x0) fcntl$dupfd(r7, 0x0, r7) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 2m42.884540196s ago: executing program 2 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m42.790928486s ago: executing program 2 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x443, &(0x7f0000001040)="$eJzs28tvG8UfAPDvrpP019cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgJC5YgqcUcckfgLOMEFASckrsAZVapQLi2cjNbebRzXdpNg1yH+fKRNZnbHmfl6duzZnWwAA2ss+5FE7IqIXyNitJ5dXWCs/uvm8uWZv5YvzyRRrb7xZ1Ird2P58kxRtHjdziIzFJF+ksSBFvUuXLx0drpSmbuQ5ycWz707sXDx0jNnzk2fnjs9d37qxIljRyefOz71bFfizOK6sf+D+YP7Xnnr6mszJ6++/ePXSRF/UxxdMtbp4OPVaper66/dDelkqI8NYV1K9WEaw7XxPxqlWOm80Xj54742DuiparVava/94aUqsIUl0e8WAP1RfNFn17/FdpemHpvC9RfqF0BZ3DfzrX5kKNK8zHDT9W03jUXEyaW/v8i2aL4Psb1HlQIAA+3bbP7zdKv5XxqN94X+n6+hlCPinojYExHHI2JvRNwbUSt7f0Q8sM76mxdJbp9/ptc2FNgaZfO/5/O1rdXzv2L2F+VSnttdi384OXWmMnckf08Ox/C2LD/ZoY7vXvrls3bHGud/2ZbVX8wF83ZcG9q2+jWz04vT/ybmRtc/itg/1Cr+5NZKQBIR+yJi/wbrOPPkVwfbHWsT/8ia/nAX1pmqX0Y8Ue//pWiKv5B0Xp+c+F9U5o5MFGfF7X76+crr7eq/c//3Vtb/O1qe/0X8v5eTxvXahfXXceW3T9teU270/B9J3ly17/3pxcULkxEjyau1fLlx/1RTuamV8ln8hw+1Hv97YuWdOBAR2Un8YEQ8FBEP521/JCIejYhDHeL/4cXH3tl4/L2VxT/bsf+jqf9XEiPRvKd1onT2+29WVVpeT/xZ/x+rpQ7ne9by+beWdm3sbAYAAID/njQidkWSjt9Kp+n4eP1/+PfGjrQyv7D41Kn5987P1p8RKMdwWtzpGm24HzqZX9YX+amm/NH8vvHnpe21/PjMfGW238HDgNvZZvxn/ij1u3VAz3leCwaX8Q+Dy/iHwWX8w+BqMf49egYDotX3/4d9aAdw9zWN/47LfiYGsLW4/ofBZfzD4DL+YSAtbI87PyS/NRJpRGyCZmyVRKSbohkSPUr0+5MJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4JAAD//5025W8=") r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x9) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[], 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") eventfd(0x1) 2m41.843955232s ago: executing program 2 (id=65): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 2m41.32672755s ago: executing program 2 (id=68): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) unshare(0x20040600) io_uring_setup(0x79b1, &(0x7f0000000240)={0x0, 0x6320, 0x2, 0x2, 0x98}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="67d8902400aa303e97380e908ddaa715f6a4bd8662cbc3cdb7c268e4fd703be2724807416378c9aaf67b61f51ed6ddc4a47116ec2dbf7ff6accd4ea5d271856e7237f334176dafb336aa6687af5e0ee989db3298e6b7280b17dd00f58cec1132dd82854b9c55d85624e7c739fcaf1ea3589d35627941658b4edc7079492c6cea33044b8a3ae0bd6a8fd57f9326950ae52162466c3aa56c056bae8e9dc64873ddefc0dd5ac347f69c08e3a9caad1f2c", 0xaf}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f7", 0x3d2}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_open_dev$loop(0x0, 0x10000, 0x10d480) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000003, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 2m39.286414952s ago: executing program 2 (id=80): timer_create(0x7, &(0x7f0000000140)={0x0, 0x10, 0x1, @thr={&(0x7f0000000000)="27213a81e17b38aa3037159b7b19e8187f231046c42fdaebe25ccee2d44d2a70e42028197940ccca904b23e2faae61d69ceb04a67c446d132955425efffcc072792f207c2dd19fbc7449078015da82d131f1d343a918e97b1e50c2dd8bcd9d9ee013bf8b021d4768b6f97b9ab2a003aebeb73869ffc0447e3c604161be3a9932053e7e799233c482021611cce2522639720c49517adffb9e6bbbc2504dc0fc22dac02ddfd1b568a94b2a0027dce069c0ee11c184907af24bb4917ae3152163ced80a5b8d67f7528a69a1614bf57470028363d8c647241699227f92e1b3af", &(0x7f0000000100)="55a0f7623af5a12afcfa99837374ca18b48189f9b24e37a38a3fc5702e7f637c4c640465e9312368c95327a015b9c3772e793c16c6d2c2ffe910fc2a"}}, &(0x7f0000000180)) timer_create(0x3, &(0x7f0000001280)={0x0, 0x41, 0x0, @thr={&(0x7f00000001c0)="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", &(0x7f00000011c0)="539b6599f7561a1e95a019f2399f41eaaccf7eb8387904c31e532ab914e09c13bdadf952a6084de4fb06a61e4cb98fbf47cec8b1f6c60f3ce4e6e588f2479312de982d010b22a6e13aa508fe38d1c3743ac5bc9703052b56c292e8d6feaf9fc599cdc4e17c4ff2c81ea2f2bcfea3f2aafb06514c955315874c7fe903931ea946b0b179810c57adef99f857051d07c784c3e2db8337d702c5f4b3e90ac29d"}}, &(0x7f00000012c0)) r0 = syz_open_dev$mouse(&(0x7f0000001300), 0x2, 0x2) fstat(r0, &(0x7f0000001340)) r1 = gettid() r2 = openat(r0, &(0x7f00000013c0)='./file0\x00', 0x200001, 0x21) timer_create(0x5, &(0x7f0000001400)={0x0, 0x1c, 0x4, @tid=r1}, &(0x7f0000001440)) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000001480)) timer_create(0x6, &(0x7f00000014c0)={0x0, 0x1c, 0x1, @tid=r1}, &(0x7f0000001500)) perf_event_open(&(0x7f0000001540)={0x1, 0x80, 0x80, 0x7, 0x34, 0x0, 0x0, 0xffffffffffffffff, 0x9c29cee3a253300d, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0xac}, 0xc001, 0xffffffffffffffff, 0x10001, 0x1, 0x81, 0x40, 0xc17, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001640), r3) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7df7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) mount(&(0x7f0000001740)=@sg0, &(0x7f0000001780)='\x00', &(0x7f00000017c0)='udf\x00', 0x0, &(0x7f0000001800)='/dev/input/mouse#\x00') r6 = socket$can_j1939(0x1d, 0x2, 0x7) ppoll(&(0x7f0000001840)=[{r2, 0x4400}, {r4, 0x10}, {r0, 0x8010}, {r2, 0x2e41c5743c9cb69d}, {r6, 0x114}], 0x5, &(0x7f0000001880), &(0x7f00000018c0)={[0xffffffffcd742018]}, 0x8) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000001900), 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='pim6reg\x00') renameat2(r3, &(0x7f0000001980)='./file0\x00', r0, &(0x7f00000019c0)='./file0\x00', 0x2) timer_settime(0x0, 0x0, &(0x7f0000001a00)={{0x77359400}, {0x77359400}}, &(0x7f0000001a40)) quotactl_fd$Q_SYNC(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4062010, r3, 0x61bc4000) creat(&(0x7f0000001a80)='./file1\x00', 0x4) clock_gettime(0x0, &(0x7f0000001ac0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001b00)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000001b40)={{r7, r8+10000000}, {r9, r10+10000000}}, &(0x7f0000001b80)) pselect6(0x40, &(0x7f0000001bc0)={0x4, 0x1, 0xfe, 0x802b, 0x7, 0x8, 0x100000001, 0x8001}, &(0x7f0000001c00)={0x3, 0x6e6b, 0x6, 0x9fe1, 0x6, 0x8000000000000000, 0xc, 0x9}, &(0x7f0000001c40)={0x9, 0xd04a, 0x840, 0x9, 0x2, 0x10000, 0x1, 0x73}, &(0x7f0000001c80)={0x0, 0x3938700}, &(0x7f0000001d00)={&(0x7f0000001cc0)={[0x1]}, 0x8}) write$binfmt_script(r0, &(0x7f0000001d40)={'#! ', './file0', [{0x20, '-'}], 0xa, "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"}, 0x109) r11 = shmget$private(0x0, 0xf000, 0x1, &(0x7f0000ff1000/0xf000)=nil) shmat(r11, &(0x7f0000ffc000/0x2000)=nil, 0x6000) 2m39.285905762s ago: executing program 33 (id=80): timer_create(0x7, &(0x7f0000000140)={0x0, 0x10, 0x1, @thr={&(0x7f0000000000)="27213a81e17b38aa3037159b7b19e8187f231046c42fdaebe25ccee2d44d2a70e42028197940ccca904b23e2faae61d69ceb04a67c446d132955425efffcc072792f207c2dd19fbc7449078015da82d131f1d343a918e97b1e50c2dd8bcd9d9ee013bf8b021d4768b6f97b9ab2a003aebeb73869ffc0447e3c604161be3a9932053e7e799233c482021611cce2522639720c49517adffb9e6bbbc2504dc0fc22dac02ddfd1b568a94b2a0027dce069c0ee11c184907af24bb4917ae3152163ced80a5b8d67f7528a69a1614bf57470028363d8c647241699227f92e1b3af", &(0x7f0000000100)="55a0f7623af5a12afcfa99837374ca18b48189f9b24e37a38a3fc5702e7f637c4c640465e9312368c95327a015b9c3772e793c16c6d2c2ffe910fc2a"}}, &(0x7f0000000180)) timer_create(0x3, &(0x7f0000001280)={0x0, 0x41, 0x0, @thr={&(0x7f00000001c0)="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", &(0x7f00000011c0)="539b6599f7561a1e95a019f2399f41eaaccf7eb8387904c31e532ab914e09c13bdadf952a6084de4fb06a61e4cb98fbf47cec8b1f6c60f3ce4e6e588f2479312de982d010b22a6e13aa508fe38d1c3743ac5bc9703052b56c292e8d6feaf9fc599cdc4e17c4ff2c81ea2f2bcfea3f2aafb06514c955315874c7fe903931ea946b0b179810c57adef99f857051d07c784c3e2db8337d702c5f4b3e90ac29d"}}, &(0x7f00000012c0)) r0 = syz_open_dev$mouse(&(0x7f0000001300), 0x2, 0x2) fstat(r0, &(0x7f0000001340)) r1 = gettid() r2 = openat(r0, &(0x7f00000013c0)='./file0\x00', 0x200001, 0x21) timer_create(0x5, &(0x7f0000001400)={0x0, 0x1c, 0x4, @tid=r1}, &(0x7f0000001440)) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000001480)) timer_create(0x6, &(0x7f00000014c0)={0x0, 0x1c, 0x1, @tid=r1}, &(0x7f0000001500)) perf_event_open(&(0x7f0000001540)={0x1, 0x80, 0x80, 0x7, 0x34, 0x0, 0x0, 0xffffffffffffffff, 0x9c29cee3a253300d, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0xac}, 0xc001, 0xffffffffffffffff, 0x10001, 0x1, 0x81, 0x40, 0xc17, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001640), r3) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7df7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) mount(&(0x7f0000001740)=@sg0, &(0x7f0000001780)='\x00', &(0x7f00000017c0)='udf\x00', 0x0, &(0x7f0000001800)='/dev/input/mouse#\x00') r6 = socket$can_j1939(0x1d, 0x2, 0x7) ppoll(&(0x7f0000001840)=[{r2, 0x4400}, {r4, 0x10}, {r0, 0x8010}, {r2, 0x2e41c5743c9cb69d}, {r6, 0x114}], 0x5, &(0x7f0000001880), &(0x7f00000018c0)={[0xffffffffcd742018]}, 0x8) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000001900), 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='pim6reg\x00') renameat2(r3, &(0x7f0000001980)='./file0\x00', r0, &(0x7f00000019c0)='./file0\x00', 0x2) timer_settime(0x0, 0x0, &(0x7f0000001a00)={{0x77359400}, {0x77359400}}, &(0x7f0000001a40)) quotactl_fd$Q_SYNC(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4062010, r3, 0x61bc4000) creat(&(0x7f0000001a80)='./file1\x00', 0x4) clock_gettime(0x0, &(0x7f0000001ac0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001b00)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000001b40)={{r7, r8+10000000}, {r9, r10+10000000}}, &(0x7f0000001b80)) pselect6(0x40, &(0x7f0000001bc0)={0x4, 0x1, 0xfe, 0x802b, 0x7, 0x8, 0x100000001, 0x8001}, &(0x7f0000001c00)={0x3, 0x6e6b, 0x6, 0x9fe1, 0x6, 0x8000000000000000, 0xc, 0x9}, &(0x7f0000001c40)={0x9, 0xd04a, 0x840, 0x9, 0x2, 0x10000, 0x1, 0x73}, &(0x7f0000001c80)={0x0, 0x3938700}, &(0x7f0000001d00)={&(0x7f0000001cc0)={[0x1]}, 0x8}) write$binfmt_script(r0, &(0x7f0000001d40)={'#! ', './file0', [{0x20, '-'}], 0xa, "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"}, 0x109) r11 = shmget$private(0x0, 0xf000, 0x1, &(0x7f0000ff1000/0xf000)=nil) shmat(r11, &(0x7f0000ffc000/0x2000)=nil, 0x6000) 2m38.75860049s ago: executing program 4 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x200000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) (async) close(r7) (async) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000b00)={0x0, 0x4, 0x1ff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001180)={{r4}, r5, 0x8, @inherit={0x80, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x0, {0x4, 0x10001, 0xffffffffffffffff, 0x800, 0x7ff}, [0x7, 0x0, 0x1, 0x3, 0x40, 0x5, 0x8]}}, @devid=r8}) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=@newlink={0x27, 0x10, 0x503, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2m38.717746259s ago: executing program 0 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0xa5d7}, 0x408, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) 2m38.71728296s ago: executing program 4 (id=86): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 2m38.589924729s ago: executing program 0 (id=88): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000000004) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r8, &(0x7f0000000000)=""/41, 0x29) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0xf}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private0, @local, {[@routing={0x84}], "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"}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="effdecb37df863ae0000000000000094f3b88713", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0x0, 0x7, 0x4, 0xca0, 0x5, 0xdd, 0xad38, 0x400, 0x4, 0xbf15, 0xfffffffe, 0x2, 0x2, 0x8, 0x5, 0x7191, 0x4, 0x6261, 0x4010000, 0x1, 0xffffff01, 0x400, 0x3, 0x401, 0x8, 0xfffff801, 0x7, 0x1, 0xfffffff5, 0x3, 0x3ff, 0x0, 0x3, 0x1, 0x8, 0xbef, 0x7, 0xbd, 0xff, 0x4, 0x6, 0x4, 0xffffffe0, 0xffffff80, 0x81, 0x10001, 0x80000000, 0xf7, 0x4, 0x3, 0xe41, 0xffffffff, 0xff, 0x80000001, 0x1, 0x3, 0x1ff, 0x1, 0x6, 0x6, 0xb, 0x8, 0x9, 0x2, 0xe, 0x200, 0x9, 0x8, 0x2, 0x10, 0x2, 0x9, 0x8, 0x1, 0xaf3, 0xce, 0x1000, 0x7, 0xfffffff8, 0x5d97, 0x4, 0x3, 0x3, 0x2, 0x5, 0x15a9, 0x0, 0x865, 0x1ff, 0x8, 0x5, 0x6, 0xa, 0x2, 0x8000, 0x9, 0x7, 0x1, 0x8, 0x7, 0xffff, 0x1, 0xec5a, 0xfffffff9, 0x74, 0xefcd, 0x8, 0x8, 0x8, 0xfffffffc, 0x2, 0x5, 0x7, 0x5f, 0x8, 0x6, 0x9, 0x3, 0x3, 0x8001, 0x40, 0x1, 0x6, 0x1ffa, 0x0, 0x8001], "154dff8b6f78f817070da857f4091aac07e0f1256b0cd04ffa593599baaa5cbe24ccf76aa38ec1b6bd3b7a4b0d54b2e4df0fb665842ab4a7ee5213315b5b6e71fe25df2225f79326a3bd575f6b6beb1bcc768596278a2b2182857d18cd1d79be466595b4245d1acd57bb14e9113e2e5bdcfa0a7bee950f24f5138abd33526b50615bce7cc8f380023d262ae9e6be56c97d635fb74822d836c7853ac8d5ecfb14c282522019addae4c74d8c938aeebd89ef235c00e4b32f5377d9fc5fed2604994f8d5c37c84f9437bbdc67ec2e381a29e49035872d892457"}}) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10) 2m38.352492938s ago: executing program 0 (id=89): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x82000, 0x0, 0xb}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r1, &(0x7f0000001640)=[{0x0}], 0x1, 0x80, 0x1) execveat(r1, 0x0, 0x0, 0x0, 0x800) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x40, 0x100, 0xfd, 0x33, 0x8}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0xf1da, 0x2, 0x204, 0xfd6b6e7c, 0x40, 0x70, 0x7, 0x5, r2}, &(0x7f00000004c0)=0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0xfff}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = io_uring_setup(0x4bbf, &(0x7f00000002c0)={0x0, 0x0, 0x40, 0x1, 0x1b2}) (async) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20000000}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) bind$llc(r8, &(0x7f0000000080), 0x10) (async) listen(r8, 0x0) (async) accept4$llc(r8, 0x0, 0x0, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) (async, rerun: 64) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x10}, 0x0) (async) open(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) 2m37.385452754s ago: executing program 0 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100003040000000000adb5710677ebf97d38238705d821bf0207f776f21e60018fa7310e7749f5c8950094508bafefd157fca200b902ff8b28a5af8cfb2829d7", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600270004000000"], 0x3c}}, 0x4000090) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="180400000018200c008e62bb214b9ca07006", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000230000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x72799540ad7d3b76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000100000000020000000000000dbb8569277a70c1f556bc5e998915360ffa367560ac65e27d13d903f0bbbb982214c17806dc2fdc1a319aed9653e6e6e195f2dd5a69cb673da9199b3e09840df8d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3, @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000000600), 0x4) r11 = fcntl$dupfd(r9, 0x0, r9) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 2m36.2910485s ago: executing program 4 (id=100): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='9\x00\x00', 0x3}], 0x1) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='9\x00\x00', 0x3}], 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000300), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x69028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d00650f000000e8fe55a1290015000600142603600e030900040044000000a800605c0a0001400200000000000000b94dcf5c0461c1d67f6f9400714bcf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1a89c00d08ec477756bb9cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d00650f000000e8fe55a1290015000600142603600e030900040044000000a800605c0a0001400200000000000000b94dcf5c0461c1d67f6f9400714bcf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1a89c00d08ec477756bb9cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0) dup2(r3, r2) (async) r6 = dup2(r3, r2) close_range(r6, 0xffffffffffffffff, 0x0) 2m36.25935351s ago: executing program 34 (id=100): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='9\x00\x00', 0x3}], 0x1) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='9\x00\x00', 0x3}], 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000300), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x69028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d00650f000000e8fe55a1290015000600142603600e030900040044000000a800605c0a0001400200000000000000b94dcf5c0461c1d67f6f9400714bcf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1a89c00d08ec477756bb9cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d00650f000000e8fe55a1290015000600142603600e030900040044000000a800605c0a0001400200000000000000b94dcf5c0461c1d67f6f9400714bcf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1a89c00d08ec477756bb9cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1}, 0x0) dup2(r3, r2) (async) r6 = dup2(r3, r2) close_range(r6, 0xffffffffffffffff, 0x0) 2m35.786496688s ago: executing program 0 (id=103): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 2m35.786212778s ago: executing program 35 (id=103): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 41.646651388s ago: executing program 7 (id=2102): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000"], 0x138) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 41.379059806s ago: executing program 7 (id=2107): r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000", @ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x800}, 0x100001, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r6}, 0x10) 40.233032672s ago: executing program 7 (id=2136): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x40, 0x100, 0xfd, 0x33, 0x8}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) bind$packet(r6, &(0x7f00000002c0)={0x11, 0x9, r8, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="1a75c97086ccc5b50f1b173656aa3b6cb32d21bfa420430f54d97dcc768ac0ad16951569eecd50f7e340df052976f1ec627c77e1ac495b10b13cc1636a2703275766e429d4548a6b4df93e555dfd5df847c32634b229e843090ceb846c62fc17ba5352004b723765544967ef2c98d0e315e79600dbee6352ecf015982688af8201d9e523d6dac1710e7579b228722b17f200e180d20bbd05d7afbed3c134dae3ec6d9ce933999006514877c11aef347e65b7c9085bb3dc5cb1c5", @ANYRESHEX=r0, @ANYRES64=r5], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000380)={0x0, r10, 0x7, 0x2, 0xdb}) (async) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}], 0x4c, 0x0, &(0x7f0000000840)="dd11e166eb7eb76b877afbb3b9a4eae70df750adb96172977ecbc110a6663853ab0a10be80dd0778beea1d7c5de3d8c0be4b12edc77f71d633042db01aa1d7317de3483de1c973cb83bd1114"}) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) sendmsg$IEEE802154_ADD_IFACE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 39.69136168s ago: executing program 36 (id=2150): r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000000000400040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="600100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001cf6934c7542a77b00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f00000002c0)={0x11, 0x9, r8, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="1a75c97086ccc5b50f1b173656aa3b6cb32d21bfa420430f54d97dcc768ac0ad16951569eecd50f7e340df052976f1ec627c77e1ac495b10b13cc1636a2703275766e429d4548a6b4df93e555dfd5df847c32634b229e843090ceb846c62fc17ba5352004b723765544967ef2c98d0e315e79600dbee6352ecf015982688af8201d9e523d6dac1710e7579b228722b17f200e180d20bbd05d7afbed3c134dae3ec6d9ce933999006514877c11aef347e65b7c9085bb3dc5cb1c5", @ANYRESHEX=r0, @ANYRES64=r5], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000380)={0x0, r10, 0x7, 0x2, 0xdb}) (async) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x400}], 0x4c, 0x0, &(0x7f0000000840)="dd11e166eb7eb76b877afbb3b9a4eae70df750adb96172977ecbc110a6663853ab0a10be80dd0778beea1d7c5de3d8c0be4b12edc77f71d633042db01aa1d7317de3483de1c973cb83bd1114"}) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) sendmsg$IEEE802154_ADD_IFACE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 5.824749103s ago: executing program 5 (id=2741): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000004100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b4b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.696368752s ago: executing program 5 (id=2747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESHEX], 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="000000e2e3dcac51ea1da51300161ae35cdeaea55004", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) 5.675199712s ago: executing program 5 (id=2749): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="340000000000930f16db502dbcac4550000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 4.719320078s ago: executing program 5 (id=2766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48}}, 0x0) 4.632429208s ago: executing program 5 (id=2767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32, @ANYBLOB="000000000000003783b468fe3f030a597c33ad2fd2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000f0601020000000000000400050000070501000700000006000b80ffff00000500010007510f00050001000700"/60], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000200), 0x1b, 0x4da, &(0x7f0000000a40)="$eJzs3d1rW+cZAPDnHFtZPpzZYbvIAsvCkuGELZIdL4kZLNtgbFeBbdnF7jLPlo2xbBlLTmITVof+AYUS2kKvetWbQv+AQsldb0tLoL0vbWkpbdJe9KKNir7SxJH8QWQrWL8fHOs9H/LzvBJ6dd73vOgE0LNORMS5iHhQqVTORMRgY3vaWO4cioi1+nH3792crC5JVCpXvkwiaWyrHp888j8bT4n9EfGvv0f8L3kybmlldW6iUMgvNdZz5fnFXGll9ezs/MRMfia/MDY2emH84vj58ZGO1HMgIi799dOXXnj9b5fe/t31j65+fvr/1bT+2NjfrEen1aueqb0WTf0RsbQTwbqgr1GfTLcTAQBgS5rn+b+OiDMxGH21szkAAABgL6n8aSC+SyIqAAAAwJ6V1ubGJmm2MQ9gINI0m63P4f15HEwLxVL5t9PF5YWp+hzaocik07OF/EhjrvBQZJLq+mit/OP6uXXrYxFxJCJuDx6orWcni4Wpbg9+AAAAQI84tK7//81gvf8PAAAA7DFD3U4AAAAA2HH6/wAAALD3tej//6cbeQAAAAA74h+XL1eXSvP+11PXVpbnitfOTuVLc9n55cnsZHFpMTtTLM7UfrNvfrP/VygWF38fC8s3cuV8qZwrraxenS8uL5Svzj52C2wAAABgFx351Z0Pk4hY+8OB2lK1r9tJAbuifzsHf7JzeQC7r6/bCQBds63vf2BPyXQ7AaDrkk32t528827ncwEAAHbG8C9aX/9PNh0bWEt3KUVghxj/g97l+j/0Ltf/oXdloi905KG37fz1/0plWwkBAAAdN1BbkjQbURsHGIg0zWYjDtduC5BJpmcL+ZGI+GlEfDCY+Ul1fbT2zGTTPgMAAAAAAAAAAAAAAAAAAAAAAAAAUFepJFEBAAAA9rSI9LOkcf+v4cFTA+vHB/Yl3w7WHiPi+qtXXr4xUS4vjVa3f/Vwe/mVxvZz3RjBAAAAANZr9tOb/XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KT7925ONpfdjPvFXyJiqFX8/thfe9wfmYg4+HUS/Y88L4mIvg7EX7sVEUdbxU+qacVQI4tW8Q90MX4aEYc6EB962Z1q+/PnVp+/NE7UHlt//i7UWqin1779Sx+2f31t2p/DW4xx7O6bubbxb0Uc62/d/jTjJ23in9xi/P/+e3W13b7KaxHDLb9/ksdi5crzi7nSyurZ2fmJmfxMfmFsbPTC+MXx8+MjuenZQr7xt0WEffHiL996sFH9D8bttu3vRvU/tcX6f3/3xr2f1YuZVvFPn2z9/h9tEz9tfPf9plGu7h9ultfq5Ucdf+O94xHvv9Ou/lNtXv/N3v/TW6z/mX8+//EWDwUAdkFpZXVuolDIL/V04alejepp0TNRC4XtFp57NtJ4JgvdbZcAAIDOe7IP/LhOXGMHAAAAAAAAAAAAAAAAAAAANrabv67XtNadqgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbOiHAAAA//8Rz9eE") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r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x1a0}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000cccdafcf6d6e869a0000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000f4ffffffffff1711cce3203d2775392d0280066c6c820000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r9, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) close(0xffffffffffffffff) 3.664590774s ago: executing program 5 (id=2779): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x400000, @private1, 0x401}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000640)=r1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000300)=0x1005254, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.852476431s ago: executing program 6 (id=2792): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.82634785s ago: executing program 9 (id=2793): r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="224fa30adbcd5801df9f6dd4079bef0b1d5e138a28fcf7b76c366eb779aa47d834a0954957b1183f5a05f1263372c1293d53737d935c7865bfb3b388e201212feb15745278aa85f629b9b391d1f5109cabd685afcdd33dd3bfb2be9fad4d38d3836b08e3c398f23bccda60aa894aa78fb1479c80db7d3747e06e22b820f365bfa87707bdca808c3ceeff76ad339d70df432f45edd60a1b95344546abac379d3c2fcc60505e6eb2e78070cdf5eb44915b07bb36273f1b97f0e1028cfb5e08fc66c1df3f17", 0xc4, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000280), 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x1}, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r3, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r9, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r10, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x11ef, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(r2, &(0x7f00000003c0)={[0x1]}, 0x8) 2.421479339s ago: executing program 9 (id=2795): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32, @ANYBLOB="000000000000003783b468fe3f030a597c33ad2fd2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000f0601020000000000000400050000070501000700000006000b80ffff00000500010007510f00050001000700"/60], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000200), 0x1b, 0x4da, &(0x7f0000000a40)="$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") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r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x1a0}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000cccdafcf6d6e869a0000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000f4ffffffffff1711cce3203d2775392d0280066c6c820000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r9, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) close(0xffffffffffffffff) 1.960160457s ago: executing program 6 (id=2798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48}}, 0x0) 1.885848497s ago: executing program 6 (id=2799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040700"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000006c0)='sys_enter\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_clone(0x280a0000, &(0x7f0000000300)="b30fd15b2bb2d9d81aa926352e8c", 0xe, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)="22f4fa3dec5c6491616f091b5d2bb8712ad40e53bcc0e8e9405cf21f3dfc7f61f7a0a2297ce361") fcntl$setownex(r2, 0xf, &(0x7f00000004c0)={0x2, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8}, 0x18) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x1, 0x0) 1.885524527s ago: executing program 8 (id=2800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.808779777s ago: executing program 8 (id=2801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r5}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x4, &(0x7f0000000040)={0x0, 0x8, 0x1}, &(0x7f0000000080)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9}, 0x57) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f00000001c0)={{}, {r10, r11+10000000}}, &(0x7f0000000240)) r12 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x4, 0x0, 0x0) 1.762289096s ago: executing program 6 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x860, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x5, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6db, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400001, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffa, 0x9, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}, @TCA_TBF_RTAB={0x404, 0x2, [0x5a, 0x6, 0x7ff, 0x3, 0x8, 0x2, 0x0, 0x70000000, 0x2, 0x101, 0x3, 0x6, 0x2, 0x2, 0x8001, 0x8001, 0xfffffff8, 0x7, 0x5, 0xda7, 0x100, 0x9, 0xd, 0xfffffffb, 0x8f48, 0x5, 0x0, 0xff, 0x4, 0x10001, 0x9, 0x1, 0x100007f, 0x0, 0xd, 0xfffffff8, 0x5, 0x6, 0x81, 0x80000021, 0x9, 0x0, 0x6, 0x1, 0xfffffffb, 0xf, 0x6, 0x146, 0x9, 0x9f1, 0x8, 0x9, 0xbda3, 0x484, 0x8, 0x32be44e4, 0x7, 0x7ff, 0x80, 0xffffffff, 0x8, 0x5, 0x5, 0x67, 0x28, 0x0, 0x8, 0x8, 0x80000000, 0x5, 0x2c00000, 0x9, 0x3, 0xfffffff7, 0xe, 0xffff9895, 0x1, 0x401, 0x2e3f, 0x8, 0x8001, 0x9, 0x82b, 0x66d2, 0x7, 0x5, 0x2, 0x1, 0x1, 0x1, 0xb5, 0x0, 0x2, 0xca, 0x6e6, 0x65, 0x5fca035c, 0x190ad1cc, 0x252cc00, 0x10, 0xffff00, 0x7, 0x6, 0x5, 0x5, 0x2, 0x1, 0x6, 0x4, 0xb14d, 0x9, 0x4, 0xa79, 0x9, 0xfff, 0x7, 0x4, 0x7, 0xbe6, 0x40000000, 0x9, 0x71, 0x3, 0x6, 0x200, 0x7, 0x7, 0x3, 0xfffff801, 0xfffffffe, 0x4, 0x8, 0x8, 0x7fff, 0xfffffffb, 0x1, 0xcb4e1e42, 0x3, 0x200, 0x2, 0x7, 0xc4e, 0x1, 0x7, 0x7, 0x9, 0x3f3, 0x0, 0x0, 0x3, 0x8, 0x142e, 0x7, 0x3, 0x1, 0x7, 0x42c85fbe, 0x9, 0x0, 0x9, 0x80000000, 0x40, 0x8, 0x1fd, 0xfffffffd, 0xe136, 0x0, 0xa6, 0x3ff, 0x360b000, 0x1, 0x7, 0x1, 0x7b, 0x2, 0x8, 0x151a, 0x10, 0x6, 0x2, 0x9, 0x1, 0x80000006, 0x0, 0x6, 0x5, 0xa2, 0x4, 0x80000001, 0xe, 0x1, 0x0, 0x7ff, 0x40, 0xfffffffc, 0x3, 0x5f281ce9, 0x401, 0x5a5, 0x5, 0xfa, 0x5f, 0x1, 0x4, 0x0, 0x577, 0xffff0001, 0x10001, 0x10, 0x5, 0x5, 0xa2, 0x6, 0x7, 0x1400000, 0x5, 0x0, 0x9, 0x5, 0x8, 0x2e, 0x1, 0x8, 0x1000, 0x5, 0x7fff, 0xf, 0x7, 0x9, 0x5, 0x0, 0x3, 0x9, 0x4, 0x10001, 0xd31, 0x5, 0x8e, 0x8, 0x800, 0x3, 0x3, 0x300000, 0x5, 0x7fffffff, 0x7, 0x10000, 0x6, 0xffffffff, 0x9, 0x0, 0x60, 0x80, 0x80000000, 0x400, 0x4]}]}}]}, 0x860}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$evdev(r0, &(0x7f00000003c0)=[{{}, 0x4, 0x8, 0x2}, {{0x0, 0x2710}, 0x1, 0x806a, 0xbc}, {{0x0, 0xea60}, 0x2, 0xf01e, 0x4}, {{0x0, 0x2710}, 0x15, 0x3, 0x5e}, {{r2, r3/1000+60000}, 0x5, 0xe97, 0x8}, {{}, 0x16, 0x8, 0x5}, {{}, 0x4, 0x2, 0x30eb}, {{r4, r5/1000+10000}, 0x12, 0x2, 0x951}, {{0x77359400}, 0x0, 0x10, 0x101}, {{0x77359400}, 0x16, 0x7, 0xfff}], 0xf0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000010000000100000000080000000000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(0x0, 0x2, 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r7, 0x40101288, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 1.605072026s ago: executing program 8 (id=2803): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r5, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f\x00'], &(0x7f00000047c0), 0x1200) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 1.546652506s ago: executing program 9 (id=2805): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{0x800, 0x6, 0xe8, 0x5}, {0x101, 0x7, 0x5, 0xa}, {0x5, 0x8, 0x9, 0x80000001}, {0x4, 0xdd, 0xfb, 0x4}, {0xfff2, 0x6e, 0x8, 0x5}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, r1, 0x3, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) time(0x0) 1.367033725s ago: executing program 1 (id=2806): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xe}, 0x18) syslog(0x2, &(0x7f00000013c0)=""/11, 0xb) 1.220126444s ago: executing program 9 (id=2807): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32, @ANYBLOB="000000000000003783b468fe3f030a597c33ad2fd2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1004000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000200), 0x1b, 0x4da, &(0x7f0000000a40)="$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") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r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x1a0}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000cccdafcf6d6e869a0000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000f4ffffffffff1711cce3203d2775392d0280066c6c820000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r9, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) close(0xffffffffffffffff) 978.348863ms ago: executing program 6 (id=2808): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='rxrpc_local\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="a3", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x20040001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="18"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 927.472793ms ago: executing program 1 (id=2809): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 834.640183ms ago: executing program 1 (id=2810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0xab0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 693.824532ms ago: executing program 1 (id=2811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040700"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000006c0)='sys_enter\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_clone(0x280a0000, &(0x7f0000000300)="b30fd15b2bb2d9d81aa926352e8c", 0xe, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)="22f4fa3dec5c6491616f091b5d2bb8712ad40e53bcc0e8e9405cf21f3dfc7f61f7a0a2297ce361") fcntl$setownex(r2, 0xf, &(0x7f00000004c0)={0x2, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x1, 0x0) 651.912382ms ago: executing program 8 (id=2812): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x400000, @private1, 0x401}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000640)=r1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 582.206912ms ago: executing program 8 (id=2813): r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="224fa30adbcd5801df9f6dd4079bef0b1d5e138a28fcf7b76c366eb779aa47d834a0954957b1183f5a05f1263372c1293d53737d935c7865bfb3b388e201212feb15745278aa85f629b9b391d1f5109cabd685afcdd33dd3bfb2be9fad4d38d3836b08e3c398f23bccda60aa894aa78fb1479c80db7d3747e06e22b820f365bfa87707bdca808c3ceeff76ad339d70df432f45edd60a1b95344546abac379d3c2fcc60505e6eb2e78070cdf5eb44915b07bb36273f1b97f0e1028cfb5e08fc66c1df3f17", 0xc4, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000280), 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x1}, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r3, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r9, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r10, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x11ef, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(r2, &(0x7f00000003c0)={[0x1]}, 0x8) 510.646782ms ago: executing program 1 (id=2814): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=']) 344.028481ms ago: executing program 1 (id=2815): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 199.68748ms ago: executing program 9 (id=2816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syslog(0x2, &(0x7f00000013c0)=""/11, 0xb) 88.737859ms ago: executing program 8 (id=2817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='fscache_cookie\x00', r0, 0x0, 0x800}, 0xffffffffffffff66) unshare(0x40000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0xfffffff9, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r2, 0x0, 0x0) write(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0xe8, 0xe8, 0xe8, 0xe8, 0x1d0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'dvmrp0\x00', 'veth1_virt_wifi\x00', {0xff}}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9, {0x4}}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [0xff], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth1_to_team\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) syz_io_uring_setup(0xf3d, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x1de1, &(0x7f0000000440)={0x0, 0x0, 0x800}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f"], 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38010000100033060100000000000000fc000000000000000000000000000000ac1414bb00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000a5af3001100000000320000006401010200000000000000000000000054aa0000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000029bd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7c18c04adc1646e98ce7051559f2ddbc6f2d5870e6c9afec2f41924c8a6f190b300347309e6c66333ca9b83e03089f6c5b705bf3090471e7a5a032b0f7ea108ed88588a1cf3db305f9b4a88bd9e5e8acc393010"], 0x138}, 0x1, 0x0, 0x0, 0x5850}, 0x0) 79.56164ms ago: executing program 6 (id=2818): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x860, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x5, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6db, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400001, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffa, 0x9, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}}}, @TCA_TBF_RTAB={0x404, 0x2, [0x5a, 0x6, 0x7ff, 0x3, 0x8, 0x2, 0x0, 0x70000000, 0x2, 0x101, 0x3, 0x6, 0x2, 0x2, 0x8001, 0x8001, 0xfffffff8, 0x7, 0x5, 0xda7, 0x100, 0x9, 0xd, 0xfffffffb, 0x8f48, 0x5, 0x0, 0xff, 0x4, 0x10001, 0x9, 0x1, 0x100007f, 0x0, 0xd, 0xfffffff8, 0x5, 0x6, 0x81, 0x80000021, 0x9, 0x0, 0x6, 0x1, 0xfffffffb, 0xf, 0x6, 0x146, 0x9, 0x9f1, 0x8, 0x9, 0xbda3, 0x484, 0x8, 0x32be44e4, 0x7, 0x7ff, 0x80, 0xffffffff, 0x8, 0x5, 0x5, 0x67, 0x28, 0x0, 0x8, 0x8, 0x80000000, 0x5, 0x2c00000, 0x9, 0x3, 0xfffffff7, 0xe, 0xffff9895, 0x1, 0x401, 0x2e3f, 0x8, 0x8001, 0x9, 0x82b, 0x66d2, 0x7, 0x5, 0x2, 0x1, 0x1, 0x1, 0xb5, 0x0, 0x2, 0xca, 0x6e6, 0x65, 0x5fca035c, 0x190ad1cc, 0x252cc00, 0x10, 0xffff00, 0x7, 0x6, 0x5, 0x5, 0x2, 0x1, 0x6, 0x4, 0xb14d, 0x9, 0x4, 0xa79, 0x9, 0xfff, 0x7, 0x4, 0x7, 0xbe6, 0x40000000, 0x9, 0x71, 0x3, 0x6, 0x200, 0x7, 0x7, 0x3, 0xfffff801, 0xfffffffe, 0x4, 0x8, 0x8, 0x7fff, 0xfffffffb, 0x1, 0xcb4e1e42, 0x3, 0x200, 0x2, 0x7, 0xc4e, 0x1, 0x7, 0x7, 0x9, 0x3f3, 0x0, 0x0, 0x3, 0x8, 0x142e, 0x7, 0x3, 0x1, 0x7, 0x42c85fbe, 0x9, 0x0, 0x9, 0x80000000, 0x40, 0x8, 0x1fd, 0xfffffffd, 0xe136, 0x0, 0xa6, 0x3ff, 0x360b000, 0x1, 0x7, 0x1, 0x7b, 0x2, 0x8, 0x151a, 0x10, 0x6, 0x2, 0x9, 0x1, 0x80000006, 0x0, 0x6, 0x5, 0xa2, 0x4, 0x80000001, 0xe, 0x1, 0x0, 0x7ff, 0x40, 0xfffffffc, 0x3, 0x5f281ce9, 0x401, 0x5a5, 0x5, 0xfa, 0x5f, 0x1, 0x4, 0x0, 0x577, 0xffff0001, 0x10001, 0x10, 0x5, 0x5, 0xa2, 0x6, 0x7, 0x1400000, 0x5, 0x0, 0x9, 0x5, 0x8, 0x2e, 0x1, 0x8, 0x1000, 0x5, 0x7fff, 0xf, 0x7, 0x9, 0x5, 0x0, 0x3, 0x9, 0x4, 0x10001, 0xd31, 0x5, 0x8e, 0x8, 0x800, 0x3, 0x3, 0x300000, 0x5, 0x7fffffff, 0x7, 0x10000, 0x6, 0xffffffff, 0x9, 0x0, 0x60, 0x80, 0x80000000, 0x400, 0x4]}]}}]}, 0x860}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$evdev(r0, &(0x7f00000003c0)=[{{}, 0x4, 0x8, 0x2}, {{0x0, 0x2710}, 0x1, 0x806a, 0xbc}, {{0x0, 0xea60}, 0x2, 0xf01e, 0x4}, {{0x0, 0x2710}, 0x15, 0x3, 0x5e}, {{r2, r3/1000+60000}, 0x5, 0xe97, 0x8}, {{}, 0x16, 0x8, 0x5}, {{}, 0x4, 0x2, 0x30eb}, {{r4, r5/1000+10000}, 0x12, 0x2, 0x951}, {{0x77359400}, 0x0, 0x10, 0x101}, {{0x77359400}, 0x16, 0x7, 0xfff}], 0xf0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000010000000100000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(0x0, 0x2, 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r7, 0x40101288, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 9 (id=2819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32, @ANYBLOB="000000000000003783b468fe3f030a597c33ad2fd2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000440)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000200), 0x1b, 0x4da, &(0x7f0000000a40)="$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") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r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x1a0}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000cccdafcf6d6e869a0000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000f4ffffffffff1711cce3203d2775392d0280066c6c820000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r9, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): omm="syz.6.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.094980][ T29] audit: type=1400 audit(1734534429.285:12941): avc: denied { bind } for pid=10451 comm="syz.6.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.114688][ T29] audit: type=1400 audit(1734534429.285:12942): avc: denied { name_bind } for pid=10451 comm="syz.6.1896" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 151.135740][ T29] audit: type=1400 audit(1734534429.285:12943): avc: denied { node_bind } for pid=10451 comm="syz.6.1896" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 151.158552][ T29] audit: type=1400 audit(1734534429.285:12944): avc: denied { setopt } for pid=10451 comm="syz.6.1896" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.180580][ T29] audit: type=1400 audit(1734534429.295:12945): avc: denied { open } for pid=10451 comm="syz.6.1896" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.621116][T10475] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1905'. [ 151.667722][T10475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1905'. [ 151.875031][T10487] netlink: '+}[@': attribute type 10 has an invalid length. [ 151.953650][T10496] loop7: detected capacity change from 0 to 128 [ 152.223617][T10509] lo speed is unknown, defaulting to 1000 [ 152.270854][T10511] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.309478][T10516] lo speed is unknown, defaulting to 1000 [ 152.397736][T10516] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.540457][T10519] loop7: detected capacity change from 0 to 1024 [ 152.568713][T10519] EXT4-fs: Ignoring removed nobh option [ 152.574299][T10519] EXT4-fs: Ignoring removed bh option [ 152.733667][T10533] lo speed is unknown, defaulting to 1000 [ 152.827271][T10529] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.857704][T10529] siw: device registration error -23 [ 153.131769][T10544] loop6: detected capacity change from 0 to 2048 [ 153.163980][T10519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.198745][ T4409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.235110][T10544] Alternate GPT is invalid, using primary GPT. [ 153.241434][T10544] loop6: p2 p3 p7 [ 153.283679][T10559] netlink: '+}[@': attribute type 10 has an invalid length. [ 153.329834][ T2999] Alternate GPT is invalid, using primary GPT. [ 153.336281][ T2999] loop6: p2 p3 p7 [ 153.442140][T10566] loop8: detected capacity change from 0 to 128 [ 153.832719][T10586] netlink: '+}[@': attribute type 10 has an invalid length. [ 153.992128][T10610] lo speed is unknown, defaulting to 1000 [ 154.033524][T10610] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.054832][T10610] siw: device registration error -23 [ 154.062112][T10610] __nla_validate_parse: 8 callbacks suppressed [ 154.062123][T10610] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1955'. [ 154.116823][T10619] loop8: detected capacity change from 0 to 512 [ 154.123352][T10619] EXT4-fs: Ignoring removed i_version option [ 154.141656][T10619] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 154.170850][T10622] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1961'. [ 154.197042][T10619] EXT4-fs (loop8): 1 truncate cleaned up [ 154.207600][T10619] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.227831][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1961'. [ 154.236917][T10622] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1961'. [ 154.640341][T10642] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1965'. [ 154.697730][T10646] netlink: '+}[@': attribute type 10 has an invalid length. [ 154.862839][T10660] netlink: '+}[@': attribute type 10 has an invalid length. [ 154.899488][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.115309][T10685] netlink: '+}[@': attribute type 10 has an invalid length. [ 155.171673][T10692] netlink: '+}[@': attribute type 10 has an invalid length. [ 155.475093][T10717] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1995'. [ 156.043947][ T29] kauditd_printk_skb: 1671 callbacks suppressed [ 156.043962][ T29] audit: type=1326 audit(1734534434.345:14617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.073900][ T29] audit: type=1326 audit(1734534434.345:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.107743][T10774] loop7: detected capacity change from 0 to 1024 [ 156.121937][ T29] audit: type=1326 audit(1734534434.405:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.125060][T10774] EXT4-fs: Ignoring removed nobh option [ 156.145573][ T29] audit: type=1326 audit(1734534434.405:14620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.151107][T10774] EXT4-fs: Ignoring removed bh option [ 156.174622][ T29] audit: type=1326 audit(1734534434.405:14621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.203697][ T29] audit: type=1326 audit(1734534434.405:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.227318][ T29] audit: type=1326 audit(1734534434.405:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.250959][ T29] audit: type=1326 audit(1734534434.405:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.274763][ T29] audit: type=1326 audit(1734534434.405:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.298328][ T29] audit: type=1326 audit(1734534434.405:14626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9f0e5d29 code=0x7ffc0000 [ 156.336796][T10774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.427628][ T4409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.645502][T10800] loop7: detected capacity change from 0 to 128 [ 156.776424][T10806] loop8: detected capacity change from 0 to 1024 [ 156.814183][T10810] loop7: detected capacity change from 0 to 128 [ 156.831155][T10806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.978640][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.229654][T10842] lo speed is unknown, defaulting to 1000 [ 157.278671][T10842] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 157.292202][T10842] siw: device registration error -23 [ 157.299954][T10842] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2047'. [ 157.476343][T10865] FAULT_INJECTION: forcing a failure. [ 157.476343][T10865] name failslab, interval 1, probability 0, space 0, times 0 [ 157.489093][T10865] CPU: 0 UID: 0 PID: 10865 Comm: syz.7.2057 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 157.499858][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 157.509921][T10865] Call Trace: [ 157.513208][T10865] [ 157.516309][T10865] dump_stack_lvl+0xf2/0x150 [ 157.520923][T10865] dump_stack+0x15/0x1a [ 157.525147][T10865] should_fail_ex+0x223/0x230 [ 157.529835][T10865] should_failslab+0x8f/0xb0 [ 157.534539][T10865] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 157.540923][T10865] ? __rcu_read_unlock+0x4e/0x70 [ 157.545884][T10865] ? kstrdup_const+0x3e/0x50 [ 157.550496][T10865] kstrdup+0x38/0x80 [ 157.554439][T10865] kstrdup_const+0x3e/0x50 [ 157.558917][T10865] __kernfs_new_node+0x41/0x380 [ 157.563811][T10865] ? ___slab_alloc+0x2b7/0x980 [ 157.568708][T10865] ? mod_objcg_state+0x2ea/0x4f0 [ 157.573654][T10865] ? kernfs_new_node+0x30/0x140 [ 157.578525][T10865] ? security_inode_alloc+0x37/0x100 [ 157.583936][T10865] kernfs_new_node+0xc8/0x140 [ 157.588637][T10865] kernfs_create_link+0x6c/0x120 [ 157.593585][T10865] sysfs_do_create_link_sd+0x6b/0xf0 [ 157.598880][T10865] sysfs_create_link+0x51/0x70 [ 157.603655][T10865] driver_sysfs_add+0x54/0x160 [ 157.608507][T10865] really_probe+0x101/0x5d0 [ 157.613022][T10865] __driver_probe_device+0x12d/0x200 [ 157.618388][T10865] driver_probe_device+0x38/0x2f0 [ 157.623474][T10865] __device_attach_driver+0x216/0x320 [ 157.628874][T10865] ? __pfx___device_attach_driver+0x10/0x10 [ 157.634825][T10865] bus_for_each_drv+0x1cd/0x240 [ 157.639670][T10865] __device_attach+0x1c7/0x290 [ 157.644465][T10865] device_attach+0x17/0x20 [ 157.648882][T10865] proc_ioctl+0x339/0x400 [ 157.653269][T10865] usbdev_ioctl+0x1f01/0x3e00 [ 157.657981][T10865] ? do_vfs_ioctl+0x96e/0x1530 [ 157.662774][T10865] ? selinux_file_ioctl+0x2f7/0x380 [ 157.667977][T10865] ? __fget_files+0x17c/0x1c0 [ 157.672682][T10865] ? __pfx_usbdev_ioctl+0x10/0x10 [ 157.677716][T10865] __se_sys_ioctl+0xc9/0x140 [ 157.682374][T10865] __x64_sys_ioctl+0x43/0x50 [ 157.687025][T10865] x64_sys_call+0x1690/0x2dc0 [ 157.691738][T10865] do_syscall_64+0xc9/0x1c0 [ 157.696307][T10865] ? clear_bhb_loop+0x55/0xb0 [ 157.700978][T10865] ? clear_bhb_loop+0x55/0xb0 [ 157.705646][T10865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.711582][T10865] RIP: 0033:0x7f2b9f0e5d29 [ 157.716033][T10865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.735691][T10865] RSP: 002b:00007f2b9d757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.744094][T10865] RAX: ffffffffffffffda RBX: 00007f2b9f2d5fa0 RCX: 00007f2b9f0e5d29 [ 157.752053][T10865] RDX: 0000000020000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 157.760062][T10865] RBP: 00007f2b9d757090 R08: 0000000000000000 R09: 0000000000000000 [ 157.768098][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.776064][T10865] R13: 0000000000000000 R14: 00007f2b9f2d5fa0 R15: 00007fff6af9c0b8 [ 157.784030][T10865] [ 157.787212][T10865] hub 9-0:1.0: really_probe: driver_sysfs_add failed [ 157.872491][T10878] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2062'. [ 157.881051][T10880] loop7: detected capacity change from 0 to 1024 [ 157.888738][T10880] EXT4-fs: Ignoring removed nobh option [ 157.894496][T10880] EXT4-fs: Ignoring removed bh option [ 157.931267][T10880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.973040][ T4409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.262233][T10918] loop8: detected capacity change from 0 to 1024 [ 158.280766][T10918] EXT4-fs: Ignoring removed nobh option [ 158.286552][T10918] EXT4-fs: Ignoring removed bh option [ 158.328169][T10918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.381036][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.426383][T10932] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2081'. [ 158.501573][T10941] loop6: detected capacity change from 0 to 512 [ 158.749492][T10969] sctp: [Deprecated]: syz.5.2097 (pid 10969) Use of int in max_burst socket option deprecated. [ 158.749492][T10969] Use struct sctp_assoc_value instead [ 158.812212][T10971] netlink: '+}[@': attribute type 10 has an invalid length. [ 158.826169][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.833863][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.841681][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.849387][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.857060][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.864758][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.872677][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.880580][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.888289][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.896055][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.903901][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.911674][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.919395][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.927061][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.934737][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.942454][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.950172][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.957852][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.965532][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.973232][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.980904][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.988633][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 158.996317][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.003990][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.011709][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.019386][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.027071][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.034744][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.042488][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.050175][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.057879][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.065557][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 159.074926][ T3373] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.183527][T10994] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2108'. [ 159.286187][T11004] loop6: detected capacity change from 0 to 128 [ 159.356291][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.364020][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.371721][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.379449][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.387123][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.394831][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.402514][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.410289][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.417975][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.425709][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.433590][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.441270][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.448990][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.456656][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.464302][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.471967][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.479700][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.487426][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.495279][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.503129][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.510834][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.518487][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.526196][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.533836][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.541509][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.549230][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.556903][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.564555][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.572254][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.579902][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.587548][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.595287][ T8] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 159.636091][ T8] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.680710][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'. [ 159.781508][T11032] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2126'. [ 159.902005][T11037] netlink: '+}[@': attribute type 10 has an invalid length. [ 159.923863][T11040] loop8: detected capacity change from 0 to 128 [ 160.006408][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.014169][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.021876][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.029607][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.037276][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.045057][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.052742][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.060443][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.068129][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.075877][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.083518][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.091248][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.099013][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.106717][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.114367][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.122099][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.129758][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.137416][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.145103][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.152744][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.160415][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.168193][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.175898][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.183544][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.191282][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.198975][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.206724][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.214532][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.222470][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.230163][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.237865][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.245583][ T8] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 160.256854][ T8] hid-generic 0000:3000000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.299414][T11058] loop7: detected capacity change from 0 to 512 [ 160.326375][T11058] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 160.353281][T11062] lo speed is unknown, defaulting to 1000 [ 160.359209][T11058] EXT4-fs (loop7): 1 truncate cleaned up [ 160.376121][T11066] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2140'. [ 160.388092][T11058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.412276][T11062] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 160.425693][T11062] siw: device registration error -23 [ 160.429693][T11071] netlink: '+}[@': attribute type 10 has an invalid length. [ 160.431909][T11062] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2139'. [ 160.484504][T11056] lo speed is unknown, defaulting to 1000 [ 160.526626][T11057] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 160.533169][T11057] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.540810][T11057] vhci_hcd vhci_hcd.0: Device attached [ 160.603619][T11088] loop6: detected capacity change from 0 to 1024 [ 160.634870][T11088] EXT4-fs: Ignoring removed nobh option [ 160.640490][T11088] EXT4-fs: Ignoring removed bh option [ 160.662499][T11081] vhci_hcd: connection closed [ 160.664186][ T3560] vhci_hcd: stop threads [ 160.673246][ T3560] vhci_hcd: release socket [ 160.677746][ T3560] vhci_hcd: disconnect device [ 160.734517][ T8] vhci_hcd: vhci_device speed not set [ 160.740340][T11088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.754507][T10482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.816442][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.918632][ T3572] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.989056][ T3572] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.077290][ T3572] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.117026][T11101] lo speed is unknown, defaulting to 1000 [ 161.145841][ T3572] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.221901][ T29] kauditd_printk_skb: 1552 callbacks suppressed [ 161.221917][ T29] audit: type=1400 audit(1734534439.515:16179): avc: denied { read } for pid=11074 comm="syz.5.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.293775][ T29] audit: type=1400 audit(1734534439.595:16180): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 161.336197][T11101] chnl_net:caif_netlink_parms(): no params data found [ 161.352118][ T3572] bridge_slave_1: left allmulticast mode [ 161.357859][ T3572] bridge_slave_1: left promiscuous mode [ 161.363538][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.378221][ T29] audit: type=1400 audit(1734534439.645:16181): avc: denied { search } for pid=3037 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.399660][ T29] audit: type=1400 audit(1734534439.645:16182): avc: denied { read } for pid=3037 comm="dhcpcd" name="n64" dev="tmpfs" ino=8410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.421750][ T29] audit: type=1400 audit(1734534439.645:16183): avc: denied { open } for pid=3037 comm="dhcpcd" path="/run/udev/data/n64" dev="tmpfs" ino=8410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.444814][ T29] audit: type=1400 audit(1734534439.645:16184): avc: denied { getattr } for pid=3037 comm="dhcpcd" path="/run/udev/data/n64" dev="tmpfs" ino=8410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.468230][ T29] audit: type=1400 audit(1734534439.745:16185): avc: denied { create } for pid=11119 comm="syz.8.2154" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.489173][ T29] audit: type=1326 audit(1734534439.745:16186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c07b45d29 code=0x7ffc0000 [ 161.512845][ T29] audit: type=1326 audit(1734534439.755:16187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3c07b45d29 code=0x7ffc0000 [ 161.536394][ T29] audit: type=1326 audit(1734534439.755:16188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c07b45d29 code=0x7ffc0000 [ 161.563366][T11121] netlink: '+}[@': attribute type 10 has an invalid length. [ 161.578033][ T3572] bridge_slave_0: left allmulticast mode [ 161.583701][ T3572] bridge_slave_0: left promiscuous mode [ 161.589371][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.614283][T11126] FAULT_INJECTION: forcing a failure. [ 161.614283][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 161.626995][T11126] CPU: 1 UID: 0 PID: 11126 Comm: syz.5.2156 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 161.637765][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 161.647859][T11126] Call Trace: [ 161.651122][T11126] [ 161.654038][T11126] dump_stack_lvl+0xf2/0x150 [ 161.658774][T11126] dump_stack+0x15/0x1a [ 161.662917][T11126] should_fail_ex+0x223/0x230 [ 161.667583][T11126] should_failslab+0x8f/0xb0 [ 161.672193][T11126] kmem_cache_alloc_noprof+0x52/0x320 [ 161.677611][T11126] ? audit_log_start+0x34c/0x6b0 [ 161.682594][T11126] audit_log_start+0x34c/0x6b0 [ 161.687395][T11126] audit_seccomp+0x4b/0x130 [ 161.691889][T11126] __seccomp_filter+0x6fa/0x1180 [ 161.696838][T11126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.702546][T11126] ? vfs_write+0x596/0x920 [ 161.706959][T11126] __secure_computing+0x9f/0x1c0 [ 161.711893][T11126] syscall_trace_enter+0xd1/0x1f0 [ 161.716930][T11126] ? fpregs_assert_state_consistent+0x83/0xa0 [ 161.722994][T11126] do_syscall_64+0xaa/0x1c0 [ 161.727485][T11126] ? clear_bhb_loop+0x55/0xb0 [ 161.732209][T11126] ? clear_bhb_loop+0x55/0xb0 [ 161.736910][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.742862][T11126] RIP: 0033:0x7f31a4145d29 [ 161.747265][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.766867][T11126] RSP: 002b:00007f31a27b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 161.775270][T11126] RAX: ffffffffffffffda RBX: 00007f31a4335fa0 RCX: 00007f31a4145d29 [ 161.783229][T11126] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000006 [ 161.791188][T11126] RBP: 00007f31a27b1090 R08: 0000000000000000 R09: 0000000000000000 [ 161.799200][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.807168][T11126] R13: 0000000000000000 R14: 00007f31a4335fa0 R15: 00007ffd384a45f8 [ 161.815138][T11126] [ 161.861260][ T3572] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 161.946168][ T3572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.956073][ T3572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.967432][ T3572] bond0 (unregistering): Released all slaves [ 161.977062][ T3572] bond1 (unregistering): (slave batadv1): Releasing active interface [ 161.986088][ T3572] bond1 (unregistering): Released all slaves [ 162.069604][T11139] infiniband syz1: set active [ 162.074358][T11139] infiniband syz1: added team_slave_0 [ 162.086503][ T3572] hsr_slave_0: left promiscuous mode [ 162.095102][ T3572] hsr_slave_1: left promiscuous mode [ 162.100559][T11139] RDS/IB: syz1: added [ 162.111370][T11139] smc: adding ib device syz1 with port count 1 [ 162.121650][ T3572] veth1_macvtap: left promiscuous mode [ 162.128120][ T3572] veth0_macvtap: left promiscuous mode [ 162.128692][T11139] smc: ib device syz1 port 1 has pnetid [ 162.133660][ T3572] veth1_vlan: left promiscuous mode [ 162.144856][ T3572] veth0_vlan: left promiscuous mode [ 162.289632][ T3572] team0 (unregistering): Port device team_slave_1 removed [ 162.314023][ T3572] team0 (unregistering): Port device team_slave_0 removed [ 162.345747][T11101] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.352834][T11101] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.360040][T11101] bridge_slave_0: entered allmulticast mode [ 162.374520][T11101] bridge_slave_0: entered promiscuous mode [ 162.382671][T11101] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.389909][T11101] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.397230][T11101] bridge_slave_1: entered allmulticast mode [ 162.423102][T11101] bridge_slave_1: entered promiscuous mode [ 162.461650][T11101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.482792][T11101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.517146][T11101] team0: Port device team_slave_0 added [ 162.525926][T11101] team0: Port device team_slave_1 added [ 162.575637][T11101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.582639][T11101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.608685][T11101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.665381][T11101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.672385][T11101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.698312][T11101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.742363][ T3572] IPVS: stop unused estimator thread 0... [ 162.812632][T11101] hsr_slave_0: entered promiscuous mode [ 162.856538][T11101] hsr_slave_1: entered promiscuous mode [ 162.876287][T11101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.883858][T11101] Cannot create hsr debugfs directory [ 163.112003][T11101] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 163.143507][T11101] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.183084][T11212] geneve2: entered promiscuous mode [ 163.188357][T11212] geneve2: entered allmulticast mode [ 163.259059][T11223] syz.6.2178[11223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.259198][T11223] syz.6.2178[11223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.277876][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2177'. [ 163.294485][T11223] syz.6.2178[11223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.302158][T11101] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.321650][T11223] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2178'. [ 163.326238][T11101] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 163.342136][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2177'. [ 163.351241][T11226] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2177'. [ 163.404905][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x4 [ 163.412603][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x2 [ 163.425344][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.433023][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.440696][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.448434][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.456129][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.463798][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.471605][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.479270][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.486947][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.488933][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.494594][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.494647][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.518490][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.526222][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.533895][ T8] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 163.542420][ T8] hid-generic 0000:3000000:0000.0028: hidraw0: HID v0.00 Device [sy] on syz0 [ 163.559195][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.586480][T11101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.599624][T11101] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.632349][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.639438][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.656356][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x4 [ 163.663932][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.664078][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x2 [ 163.671088][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.680015][T11234] lo speed is unknown, defaulting to 1000 [ 163.686107][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.686133][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.707282][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.714979][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.722660][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.730372][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.738068][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.745795][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.753477][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.761159][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.768847][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.776552][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.784260][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.792107][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.799793][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.807465][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.815144][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.822793][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.830509][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.836201][T11242] loop8: detected capacity change from 0 to 1024 [ 163.838159][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.852143][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.857918][T11242] ext3: Bad value for 'barrier' [ 163.859818][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.859841][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.859860][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.887829][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.895516][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.903376][ T35] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 163.927377][ T35] hid-generic 0000:3000000:0000.0029: hidraw1: HID v0.00 Device [sy] on syz0 [ 164.057528][T11101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.076922][T11234] loop8: detected capacity change from 0 to 1024 [ 164.091907][T11234] EXT4-fs: Ignoring removed orlov option [ 164.097771][T11234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.155018][T11234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.162939][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4 [ 164.174862][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2 [ 164.176892][T11234] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 164.182506][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.200736][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.208601][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.216377][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.224035][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.231811][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.239500][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.247180][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.254890][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.262604][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.270323][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.277987][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.285657][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.293306][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.301057][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.308747][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.316432][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.324171][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.331905][ T35] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 164.433945][ T35] hid-generic 0000:3000000:0000.002A: hidraw1: HID v0.00 Device [sy] on syz0 [ 164.523229][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.683883][T11101] veth0_vlan: entered promiscuous mode [ 164.710699][T11101] veth1_vlan: entered promiscuous mode [ 164.767030][T11101] veth0_macvtap: entered promiscuous mode [ 164.786785][T11101] veth1_macvtap: entered promiscuous mode [ 164.822635][T11101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.833196][T11101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.843195][T11101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.853672][T11101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.863554][T11101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.873988][T11101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.903337][T11101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.931620][T11101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.942217][T11101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.952036][T11101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.962546][T11101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.972403][T11101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.982847][T11101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.011263][T11101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.029095][T11101] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.037866][T11101] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.046773][T11101] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.055543][T11101] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.391925][T11351] loop9: detected capacity change from 0 to 1024 [ 165.414274][T11351] EXT4-fs: Ignoring removed nobh option [ 165.419987][T11351] EXT4-fs: Ignoring removed bh option [ 165.468795][T11351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.606076][T11101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.631803][T11366] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.640152][T11366] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.648592][T11366] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.656864][T11366] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.668947][T11366] vxlan0: entered promiscuous mode [ 165.674103][T11366] vxlan0: entered allmulticast mode [ 165.690626][T11366] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.699106][T11366] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.707496][T11366] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.715874][T11366] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.788522][T11380] loop9: detected capacity change from 0 to 128 [ 166.000213][T11402] lo speed is unknown, defaulting to 1000 [ 166.036647][T11407] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.066599][T11407] siw: device registration error -23 [ 166.156115][T11402] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2209'. [ 166.230657][T11417] lo speed is unknown, defaulting to 1000 [ 166.237418][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 166.237430][ T29] audit: type=1326 audit(1734534444.545:16774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.267297][ T29] audit: type=1326 audit(1734534444.545:16775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.267353][ T29] audit: type=1326 audit(1734534444.545:16776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.314655][ T29] audit: type=1326 audit(1734534444.545:16777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.338384][ T29] audit: type=1326 audit(1734534444.545:16778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.368465][ T29] audit: type=1326 audit(1734534444.545:16779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.392244][ T29] audit: type=1326 audit(1734534444.545:16780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.415897][ T29] audit: type=1326 audit(1734534444.545:16781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.439578][ T29] audit: type=1326 audit(1734534444.545:16782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.463136][ T29] audit: type=1326 audit(1734534444.545:16783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 166.513314][T11424] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.597170][T11417] siw: device registration error -23 [ 166.609323][T11417] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2211'. [ 166.626738][T11427] lo speed is unknown, defaulting to 1000 [ 166.934795][T11450] netlink: '+}[@': attribute type 10 has an invalid length. [ 166.967845][T11454] FAULT_INJECTION: forcing a failure. [ 166.967845][T11454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.981260][T11454] CPU: 0 UID: 0 PID: 11454 Comm: syz.5.2218 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 166.992038][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 167.002162][T11454] Call Trace: [ 167.005438][T11454] [ 167.008462][T11454] dump_stack_lvl+0xf2/0x150 [ 167.013071][T11454] dump_stack+0x15/0x1a [ 167.017277][T11454] should_fail_ex+0x223/0x230 [ 167.022012][T11454] should_fail+0xb/0x10 [ 167.026168][T11454] should_fail_usercopy+0x1a/0x20 [ 167.031269][T11454] _copy_from_user+0x1e/0xb0 [ 167.035887][T11454] vlan_ioctl_handler+0x4d/0x4f0 [ 167.040829][T11454] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 167.046373][T11454] sock_ioctl+0x471/0x600 [ 167.050731][T11454] ? __pfx_sock_ioctl+0x10/0x10 [ 167.055631][T11454] __se_sys_ioctl+0xc9/0x140 [ 167.060217][T11454] __x64_sys_ioctl+0x43/0x50 [ 167.064798][T11454] x64_sys_call+0x1690/0x2dc0 [ 167.069489][T11454] do_syscall_64+0xc9/0x1c0 [ 167.074024][T11454] ? clear_bhb_loop+0x55/0xb0 [ 167.078704][T11454] ? clear_bhb_loop+0x55/0xb0 [ 167.083434][T11454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.089403][T11454] RIP: 0033:0x7f31a4145d29 [ 167.093855][T11454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.113450][T11454] RSP: 002b:00007f31a2790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.121874][T11454] RAX: ffffffffffffffda RBX: 00007f31a4336080 RCX: 00007f31a4145d29 [ 167.129833][T11454] RDX: 0000000020000000 RSI: 0000000000008982 RDI: 0000000000000009 [ 167.137844][T11454] RBP: 00007f31a2790090 R08: 0000000000000000 R09: 0000000000000000 [ 167.145802][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.153759][T11454] R13: 0000000000000000 R14: 00007f31a4336080 R15: 00007ffd384a45f8 [ 167.161786][T11454] [ 167.182792][T11450] geneve1: entered promiscuous mode [ 167.192205][T11450] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 167.547927][T11440] lo speed is unknown, defaulting to 1000 [ 167.651232][T11477] FAULT_INJECTION: forcing a failure. [ 167.651232][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 167.663912][T11477] CPU: 1 UID: 0 PID: 11477 Comm: syz.1.2229 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 167.674989][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 167.685035][T11477] Call Trace: [ 167.688347][T11477] [ 167.691343][T11477] dump_stack_lvl+0xf2/0x150 [ 167.695968][T11477] dump_stack+0x15/0x1a [ 167.700120][T11477] should_fail_ex+0x223/0x230 [ 167.704805][T11477] should_failslab+0x8f/0xb0 [ 167.709460][T11477] kmem_cache_alloc_noprof+0x52/0x320 [ 167.714884][T11477] ? skb_clone+0x154/0x1f0 [ 167.719356][T11477] skb_clone+0x154/0x1f0 [ 167.723626][T11477] __netlink_deliver_tap+0x2bd/0x4f0 [ 167.728911][T11477] netlink_unicast+0x64a/0x670 [ 167.733731][T11477] netlink_sendmsg+0x5cc/0x6e0 [ 167.738518][T11477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.743792][T11477] __sock_sendmsg+0x140/0x180 [ 167.748464][T11477] ____sys_sendmsg+0x312/0x410 [ 167.753220][T11477] __sys_sendmsg+0x19d/0x230 [ 167.757971][T11477] __x64_sys_sendmsg+0x46/0x50 [ 167.762752][T11477] x64_sys_call+0x2734/0x2dc0 [ 167.767420][T11477] do_syscall_64+0xc9/0x1c0 [ 167.771914][T11477] ? clear_bhb_loop+0x55/0xb0 [ 167.776602][T11477] ? clear_bhb_loop+0x55/0xb0 [ 167.781268][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.787171][T11477] RIP: 0033:0x7f54c2395d29 [ 167.791576][T11477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.811230][T11477] RSP: 002b:00007f54c0a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.819717][T11477] RAX: ffffffffffffffda RBX: 00007f54c2585fa0 RCX: 00007f54c2395d29 [ 167.827694][T11477] RDX: 0000000020000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 167.835661][T11477] RBP: 00007f54c0a07090 R08: 0000000000000000 R09: 0000000000000000 [ 167.843740][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.851781][T11477] R13: 0000000000000000 R14: 00007f54c2585fa0 R15: 00007fffad03f458 [ 167.859761][T11477] [ 167.864450][T11477] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.319995][T11498] lo speed is unknown, defaulting to 1000 [ 168.329673][T11502] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 168.342340][T11502] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2238'. [ 168.784196][T11518] loop9: detected capacity change from 0 to 1024 [ 168.792758][T11518] EXT4-fs: Ignoring removed nobh option [ 168.798352][T11518] EXT4-fs: Ignoring removed bh option [ 168.810619][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.819646][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.850739][T11518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.913160][T11101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.099451][T11535] lo speed is unknown, defaulting to 1000 [ 169.134492][T11541] loop6: detected capacity change from 0 to 164 [ 169.152246][T11541] syz.6.2252: attempt to access beyond end of device [ 169.152246][T11541] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 169.194213][T11541] syz.6.2252: attempt to access beyond end of device [ 169.194213][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.209352][T11541] syz.6.2252: attempt to access beyond end of device [ 169.209352][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.235851][T11546] loop9: detected capacity change from 0 to 128 [ 169.236449][T11541] syz.6.2252: attempt to access beyond end of device [ 169.236449][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.262619][T11541] syz.6.2252: attempt to access beyond end of device [ 169.262619][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.279301][T11541] syz.6.2252: attempt to access beyond end of device [ 169.279301][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.295696][T11541] syz.6.2252: attempt to access beyond end of device [ 169.295696][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.310264][T11541] syz.6.2252: attempt to access beyond end of device [ 169.310264][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.324349][T11541] syz.6.2252: attempt to access beyond end of device [ 169.324349][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.339175][T11541] syz.6.2252: attempt to access beyond end of device [ 169.339175][T11541] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.676873][T11566] lo speed is unknown, defaulting to 1000 [ 169.725461][T11571] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 169.768224][T11571] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2263'. [ 169.810702][T11578] loop9: detected capacity change from 0 to 128 [ 170.256117][T11613] lo speed is unknown, defaulting to 1000 [ 170.302761][T11613] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 170.314853][T11613] siw: device registration error -23 [ 170.320534][T11613] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2279'. [ 170.512155][T11629] lo speed is unknown, defaulting to 1000 [ 170.585028][T11629] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 170.597407][T11629] siw: device registration error -23 [ 170.604026][T11629] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2286'. [ 170.687672][T11637] lo speed is unknown, defaulting to 1000 [ 170.731503][T11639] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 170.749546][T11639] siw: device registration error -23 [ 170.756100][T11639] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2290'. [ 170.803716][T11644] smc: net device bond0 applied user defined pnetid SYZ0 [ 170.818857][T11644] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 170.828318][T11642] lo speed is unknown, defaulting to 1000 [ 170.868912][T11648] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 170.896525][T11648] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2291'. [ 171.002420][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2299'. [ 171.092730][T11668] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2301'. [ 171.119686][T11669] lo speed is unknown, defaulting to 1000 [ 171.159682][T11678] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 171.227219][T11690] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 171.269066][T11682] lo speed is unknown, defaulting to 1000 [ 171.279342][ T29] kauditd_printk_skb: 997 callbacks suppressed [ 171.279355][ T29] audit: type=1400 audit(1734534449.585:17781): avc: denied { create } for pid=11667 comm="syz.9.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.279684][T11692] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2303'. [ 171.299139][ T29] audit: type=1400 audit(1734534449.585:17782): avc: denied { write } for pid=11667 comm="syz.9.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.335429][ T29] audit: type=1400 audit(1734534449.585:17783): avc: denied { nlmsg_write } for pid=11667 comm="syz.9.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.348245][T11678] siw: device registration error -23 [ 171.369002][T11690] siw: device registration error -23 [ 171.394767][ T29] audit: type=1400 audit(1734534449.665:17784): avc: denied { prog_load } for pid=11681 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.414116][ T29] audit: type=1400 audit(1734534449.665:17785): avc: denied { bpf } for pid=11681 comm="syz.5.2309" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.434975][ T29] audit: type=1400 audit(1734534449.665:17786): avc: denied { perfmon } for pid=11681 comm="syz.5.2309" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.456286][ T29] audit: type=1400 audit(1734534449.665:17787): avc: denied { prog_run } for pid=11681 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.475520][ T29] audit: type=1400 audit(1734534449.675:17788): avc: denied { recv } for pid=3383 comm="kworker/u8:7" saddr=10.128.0.163 src=30030 daddr=10.128.1.46 dest=57364 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 171.501231][ T29] audit: type=1400 audit(1734534449.675:17789): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.524113][ T29] audit: type=1400 audit(1734534449.675:17790): avc: denied { read write } for pid=4214 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.561848][T11690] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2309'. [ 171.912522][T11754] loop8: detected capacity change from 0 to 128 [ 171.932551][T11751] lo speed is unknown, defaulting to 1000 [ 171.982596][T11751] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 171.995636][T11751] siw: device registration error -23 [ 172.002076][T11751] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2338'. [ 172.193753][T11772] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2346'. [ 172.239414][T11772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2346'. [ 172.248503][T11772] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2346'. [ 172.597709][T11780] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2347'. [ 172.607750][T11778] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2357'. [ 172.633655][T11778] loop8: detected capacity change from 0 to 512 [ 172.650631][T11778] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.659848][T11778] EXT4-fs (loop8): ea_inode feature is not supported for Hurd [ 172.684868][T11778] loop8: detected capacity change from 0 to 512 [ 172.712004][T11778] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 172.727724][T11778] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 172.740692][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2349'. [ 172.756084][T11778] EXT4-fs (loop8): 1 truncate cleaned up [ 172.762704][T11778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.810277][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2357'. [ 172.896055][T11795] loop6: detected capacity change from 0 to 512 [ 172.920293][T11795] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.929394][T11795] EXT4-fs (loop6): ea_inode feature is not supported for Hurd [ 172.977751][T11799] netlink: '+}[@': attribute type 10 has an invalid length. [ 173.060260][T11795] loop6: detected capacity change from 0 to 512 [ 173.072229][T11795] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.126979][T11795] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.169366][T11795] EXT4-fs (loop6): 1 truncate cleaned up [ 173.186632][T11795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.434110][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.512961][T11820] lo speed is unknown, defaulting to 1000 [ 173.560933][T11821] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.583071][T11820] siw: device registration error -23 [ 173.690967][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.841797][T11834] netlink: '+}[@': attribute type 10 has an invalid length. [ 174.335740][T11868] program syz.5.2373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.360612][T11868] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 174.563593][T11881] smc: net device bond0 erased user defined pnetid SYZ0 [ 174.581784][T11881] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 174.716429][T11885] loop8: detected capacity change from 0 to 1024 [ 174.723627][T11885] EXT4-fs: Ignoring removed nobh option [ 174.729243][T11885] EXT4-fs: Ignoring removed bh option [ 174.748899][T11885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.803243][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.969032][T11910] FAULT_INJECTION: forcing a failure. [ 174.969032][T11910] name failslab, interval 1, probability 0, space 0, times 0 [ 174.981709][T11910] CPU: 1 UID: 0 PID: 11910 Comm: syz.6.2389 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 174.992534][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 175.002599][T11910] Call Trace: [ 175.005860][T11910] [ 175.008843][T11910] dump_stack_lvl+0xf2/0x150 [ 175.013553][T11910] dump_stack+0x15/0x1a [ 175.017699][T11910] should_fail_ex+0x223/0x230 [ 175.022440][T11910] should_failslab+0x8f/0xb0 [ 175.027019][T11910] kmem_cache_alloc_noprof+0x52/0x320 [ 175.032549][T11910] ? alloc_empty_file+0xd0/0x200 [ 175.037506][T11910] alloc_empty_file+0xd0/0x200 [ 175.042279][T11910] path_openat+0x6a/0x1fa0 [ 175.046704][T11910] ? _parse_integer_limit+0x167/0x180 [ 175.052240][T11910] ? _parse_integer+0x27/0x30 [ 175.056927][T11910] ? kstrtoull+0x110/0x140 [ 175.061324][T11910] ? kstrtouint+0x77/0xc0 [ 175.065784][T11910] ? kstrtouint_from_user+0xb0/0xe0 [ 175.071005][T11910] do_filp_open+0x107/0x230 [ 175.075644][T11910] do_sys_openat2+0xab/0x120 [ 175.080314][T11910] __x64_sys_openat+0xf3/0x120 [ 175.085077][T11910] x64_sys_call+0x2b30/0x2dc0 [ 175.089812][T11910] do_syscall_64+0xc9/0x1c0 [ 175.094315][T11910] ? clear_bhb_loop+0x55/0xb0 [ 175.099060][T11910] ? clear_bhb_loop+0x55/0xb0 [ 175.103777][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.109700][T11910] RIP: 0033:0x7f83d5b95d29 [ 175.114150][T11910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.133744][T11910] RSP: 002b:00007f83d4207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.142211][T11910] RAX: ffffffffffffffda RBX: 00007f83d5d85fa0 RCX: 00007f83d5b95d29 [ 175.150175][T11910] RDX: 000000000000275a RSI: 0000000020000280 RDI: ffffffffffffff9c [ 175.158183][T11910] RBP: 00007f83d4207090 R08: 0000000000000000 R09: 0000000000000000 [ 175.166213][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.174167][T11910] R13: 0000000000000000 R14: 00007f83d5d85fa0 R15: 00007ffccfcb8728 [ 175.182249][T11910] [ 175.243419][T11917] lo speed is unknown, defaulting to 1000 [ 175.289860][T11921] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 175.308940][T11917] siw: device registration error -23 [ 175.662771][T11949] ip6gre1: entered allmulticast mode [ 175.752077][T11951] SELinux: syz.5.2405 (11951) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 175.837581][T11953] lo speed is unknown, defaulting to 1000 [ 175.883147][T11958] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 175.900283][T11953] siw: device registration error -23 [ 176.170938][T11984] lo speed is unknown, defaulting to 1000 [ 176.213117][T11985] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 176.229901][T11984] siw: device registration error -23 [ 176.285500][ T29] kauditd_printk_skb: 982 callbacks suppressed [ 176.285521][ T29] audit: type=1400 audit(1734534454.595:18770): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 176.315435][ T29] audit: type=1400 audit(1734534454.595:18771): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 176.388734][T11990] loop6: detected capacity change from 0 to 512 [ 176.396258][T11990] EXT4-fs: Ignoring removed i_version option [ 176.410862][T11990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 176.424080][T11990] EXT4-fs (loop6): 1 truncate cleaned up [ 176.430183][T11990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.443835][ T29] audit: type=1400 audit(1734534454.755:18772): avc: denied { watch watch_reads } for pid=11989 comm="syz.6.2421" path="/428/bus" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.467553][ T29] audit: type=1400 audit(1734534454.755:18773): avc: denied { write } for pid=11989 comm="syz.6.2421" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.489489][ T29] audit: type=1400 audit(1734534454.755:18774): avc: denied { add_name } for pid=11989 comm="syz.6.2421" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.510222][ T29] audit: type=1400 audit(1734534454.755:18775): avc: denied { create } for pid=11989 comm="syz.6.2421" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.530624][ T29] audit: type=1400 audit(1734534454.755:18776): avc: denied { write open } for pid=11989 comm="syz.6.2421" path="/428/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.563449][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.636820][ T29] audit: type=1326 audit(1734534454.945:18777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 176.645711][T12005] loop6: detected capacity change from 0 to 1024 [ 176.668851][T12005] EXT4-fs: Ignoring removed nobh option [ 176.674545][T12005] EXT4-fs: Ignoring removed bh option [ 176.679013][ T29] audit: type=1326 audit(1734534454.945:18778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 176.703701][ T29] audit: type=1326 audit(1734534454.945:18779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12004 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 176.736654][T12005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.750126][T12011] __nla_validate_parse: 17 callbacks suppressed [ 176.750139][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2429'. [ 176.779154][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.784199][T12013] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2431'. [ 177.091426][T12035] bridge0: port 3(vlan2) entered blocking state [ 177.098021][T12035] bridge0: port 3(vlan2) entered disabled state [ 177.131609][T12035] vlan2: entered allmulticast mode [ 177.162464][T12035] vlan2: left allmulticast mode [ 177.182362][T12040] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2440'. [ 177.325784][T12045] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2441'. [ 177.969516][T12082] SELinux: syz.6.2452 (12082) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 177.983529][T12082] FAULT_INJECTION: forcing a failure. [ 177.983529][T12082] name failslab, interval 1, probability 0, space 0, times 0 [ 177.996402][T12082] CPU: 0 UID: 0 PID: 12082 Comm: syz.6.2452 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 177.996807][T12081] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2451'. [ 178.007220][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 178.007234][T12082] Call Trace: [ 178.007240][T12082] [ 178.007247][T12082] dump_stack_lvl+0xf2/0x150 [ 178.037106][T12082] dump_stack+0x15/0x1a [ 178.041291][T12082] should_fail_ex+0x223/0x230 [ 178.045988][T12082] should_failslab+0x8f/0xb0 [ 178.050592][T12082] __kmalloc_noprof+0xab/0x3f0 [ 178.055412][T12082] ? sel_write_user+0x1aa/0x430 [ 178.060280][T12082] sel_write_user+0x1aa/0x430 [ 178.065032][T12082] selinux_transaction_write+0xba/0x100 [ 178.070677][T12082] ? __pfx_selinux_transaction_write+0x10/0x10 [ 178.076858][T12082] vfs_write+0x281/0x920 [ 178.081118][T12082] ? __fget_files+0x17c/0x1c0 [ 178.085880][T12082] ksys_write+0xe8/0x1b0 [ 178.090150][T12082] __x64_sys_write+0x42/0x50 [ 178.094796][T12082] x64_sys_call+0x287e/0x2dc0 [ 178.099564][T12082] do_syscall_64+0xc9/0x1c0 [ 178.104075][T12082] ? clear_bhb_loop+0x55/0xb0 [ 178.108841][T12082] ? clear_bhb_loop+0x55/0xb0 [ 178.113530][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.119484][T12082] RIP: 0033:0x7f83d5b95d29 [ 178.123977][T12082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.143647][T12082] RSP: 002b:00007f83d4207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.152179][T12082] RAX: ffffffffffffffda RBX: 00007f83d5d85fa0 RCX: 00007f83d5b95d29 [ 178.160153][T12082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 178.168205][T12082] RBP: 00007f83d4207090 R08: 0000000000000000 R09: 0000000000000000 [ 178.176190][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.184163][T12082] R13: 0000000000000000 R14: 00007f83d5d85fa0 R15: 00007ffccfcb8728 [ 178.192132][T12082] [ 178.202078][T12090] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.256341][T12087] netlink: 'syz.8.2455': attribute type 10 has an invalid length. [ 178.284243][T12095] netlink: '+}[@': attribute type 10 has an invalid length. [ 178.362170][T12110] syz.8.2461[12110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.362297][T12110] syz.8.2461[12110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.451089][T12110] syz.8.2461[12110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.776799][T12148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'. [ 178.797353][T12148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'. [ 178.925554][T12160] netlink: '+}[@': attribute type 10 has an invalid length. [ 179.070046][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2476'. [ 179.079078][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2476'. [ 179.191180][T12190] vlan2: entered allmulticast mode [ 179.642430][T12220] netlink: '+}[@': attribute type 10 has an invalid length. [ 179.851761][T12230] netlink: '+}[@': attribute type 10 has an invalid length. [ 180.097967][T12244] lo speed is unknown, defaulting to 1000 [ 180.145029][T12246] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 180.202461][T12246] siw: device registration error -23 [ 180.237392][T12246] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2493'. [ 180.294633][T12252] FAULT_INJECTION: forcing a failure. [ 180.294633][T12252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.307878][T12252] CPU: 1 UID: 0 PID: 12252 Comm: syz.9.2494 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 180.318713][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 180.328846][T12252] Call Trace: [ 180.332202][T12252] [ 180.335139][T12252] dump_stack_lvl+0xf2/0x150 [ 180.339757][T12252] dump_stack+0x15/0x1a [ 180.344021][T12252] should_fail_ex+0x223/0x230 [ 180.348802][T12252] should_fail+0xb/0x10 [ 180.352991][T12252] should_fail_usercopy+0x1a/0x20 [ 180.358022][T12252] _copy_from_user+0x1e/0xb0 [ 180.362623][T12252] sctp_setsockopt+0xbe/0xea0 [ 180.367330][T12252] sock_common_setsockopt+0x64/0x80 [ 180.372636][T12252] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.378550][T12252] __sys_setsockopt+0x187/0x200 [ 180.383410][T12252] __x64_sys_setsockopt+0x66/0x80 [ 180.388437][T12252] x64_sys_call+0x282e/0x2dc0 [ 180.393108][T12252] do_syscall_64+0xc9/0x1c0 [ 180.397650][T12252] ? clear_bhb_loop+0x55/0xb0 [ 180.402335][T12252] ? clear_bhb_loop+0x55/0xb0 [ 180.407032][T12252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.412976][T12252] RIP: 0033:0x7efd5ec05d29 [ 180.417426][T12252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.437024][T12252] RSP: 002b:00007efd5d271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.445485][T12252] RAX: ffffffffffffffda RBX: 00007efd5edf5fa0 RCX: 00007efd5ec05d29 [ 180.453469][T12252] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000003 [ 180.461468][T12252] RBP: 00007efd5d271090 R08: 000000000000000c R09: 0000000000000000 [ 180.469489][T12252] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 180.477450][T12252] R13: 0000000000000000 R14: 00007efd5edf5fa0 R15: 00007ffe1c2aeee8 [ 180.485452][T12252] [ 180.609312][T12262] netlink: '+}[@': attribute type 10 has an invalid length. [ 180.838665][T12284] lo speed is unknown, defaulting to 1000 [ 180.859687][T12272] netlink: 'syz.5.2499': attribute type 10 has an invalid length. [ 180.917063][T12290] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 180.969757][T12290] siw: device registration error -23 [ 181.059757][T12305] lo speed is unknown, defaulting to 1000 [ 181.143899][T12312] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 181.165726][T12312] siw: device registration error -23 [ 181.215968][T12316] netlink: '+}[@': attribute type 10 has an invalid length. [ 181.324420][ T29] kauditd_printk_skb: 595 callbacks suppressed [ 181.324436][ T29] audit: type=1326 audit(1734534459.625:19375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12318 comm="syz.9.2510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd5ec05d29 code=0x0 [ 181.364507][ T29] audit: type=1326 audit(1734534459.665:19376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.1.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f54c2395d29 code=0x7ffc0000 [ 181.391957][T12321] loop6: detected capacity change from 0 to 512 [ 181.422627][T12321] EXT4-fs: Ignoring removed i_version option [ 181.435890][ T29] audit: type=1326 audit(1734534459.725:19377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12325 comm="syz.1.2513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c2395d29 code=0x0 [ 181.495448][T12321] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 181.552448][T12321] EXT4-fs (loop6): 1 truncate cleaned up [ 181.578834][T12321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.632140][ T29] audit: type=1400 audit(1734534459.935:19378): avc: denied { mount } for pid=12320 comm="syz.6.2511" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 181.671174][ T29] audit: type=1400 audit(1734534459.965:19379): avc: denied { watch watch_reads } for pid=12320 comm="syz.6.2511" path="/455/bus" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.694855][ T29] audit: type=1400 audit(1734534459.965:19380): avc: denied { write } for pid=12320 comm="syz.6.2511" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.716698][ T29] audit: type=1400 audit(1734534459.965:19381): avc: denied { add_name } for pid=12320 comm="syz.6.2511" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.737462][ T29] audit: type=1400 audit(1734534459.965:19382): avc: denied { create } for pid=12320 comm="syz.6.2511" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.757812][ T29] audit: type=1400 audit(1734534459.965:19383): avc: denied { write open } for pid=12320 comm="syz.6.2511" path="/455/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.781229][ T29] audit: type=1400 audit(1734534460.005:19384): avc: denied { unmount } for pid=4214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 181.783690][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.875077][T12339] loop6: detected capacity change from 0 to 1024 [ 181.893465][T12339] EXT4-fs: Ignoring removed nobh option [ 181.899138][T12339] EXT4-fs: Ignoring removed bh option [ 181.934761][T12339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.987933][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.083759][T12356] lo speed is unknown, defaulting to 1000 [ 182.111931][T12358] netlink: '+}[@': attribute type 10 has an invalid length. [ 182.155164][T12361] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 182.192093][T12361] siw: device registration error -23 [ 182.205525][T12361] __nla_validate_parse: 2 callbacks suppressed [ 182.205538][T12361] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2521'. [ 182.838032][T12390] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2533'. [ 182.856957][T12390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2533'. [ 182.866003][T12390] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2533'. [ 183.135199][T12410] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2535'. [ 184.379380][T12448] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2551'. [ 184.391907][T12448] loop9: detected capacity change from 0 to 512 [ 184.399423][T12448] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.408580][T12448] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 184.423911][T12448] loop9: detected capacity change from 0 to 512 [ 184.431620][T12448] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 184.453064][T12448] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.467744][T12448] EXT4-fs (loop9): 1 truncate cleaned up [ 184.473832][T12448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.488405][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2551'. [ 184.497362][T12448] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2551'. [ 184.703845][T12455] lo speed is unknown, defaulting to 1000 [ 184.751081][T12455] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 184.763906][T12455] siw: device registration error -23 [ 184.770933][T12455] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2553'. [ 184.812353][T12459] syz_tun: entered promiscuous mode [ 184.817992][T12459] vlan2: entered promiscuous mode [ 184.825558][T12459] syz_tun: left promiscuous mode [ 184.957353][T12467] Â: renamed from pim6reg1 [ 184.961883][T12467] FAULT_INJECTION: forcing a failure. [ 184.961883][T12467] name failslab, interval 1, probability 0, space 0, times 0 [ 184.974660][T12467] CPU: 1 UID: 0 PID: 12467 Comm: syz.8.2558 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 184.985514][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 184.995592][T12467] Call Trace: [ 184.998874][T12467] [ 185.001806][T12467] dump_stack_lvl+0xf2/0x150 [ 185.006443][T12467] dump_stack+0x15/0x1a [ 185.010613][T12467] should_fail_ex+0x223/0x230 [ 185.015303][T12467] should_failslab+0x8f/0xb0 [ 185.019914][T12467] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 185.026285][T12467] ? kstrdup_const+0x3e/0x50 [ 185.030941][T12467] kstrdup+0x38/0x80 [ 185.034928][T12467] kstrdup_const+0x3e/0x50 [ 185.039407][T12467] kobject_rename+0x168/0x350 [ 185.044096][T12467] ? sysfs_rename_link_ns+0x105/0x120 [ 185.049475][T12467] device_rename+0x12a/0x1a0 [ 185.054132][T12467] dev_change_name+0x1ed/0x610 [ 185.058939][T12467] ? selinux_capable+0x1f2/0x260 [ 185.063960][T12467] ? full_name_hash+0xb1/0xe0 [ 185.068647][T12467] dev_ifsioc+0x5d2/0xa10 [ 185.073114][T12467] dev_ioctl+0x774/0xab0 [ 185.077435][T12467] sock_do_ioctl+0x11c/0x260 [ 185.082068][T12467] sock_ioctl+0x40f/0x600 [ 185.086416][T12467] ? __pfx_sock_ioctl+0x10/0x10 [ 185.091319][T12467] __se_sys_ioctl+0xc9/0x140 [ 185.095923][T12467] __x64_sys_ioctl+0x43/0x50 [ 185.100595][T12467] x64_sys_call+0x1690/0x2dc0 [ 185.105280][T12467] do_syscall_64+0xc9/0x1c0 [ 185.109791][T12467] ? clear_bhb_loop+0x55/0xb0 [ 185.114506][T12467] ? clear_bhb_loop+0x55/0xb0 [ 185.119197][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.125097][T12467] RIP: 0033:0x7f3c07b45d29 [ 185.129499][T12467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.149098][T12467] RSP: 002b:00007f3c061b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.157499][T12467] RAX: ffffffffffffffda RBX: 00007f3c07d35fa0 RCX: 00007f3c07b45d29 [ 185.165531][T12467] RDX: 0000000020000800 RSI: 0000000000008923 RDI: 0000000000000006 [ 185.173491][T12467] RBP: 00007f3c061b1090 R08: 0000000000000000 R09: 0000000000000000 [ 185.181450][T12467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.189449][T12467] R13: 0000000000000000 R14: 00007f3c07d35fa0 R15: 00007ffdbc4d2df8 [ 185.197417][T12467] [ 185.243992][T11101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.368594][T12484] netlink: '+}[@': attribute type 10 has an invalid length. [ 185.447375][T12495] 9pnet_fd: Insufficient options for proto=fd [ 185.973866][T12520] netlink: '+}[@': attribute type 10 has an invalid length. [ 186.070972][T12534] 9pnet_fd: Insufficient options for proto=fd [ 186.251344][T12552] netlink: '+}[@': attribute type 10 has an invalid length. [ 186.359887][ T29] kauditd_printk_skb: 704 callbacks suppressed [ 186.359901][ T29] audit: type=1400 audit(1734534464.665:20089): avc: denied { ioctl } for pid=12564 comm="syz.8.2600" path="socket:[35223]" dev="sockfs" ino=35223 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.395365][T12563] 9pnet_fd: Insufficient options for proto=fd [ 186.416192][ T29] audit: type=1400 audit(1734534464.665:20090): avc: denied { bind } for pid=12560 comm="syz.6.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.435849][ T29] audit: type=1400 audit(1734534464.665:20091): avc: denied { accept } for pid=12560 comm="syz.6.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.436500][T12565] lo speed is unknown, defaulting to 1000 [ 186.455748][ T29] audit: type=1326 audit(1734534464.705:20092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f31a4145d29 code=0x7ffc0000 [ 186.484990][ T29] audit: type=1326 audit(1734534464.715:20093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.6.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 186.508903][ T29] audit: type=1326 audit(1734534464.715:20094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.6.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 186.532682][ T29] audit: type=1326 audit(1734534464.715:20095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.6.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 186.556336][ T29] audit: type=1326 audit(1734534464.715:20096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.6.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 186.579966][ T29] audit: type=1326 audit(1734534464.715:20097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.6.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 186.603567][ T29] audit: type=1326 audit(1734534464.715:20098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.6.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f83d5b95d29 code=0x7ffc0000 [ 186.635860][T12574] loop9: detected capacity change from 0 to 128 [ 186.651914][T12574] EXT4-fs: Ignoring removed nobh option [ 186.679197][T12574] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.698000][T12574] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.710268][T12581] netlink: '+}[@': attribute type 10 has an invalid length. [ 186.929042][T11101] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.947273][T12606] syz_tun: entered promiscuous mode [ 186.953739][T12606] syz_tun: left promiscuous mode [ 187.046136][T12610] netlink: '+}[@': attribute type 10 has an invalid length. [ 187.054575][T12608] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2617'. [ 187.097495][T12614] syz.5.2620[12614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.097627][T12614] syz.5.2620[12614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.108878][T12608] lo speed is unknown, defaulting to 1000 [ 187.149602][T12614] syz.5.2620[12614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.326636][T12623] 9pnet_fd: Insufficient options for proto=fd [ 187.552883][T12639] lo speed is unknown, defaulting to 1000 [ 187.736442][T12624] lo speed is unknown, defaulting to 1000 [ 187.817671][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.869401][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.918201][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.962411][T12662] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2634'. [ 187.975439][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.991895][T12624] chnl_net:caif_netlink_parms(): no params data found [ 188.089215][T12624] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.096335][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.109239][T12624] bridge_slave_0: entered allmulticast mode [ 188.116502][T12624] bridge_slave_0: entered promiscuous mode [ 188.123596][T12624] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.130824][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.138149][T12624] bridge_slave_1: entered allmulticast mode [ 188.144693][T12624] bridge_slave_1: entered promiscuous mode [ 188.151159][ T50] bridge_slave_1: left allmulticast mode [ 188.156975][ T50] bridge_slave_1: left promiscuous mode [ 188.162595][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.183749][ T50] bridge_slave_0: left allmulticast mode [ 188.189420][ T50] bridge_slave_0: left promiscuous mode [ 188.195044][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.263286][ T50] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 188.287599][T12674] netlink: '+}[@': attribute type 10 has an invalid length. [ 188.346602][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.356520][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.366041][ T50] bond0 (unregistering): Released all slaves [ 188.385471][T12624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.397914][T12624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.431355][T12679] FAULT_INJECTION: forcing a failure. [ 188.431355][T12679] name failslab, interval 1, probability 0, space 0, times 0 [ 188.444094][T12679] CPU: 0 UID: 0 PID: 12679 Comm: syz.8.2639 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 188.454943][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 188.465042][T12679] Call Trace: [ 188.468322][T12679] [ 188.471266][T12679] dump_stack_lvl+0xf2/0x150 [ 188.475954][T12679] dump_stack+0x15/0x1a [ 188.480135][T12679] should_fail_ex+0x223/0x230 [ 188.484902][T12679] should_failslab+0x8f/0xb0 [ 188.489502][T12679] kmem_cache_alloc_noprof+0x52/0x320 [ 188.494977][T12679] ? getname_flags+0x81/0x3b0 [ 188.499772][T12679] getname_flags+0x81/0x3b0 [ 188.504296][T12679] user_path_at+0x26/0x120 [ 188.508728][T12679] __se_sys_mount+0x248/0x2d0 [ 188.513442][T12679] __x64_sys_mount+0x67/0x80 [ 188.518065][T12679] x64_sys_call+0x2c84/0x2dc0 [ 188.522769][T12679] do_syscall_64+0xc9/0x1c0 [ 188.527284][T12679] ? clear_bhb_loop+0x55/0xb0 [ 188.532039][T12679] ? clear_bhb_loop+0x55/0xb0 [ 188.536735][T12679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.542666][T12679] RIP: 0033:0x7f3c07b45d29 [ 188.547095][T12679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.566774][T12679] RSP: 002b:00007f3c061b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.575246][T12679] RAX: ffffffffffffffda RBX: 00007f3c07d35fa0 RCX: 00007f3c07b45d29 [ 188.583281][T12679] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 188.591241][T12679] RBP: 00007f3c061b1090 R08: 0000000020000400 R09: 0000000000000000 [ 188.599212][T12679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.607173][T12679] R13: 0000000000000000 R14: 00007f3c07d35fa0 R15: 00007ffdbc4d2df8 [ 188.615172][T12679] [ 188.653350][T12624] team0: Port device team_slave_0 added [ 188.660283][T12624] team0: Port device team_slave_1 added [ 188.704275][ T50] hsr_slave_0: left promiscuous mode [ 188.732110][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.739725][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.759295][T12691] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2644'. [ 188.769776][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.777271][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.805127][ T50] veth1_macvtap: left promiscuous mode [ 188.810687][ T50] veth0_macvtap: left promiscuous mode [ 188.816232][T12693] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 188.826894][ T50] veth1_vlan: left promiscuous mode [ 188.832117][ T50] veth0_vlan: left promiscuous mode [ 188.863701][T12693] siw: device registration error -23 [ 188.875811][T12693] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2645'. [ 188.949461][ T50] team0 (unregistering): Port device team_slave_1 removed [ 188.960637][ T50] team0 (unregistering): Port device team_slave_0 removed [ 189.040620][ T6101] lo speed is unknown, defaulting to 1000 [ 189.047180][T12624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.054466][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.080630][T12624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.119125][T12624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.126141][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.152126][T12624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.192471][T12624] hsr_slave_0: entered promiscuous mode [ 189.214151][T12624] hsr_slave_1: entered promiscuous mode [ 189.297515][T12726] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2655'. [ 189.368514][T12735] netlink: '+}[@': attribute type 10 has an invalid length. [ 189.657436][T12624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.677813][T12624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.694020][T12624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.715072][T12624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.813181][T12624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.833804][T12763] loop9: detected capacity change from 0 to 128 [ 189.842827][T12624] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.850345][T12763] EXT4-fs: Ignoring removed nobh option [ 189.866518][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.873580][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.896521][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.903578][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.919523][T12763] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.011662][T12763] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.117991][T12785] loop6: detected capacity change from 0 to 1024 [ 190.127689][T12624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.144914][T12785] EXT4-fs: Ignoring removed nobh option [ 190.150503][T12785] EXT4-fs: Ignoring removed bh option [ 190.174268][T11101] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.228696][T12785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.339614][T12802] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 190.354636][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.373349][T12624] veth0_vlan: entered promiscuous mode [ 190.398636][T12624] veth1_vlan: entered promiscuous mode [ 190.437622][T12802] lo speed is unknown, defaulting to 1000 [ 190.445221][T12624] veth0_macvtap: entered promiscuous mode [ 190.451442][T12822] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2666'. [ 190.469977][T12624] veth1_macvtap: entered promiscuous mode [ 190.471106][T12815] netlink: '+}[@': attribute type 10 has an invalid length. [ 190.484095][T12802] lo speed is unknown, defaulting to 1000 [ 190.492861][T12819] syz.6.2667[12819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.492973][T12819] syz.6.2667[12819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.506409][T12802] lo speed is unknown, defaulting to 1000 [ 190.510243][T12819] syz.6.2667[12819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.525664][T12624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.547519][T12624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.557447][T12624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.558462][T12802] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 190.567856][T12624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.567872][T12624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.595234][T12624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.617505][T12624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.634609][T12624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.645108][T12624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.655065][T12624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.665731][T12624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.675612][T12624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.686206][T12624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.697333][T12624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.706848][T12624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.715591][T12624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.724438][T12624] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.733144][T12624] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.751693][T12802] lo speed is unknown, defaulting to 1000 [ 190.758066][T12802] lo speed is unknown, defaulting to 1000 [ 190.784034][T12830] netlink: '+}[@': attribute type 10 has an invalid length. [ 190.793044][T12802] lo speed is unknown, defaulting to 1000 [ 190.815768][T12802] lo speed is unknown, defaulting to 1000 [ 190.854685][T12802] lo speed is unknown, defaulting to 1000 [ 190.864713][T12802] lo speed is unknown, defaulting to 1000 [ 190.914349][T12847] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2676'. [ 191.154261][T12860] syz.8.2680[12860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.154325][T12860] syz.8.2680[12860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.203220][T12860] syz.8.2680[12860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.233048][T12863] loop9: detected capacity change from 0 to 512 [ 191.295205][T12863] EXT4-fs: Ignoring removed i_version option [ 191.313756][T12863] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 191.346655][T12863] EXT4-fs (loop9): 1 truncate cleaned up [ 191.352623][T12863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.393239][T12871] loop8: detected capacity change from 0 to 512 [ 191.407132][T12871] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.416391][T12871] EXT4-fs (loop8): ea_inode feature is not supported for Hurd [ 191.436243][T12871] loop8: detected capacity change from 0 to 512 [ 191.514665][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 191.514682][ T29] audit: type=1400 audit(1734534469.735:20618): avc: denied { watch watch_reads } for pid=12862 comm="syz.9.2683" path="/92/bus" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.553856][T12871] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 191.582871][ T29] audit: type=1400 audit(1734534469.885:20619): avc: denied { write } for pid=12862 comm="syz.9.2683" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.604954][ T29] audit: type=1400 audit(1734534469.885:20620): avc: denied { add_name } for pid=12862 comm="syz.9.2683" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.625762][ T29] audit: type=1400 audit(1734534469.885:20621): avc: denied { create } for pid=12862 comm="syz.9.2683" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 191.651847][T12871] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 191.673782][T12871] EXT4-fs (loop8): 1 truncate cleaned up [ 191.679913][T12871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.697502][ T29] audit: type=1400 audit(1734534470.005:20622): avc: denied { mount } for pid=12869 comm="syz.8.2685" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 191.719538][ T29] audit: type=1400 audit(1734534470.005:20623): avc: denied { read write } for pid=12869 comm="syz.8.2685" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.743771][ T29] audit: type=1400 audit(1734534470.005:20624): avc: denied { open } for pid=12869 comm="syz.8.2685" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.769945][ T29] audit: type=1400 audit(1734534470.085:20625): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 191.770298][T12871] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2685'. [ 191.792133][ T29] audit: type=1400 audit(1734534470.085:20626): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.801198][T12871] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2685'. [ 191.832130][ T29] audit: type=1400 audit(1734534470.085:20627): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.907539][T11101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.091683][T12896] syz.1.2695[12896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.227936][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.387042][T12908] loop6: detected capacity change from 0 to 512 [ 192.404177][T12908] EXT4-fs: Ignoring removed i_version option [ 192.414057][T12908] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 192.448715][T12908] EXT4-fs (loop6): 1 truncate cleaned up [ 192.455447][T12911] netlink: '+}[@': attribute type 10 has an invalid length. [ 192.463146][T12908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.596607][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.663872][T12919] program syz.6.2704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.708601][T12919] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 192.729513][T12924] loop6: detected capacity change from 0 to 512 [ 192.738986][T12923] ip6gre1: entered allmulticast mode [ 192.747057][T12924] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 192.782192][T12924] EXT4-fs (loop6): orphan cleanup on readonly fs [ 192.795248][T12924] EXT4-fs (loop6): 1 truncate cleaned up [ 192.811392][T12924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.855508][T12919] smc: net device bond0 applied user defined pnetid SYZ0 [ 192.890916][T12919] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 192.994345][ T4214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.177420][T12940] netlink: '+}[@': attribute type 10 has an invalid length. [ 193.263728][T12950] loop8: detected capacity change from 0 to 128 [ 193.277545][T12950] EXT4-fs: Ignoring removed nobh option [ 193.300424][T12950] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.323969][T12950] ext4 filesystem being mounted at /504/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.333490][T12954] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 193.427069][ T4439] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.464192][T12948] lo speed is unknown, defaulting to 1000 [ 193.491923][T12954] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2716'. [ 193.666831][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2719'. [ 194.463921][T12996] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 194.483524][T12995] lo speed is unknown, defaulting to 1000 [ 194.505149][T12996] siw: device registration error -23 [ 194.522458][T12996] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2734'. [ 194.550575][T12998] program syz.5.2735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.562870][T12998] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 194.778145][T13022] loop8: detected capacity change from 0 to 1024 [ 194.815518][T13022] EXT4-fs: Ignoring removed nobh option [ 194.821129][T13022] EXT4-fs: Ignoring removed bh option [ 194.866284][T13022] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.902051][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.966955][T13039] bpf_get_probe_write_proto: 2 callbacks suppressed [ 194.966996][T13039] syz.8.2754[13039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.977910][T13039] syz.8.2754[13039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.989887][T13039] syz.8.2754[13039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.991309][T13041] loop6: detected capacity change from 0 to 2048 [ 195.156143][T13041] ext4: Unknown parameter 'subj_user' [ 195.427892][T13041] loop6: detected capacity change from 0 to 8192 [ 195.589927][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2759'. [ 195.813223][T13076] lo speed is unknown, defaulting to 1000 [ 195.854567][T13081] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2767'. [ 195.893479][T13082] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 195.915002][T13081] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2767'. [ 195.923964][T13081] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2767'. [ 196.052658][T13076] siw: device registration error -23 [ 196.077521][T13076] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2764'. [ 196.901774][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 196.901788][ T29] audit: type=1400 audit(1734534475.205:21260): avc: denied { read } for pid=13118 comm="syz.8.2781" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.956162][ T29] audit: type=1400 audit(1734534475.225:21261): avc: denied { open } for pid=13118 comm="syz.8.2781" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.980304][ T29] audit: type=1400 audit(1734534475.255:21262): avc: denied { write } for pid=13113 comm="syz.9.2780" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.004308][ T29] audit: type=1326 audit(1734534475.295:21263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.9.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5ec05d29 code=0x7ffc0000 [ 197.027905][ T29] audit: type=1326 audit(1734534475.295:21264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.9.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5ec05d29 code=0x7ffc0000 [ 197.051623][ T29] audit: type=1326 audit(1734534475.295:21265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.9.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efd5ec05d29 code=0x7ffc0000 [ 197.075451][ T29] audit: type=1400 audit(1734534475.345:21266): avc: denied { mounton } for pid=13125 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 197.097177][ T29] audit: type=1400 audit(1734534475.385:21267): avc: denied { sys_module } for pid=13125 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 197.159472][ T29] audit: type=1326 audit(1734534475.465:21268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.9.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5ec05d29 code=0x7ffc0000 [ 197.187381][ T29] audit: type=1326 audit(1734534475.495:21269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13122 comm="syz.9.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7efd5ec05d29 code=0x7ffc0000 [ 197.212181][T13136] syz.1.2785[13136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.212244][T13136] syz.1.2785[13136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.224463][T13136] syz.1.2785[13136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.308298][T13125] lo speed is unknown, defaulting to 1000 [ 197.405741][T13149] FAULT_INJECTION: forcing a failure. [ 197.405741][T13149] name failslab, interval 1, probability 0, space 0, times 0 [ 197.418664][T13149] CPU: 1 UID: 0 PID: 13149 Comm: syz.9.2790 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 197.429437][T13149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 197.439501][T13149] Call Trace: [ 197.442789][T13149] [ 197.445724][T13149] dump_stack_lvl+0xf2/0x150 [ 197.450413][T13149] dump_stack+0x15/0x1a [ 197.454602][T13149] should_fail_ex+0x223/0x230 [ 197.459281][T13149] should_failslab+0x8f/0xb0 [ 197.463891][T13149] __kmalloc_node_noprof+0xad/0x410 [ 197.469097][T13149] ? kstrtouint+0x77/0xc0 [ 197.473435][T13149] ? __kvmalloc_node_noprof+0x72/0x170 [ 197.478975][T13149] __kvmalloc_node_noprof+0x72/0x170 [ 197.484313][T13149] file_tty_write+0x1a9/0x680 [ 197.488995][T13149] tty_write+0x28/0x30 [ 197.493107][T13149] vfs_write+0x77f/0x920 [ 197.497392][T13149] ? __pfx_tty_write+0x10/0x10 [ 197.502158][T13149] ksys_write+0xe8/0x1b0 [ 197.506473][T13149] __x64_sys_write+0x42/0x50 [ 197.511056][T13149] x64_sys_call+0x287e/0x2dc0 [ 197.515721][T13149] do_syscall_64+0xc9/0x1c0 [ 197.520269][T13149] ? clear_bhb_loop+0x55/0xb0 [ 197.524956][T13149] ? clear_bhb_loop+0x55/0xb0 [ 197.529623][T13149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.535514][T13149] RIP: 0033:0x7efd5ec05d29 [ 197.539918][T13149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.559574][T13149] RSP: 002b:00007efd5d271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.568065][T13149] RAX: ffffffffffffffda RBX: 00007efd5edf5fa0 RCX: 00007efd5ec05d29 [ 197.576066][T13149] RDX: 00000000fffffe28 RSI: 00000000200000c0 RDI: 0000000000000004 [ 197.584041][T13149] RBP: 00007efd5d271090 R08: 0000000000000000 R09: 0000000000000000 [ 197.592014][T13149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.599975][T13149] R13: 0000000000000000 R14: 00007efd5edf5fa0 R15: 00007ffe1c2aeee8 [ 197.607970][T13149] [ 197.626382][T13154] loop8: detected capacity change from 0 to 512 [ 197.638727][T13154] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.647985][T13154] EXT4-fs (loop8): ea_inode feature is not supported for Hurd [ 197.671011][T13125] chnl_net:caif_netlink_parms(): no params data found [ 197.720741][T13154] loop8: detected capacity change from 0 to 512 [ 197.753242][T13154] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 197.772160][ T3545] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.782576][ T3545] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.829290][T13125] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.829613][T13154] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 197.836591][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.857957][T13125] bridge_slave_0: entered allmulticast mode [ 197.864455][T13125] bridge_slave_0: entered promiscuous mode [ 197.869427][T13154] EXT4-fs (loop8): 1 truncate cleaned up [ 197.871371][T13125] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.883372][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.883482][T13154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.890693][T13125] bridge_slave_1: entered allmulticast mode [ 197.909290][T13125] bridge_slave_1: entered promiscuous mode [ 197.931725][T13154] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2791'. [ 197.940743][T13154] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2791'. [ 198.037072][ T3545] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.047464][ T3545] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.073667][T13171] loop9: detected capacity change from 0 to 512 [ 198.104795][T13171] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.113874][T13171] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 198.126756][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.130310][T13171] loop9: detected capacity change from 0 to 512 [ 198.149487][ T3545] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.153164][T13171] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 198.159850][ T3545] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.205746][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.222073][T13171] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 198.237996][T13125] team0: Port device team_slave_0 added [ 198.246148][T13171] EXT4-fs (loop9): 1 truncate cleaned up [ 198.252059][T13171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.275142][T13125] team0: Port device team_slave_1 added [ 198.296920][ T4439] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.311943][ T3545] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.322252][ T3545] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.447863][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.454891][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.480808][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.510567][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.517547][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.543589][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.587245][T13183] syz.6.2799[13183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.587360][T13183] syz.6.2799[13183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.601430][T13183] syz.6.2799[13183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.625739][ T3545] bridge_slave_1: left allmulticast mode [ 198.642802][ T3545] bridge_slave_1: left promiscuous mode [ 198.648585][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.712679][ T3545] bridge_slave_0: left allmulticast mode [ 198.718383][ T3545] bridge_slave_0: left promiscuous mode [ 198.724088][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.754558][T13192] Driver unsupported XDP return value 0 on prog (id 2272) dev N/A, expect packet loss! [ 198.782889][T13198] netlink: '+}[@': attribute type 10 has an invalid length. [ 198.924726][ T3545] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 199.057972][T11101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.090365][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.101550][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.176552][ T3545] bond0 (unregistering): Released all slaves [ 199.357665][T13125] hsr_slave_0: entered promiscuous mode [ 199.435767][T13125] hsr_slave_1: entered promiscuous mode [ 199.470877][T13220] loop9: detected capacity change from 0 to 512 [ 199.482898][T13125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.515038][T13220] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.524116][T13220] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 199.541862][T13125] Cannot create hsr debugfs directory [ 199.566880][ T3545] hsr_slave_0: left promiscuous mode [ 199.582851][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.590349][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.624904][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.632358][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.658538][T13220] loop9: detected capacity change from 0 to 512 [ 199.675330][ T3545] veth1_macvtap: left promiscuous mode [ 199.680838][ T3545] veth0_macvtap: left promiscuous mode [ 199.686357][ T3545] veth1_vlan: left promiscuous mode [ 199.691578][ T3545] veth0_vlan: left promiscuous mode [ 199.699204][T13220] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 199.728290][T13220] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 199.772386][T13220] EXT4-fs (loop9): 1 truncate cleaned up [ 199.781515][T13232] syz.1.2811[13232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.788498][T13220] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.862111][ T3545] infiniband syz1: set down [ 199.887615][T13220] __nla_validate_parse: 3 callbacks suppressed [ 199.887630][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2807'. [ 199.902863][T13220] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2807'. [ 200.054739][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 200.075092][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 200.093922][ T3383] smc: removing ib device syz1 [ 200.305631][T11101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.451025][T13254] lo speed is unknown, defaulting to 1000 [ 200.494781][T13262] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 200.517844][T13258] netlink: '+}[@': attribute type 10 has an invalid length. [ 200.546372][T13265] loop9: detected capacity change from 0 to 512 [ 200.563185][ T3288] ================================================================== [ 200.571284][ T3288] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 200.578662][ T3288] [ 200.580977][ T3288] write to 0xffff8881004c29ae of 1 bytes by task 13265 on cpu 1: [ 200.588678][ T3288] set_blocksize+0x215/0x270 [ 200.593263][ T3288] sb_set_blocksize+0x2c/0xb0 [ 200.597928][ T3288] ext4_fill_super+0xdca/0x3a10 [ 200.602774][ T3288] get_tree_bdev_flags+0x29f/0x310 [ 200.607880][ T3288] get_tree_bdev+0x1f/0x30 [ 200.612288][ T3288] ext4_get_tree+0x1c/0x30 [ 200.616699][ T3288] vfs_get_tree+0x56/0x1e0 [ 200.621107][ T3288] do_new_mount+0x227/0x690 [ 200.625600][ T3288] path_mount+0x49b/0xb30 [ 200.629919][ T3288] __se_sys_mount+0x27c/0x2d0 [ 200.634590][ T3288] __x64_sys_mount+0x67/0x80 [ 200.639171][ T3288] x64_sys_call+0x2c84/0x2dc0 [ 200.643836][ T3288] do_syscall_64+0xc9/0x1c0 [ 200.648327][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.654226][ T3288] [ 200.656539][ T3288] read to 0xffff8881004c29ae of 1 bytes by task 3288 on cpu 0: [ 200.664070][ T3288] do_mpage_readpage+0x55/0xcb0 [ 200.668929][ T3288] mpage_readahead+0x1ad/0x2d0 [ 200.673692][ T3288] blkdev_readahead+0x1c/0x30 [ 200.678366][ T3288] read_pages+0xa0/0x540 [ 200.682598][ T3288] page_cache_ra_unbounded+0x2b8/0x310 [ 200.688046][ T3288] page_cache_sync_ra+0x252/0x670 [ 200.693061][ T3288] filemap_get_pages+0x2c1/0x10e0 [ 200.698075][ T3288] filemap_read+0x221/0x6a0 [ 200.702568][ T3288] blkdev_read_iter+0x20e/0x2c0 [ 200.707409][ T3288] vfs_read+0x5dc/0x700 [ 200.711555][ T3288] ksys_read+0xe8/0x1b0 [ 200.715701][ T3288] __x64_sys_read+0x42/0x50 [ 200.720195][ T3288] x64_sys_call+0x2874/0x2dc0 [ 200.724860][ T3288] do_syscall_64+0xc9/0x1c0 [ 200.729351][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.735245][ T3288] [ 200.737552][ T3288] value changed: 0x0a -> 0x0c [ 200.742209][ T3288] [ 200.744516][ T3288] Reported by Kernel Concurrency Sanitizer on: [ 200.750657][ T3288] CPU: 0 UID: 0 PID: 3288 Comm: udevd Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 200.760915][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 200.770960][ T3288] ================================================================== [ 200.815985][T13262] siw: device registration error -23 [ 200.843566][T13262] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2817'. [ 200.865355][T13265] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.874535][T13265] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 200.895140][ T3545] IPVS: stop unused estimator thread 0... [ 200.943963][T13265] loop9: detected capacity change from 0 to 512 [ 200.978833][T13265] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 201.000780][T13265] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 201.036723][T13265] EXT4-fs (loop9): 1 truncate cleaned up [ 201.049145][T13265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.068630][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2819'. [ 201.077645][T13265] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2819'. [ 201.229250][T13125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.254479][T13125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.273208][T13125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.292716][T13125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.332375][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.343390][T13125] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.362857][T13125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.373243][T13125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.388079][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.395153][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.404335][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.411481][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.480293][T13125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.530097][T11101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.682752][T13125] veth0_vlan: entered promiscuous mode [ 201.692132][T13125] veth1_vlan: entered promiscuous mode [ 201.709464][T13125] veth0_macvtap: entered promiscuous mode [ 201.716652][T13125] veth1_macvtap: entered promiscuous mode [ 201.726571][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.737264][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.747232][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.757867][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.767737][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.778270][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.788785][T13125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.797112][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.807741][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.817596][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.828119][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.837990][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.848460][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.858792][T13125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.870293][T13125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.879088][T13125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.887915][T13125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.896680][T13125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.916703][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 201.916716][ T29] audit: type=1400 audit(1734534480.225:21542): avc: denied { mounton } for pid=13125 comm="syz-executor" path="/root/syzkaller.rKThlk/syz-tmp" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 201.948594][ T29] audit: type=1400 audit(1734534480.225:21543): avc: denied { mount } for pid=13125 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 201.971034][ T29] audit: type=1400 audit(1734534480.225:21544): avc: denied { mount } for pid=13125 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 201.993280][ T29] audit: type=1400 audit(1734534480.225:21545): avc: denied { mounton } for pid=13125 comm="syz-executor" path="/root/syzkaller.rKThlk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 202.020261][ T29] audit: type=1400 audit(1734534480.225:21546): avc: denied { mounton } for pid=13125 comm="syz-executor" path="/root/syzkaller.rKThlk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 202.048207][ T29] audit: type=1400 audit(1734534480.255:21547): avc: denied { mounton } for pid=13125 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 202.071324][ T29] audit: type=1400 audit(1734534480.255:21548): avc: denied { mount } for pid=13125 comm="syz-executor" name="/" dev="gadgetfs" ino=3647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 202.097421][ T29] audit: type=1400 audit(1734534480.255:21549): avc: denied { write } for pid=13125 comm="syz-executor" name="pids.max" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 202.124216][ T29] audit: type=1400 audit(1734534480.255:21550): avc: denied { open } for pid=13125 comm="syz-executor" path="/syzcgroup/unified/syz5/pids.max" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0"