last executing test programs: 2m35.757184691s ago: executing program 32 (id=1): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) memfd_secret(0x80000) 2m35.166612019s ago: executing program 33 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000700)=0x13) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0xfbfffff7, 0x401, 0xd, 0xf7d, 0x15, "010100000000000000000500"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x53) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) 2m35.006164418s ago: executing program 34 (id=5): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 2m34.556472547s ago: executing program 35 (id=2): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x4eb, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180), 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) socket$kcm(0x2, 0x5, 0x84) fallocate(r4, 0x8, 0x0, 0x8000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r6, 0xee72) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) 2m29.155636233s ago: executing program 7 (id=16): set_mempolicy(0x2, &(0x7f0000000000), 0x4) r0 = memfd_secret(0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x6c82, 0x4, 0x7, 0x5, 0x4, 0x5, 0x2}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x3, 0x30}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x2, 0xffffffff, 0x60, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7, 0x51e9905a, 0x7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x98, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x52fb, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x9e, 0x7, 0xf, 0xa, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x7, 0xf6, &(0x7f0000000340)=""/246, 0x41100, 0x11, '\x00', r4, @cgroup_sock=0xd, r0, 0x8, &(0x7f0000000500)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r0, 0x0, &(0x7f0000000880)=[r6], 0x0, 0x10, 0x7fff, @void, @value}, 0x94) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x8) readv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/91, 0x5b}, {&(0x7f0000000a80)=""/14, 0xe}, {&(0x7f0000000ac0)=""/204, 0xcc}], 0x3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000c00)={0x3, 0x3, "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"}) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000d40)={0x4, 0x2}) getresuid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r8, &(0x7f0000000e40)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000ec0)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002080)={r0, 0x0, 0x2d, 0x1000, &(0x7f0000000f00)="55a6257206376bfe76cee0acfd83154aa2f12555551a20a5d612630ee143917394f1514d2624e306266dd4a2cc", &(0x7f0000000f40)=""/4096, 0x0, 0x0, 0xf8, 0x13, &(0x7f0000001f40)="8277c3edef0712105a8ef3cf367b1110928677eb0bf98d459954fa7bec3a28a2bb4bd784acc40526584a2dd9e6621eec6d91482331374972c76c05f15cacc2d85c02264874ae09bc79d0f0eab027917618863059362c7b27f7a4f6543143ca7cb8a26f47b649f49cd4b3504808d1aec4ae3bf9100bfa2efca3ec430eb6f91901a86bd5f845fdb5227544625618c8f5cbecb462d8cf046f5a463ed7ce29bb603bbf637bdb5088f07c6676ea555e161cc9520a3b04e33397744ca4523b2b0926a92ab1111cf8c9d8fbc6ad1216aaf40b2e2548d566468f35404202f3202cce9e598dfb4616543e68b7ca4128d79066deebccc3b7bd7a48d27b", &(0x7f0000002040)="9ddfe96d84abad0e5e2d3c3478556402578efe", 0x4, 0x0, 0x897}, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002100)={@in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}}, 0x0, 0x0, 0x38, 0x0, "d06edf40766617a2f8df1469f465028c39a2575dea60f65dcacd8df413b7dfbe4134090977ecf7cfe6bbf3f7aac674ffd136640a9999079d31b06f54c3457ff617f082819778af028f405b445d7057f6"}, 0xd8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x4, &(0x7f0000002200)=@raw=[@ldst={0x1, 0x1, 0x4, 0xd, 0x5, 0x10, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000002240)='syzkaller\x00', 0x8000, 0xa, &(0x7f0000002280)=""/10, 0x41100, 0xea16b9195fd87c7e, '\x00', r4, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=[r0], 0x0, 0x10, 0x1, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f00000023c0)={0xd0, r7, 0x2, {0x5, 0xffffffffffff8000}, 0xae}, 0x1) r10 = getpgid(0xffffffffffffffff) sched_setscheduler(r10, 0x0, &(0x7f0000002400)=0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000002440)={{0x2, 0x2, 0xed, 0x2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002480)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000002600)={&(0x7f00000024c0)={0x1d, r11, 0x3, {0x0, 0xff, 0x4}, 0x1}, 0x18, &(0x7f00000025c0)={&(0x7f0000002500)="8633ccb964d5ab95a4ba20e604135c32a3d537b5394be4ba67bfd84633ddc95115f2e4340ba31bab2d72a4e0134d7f7c9eea5122d1b40f4dc2540d89b2f9bd1adaab3a145234c318f5f96a702fb2a4878e955b4bf955b3839f7bb4873652afc8ed5ac83fc84ea41b50512a095d1afa145adc812e133dd4895f0cf1fbfbc5ac6878fa66ab70ad91a7d93dc772406843c19f63673cfd30", 0x96}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x26280) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r12, 0x4040534e, &(0x7f0000002680)={0x0, @time={0x9, 0x9}, 0xbf, {0xf7, 0xf5}, 0x3, 0x1}) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1) 2m28.320755441s ago: executing program 7 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff4, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x101, 0x54e7}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x9, 0x6}}, @TCA_NETEM_RATE={0x14, 0x6, {0xffffffff, 0x9, 0x0, 0x7}}]}}}]}, 0x6c}}, 0x40044) 2m28.228195201s ago: executing program 7 (id=48): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m28.08900605s ago: executing program 7 (id=49): getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0xf65e477cde8f6976) 2m26.737372546s ago: executing program 7 (id=74): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6000000000283b"], 0x0) 2m26.664950076s ago: executing program 36 (id=74): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6000000000283b"], 0x0) 2m14.673935086s ago: executing program 6 (id=283): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0)) 2m14.612425066s ago: executing program 6 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 2m14.465759745s ago: executing program 6 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fe0000ff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m14.274095974s ago: executing program 6 (id=289): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x127f, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000100)='.\x00', 0x24000420) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, &(0x7f0000000180), 0x2245080, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod(&(0x7f0000000280)='./bus\x00', 0x800, 0xb6c) statx(r0, &(0x7f0000000340)='./bus/file0\x00', 0x100, 0xa1, &(0x7f0000000680)) 2m14.094545264s ago: executing program 6 (id=295): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 2m13.688979413s ago: executing program 6 (id=310): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES32=r0], 0x0) 2m13.688779153s ago: executing program 37 (id=310): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES32=r0], 0x0) 2m0.040560548s ago: executing program 8 (id=609): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 2m0.008390848s ago: executing program 8 (id=610): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0xfe}, {0x6, 0xff}]}) 1m59.940428948s ago: executing program 8 (id=612): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@user_xattr}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000240)={0x0, 0xfb, 0x39, 0x1, 0x6, "45d47a403afe996132a5a151a540c09f", "37d3eef8df3a0eefe8855196ed28532656e517de590bfd7567612e3474c7537a7e213ff2"}, 0x39, 0x2) 1m59.778701348s ago: executing program 8 (id=618): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000001100), 0x0, 0xc004, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x20044e, &(0x7f0000000440), 0x6, 0x463, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x140) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) getdents64(r0, 0x0, 0x2000) 1m59.481138027s ago: executing program 8 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x24000040) 1m59.107714876s ago: executing program 8 (id=630): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES32=r1, @ANYRES64], 0x0) 1m59.107527696s ago: executing program 38 (id=630): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES32=r1, @ANYRES64], 0x0) 47.676852902s ago: executing program 3 (id=2602): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='scmi_xfer_begin\x00', r4, 0x0, 0x100304}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r5) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd9300fbdbdf252300000005002100020000005b96ca6f6872dcc60fd677e588c6c99e38fb5c3102b6a1e5fd409a2bcbf0adac00000000"], 0x1c}}, 0x4010) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r7, @ANYRES16=r0], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20048040) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000440)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='fsi_master_acf_send_request\x00', r10}, 0x18) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r11, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x1, 0x10, 0x3, 0x81}, &(0x7f0000000500)=0x18) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 47.640899902s ago: executing program 3 (id=2604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x6200, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef) 47.602802742s ago: executing program 3 (id=2605): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x1, @broadcast, 'bond_slave_1\x00'}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2e, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000002c0)={@remote, @local, 0x0}, &(0x7f0000000300)=0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex=r4, r1, 0x1, 0x0, 0x0, @void, @value=r1, @void, @void, r3}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x96, 0xa, 0x8, 0x17e0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0xbe, &(0x7f0000000440)=""/190, 0x41100, 0x38, '\x00', 0x0, @fallback=0x2d, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x8, 0x0, 0x9}, 0x10, r6, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000005c0)=[{0x5, 0x1, 0xb, 0xa}, {0x2, 0x4, 0x2, 0x4}, {0x3, 0x2, 0x10, 0x2}, {0x1, 0x5, 0x7, 0x6}], 0x10, 0x0, @void, @value}, 0x94) r7 = open(&(0x7f00000006c0)='./file0\x00', 0x1, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x9, 0x0, r7, 0x8, '\x00', r4, r1, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) write$P9_RRENAME(r7, &(0x7f0000000780)={0x7, 0x15, 0x1}, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={&(0x7f00000007c0)="4cbd1d06ae97535513b48db542f8d0699b1c36245cc84e2585143e0f571faeefbf31d4876d79a8f3b87dc55562a52aba0b32f74cd0a045971a15fcd8b475bd6084ebc5b59495101147c2d9f923ee0375389b54f267584606824c7f688791c19a1de8cb3d5a7d8ffe4655d748e8eeb6ea0030a8cca6ae3ed5b634ae72c162fe6ab991d4e9abe1bce8801c5da618d72dbbd2993b2a6d45aadb926f438faafb5eb8c014", &(0x7f0000000880)=""/9, &(0x7f00000008c0)="7441267db6b788f690d95893151521721f8df09cd9dc5ad6445048cf71d75889b0440839a14b301ff882ad567effebfe9add84aa98746377b3ab4206c87a48caf80503ad43796481f6dbe2772225f9de1a01b7f58e2fe43327462d9e3ed73067309e8c36e205f9ac7d5877eb2d941e5996af53630e21b7dfd6b1bb1d0469d854895a858a95072fea4146a19347eeee4b84ddff6267e01fb58dac1886283e6f051cf695a407acbc8aa4a22029983cd76a541ba93a3e131e9739f26a13fbdf5a9026ea5351508f5914b0023424c70cbef9633c01e3fbb764b1bfb467d675484d2686824ecdba12376220116b744e", &(0x7f00000009c0)="4d6c68dd775cdb18a7d29a83e5555c9e2df37ca23e78d4971cf85c963dcf26ba06e37c67a2cd1892a09308564078d1efc40953a56ccd153bc10c3ecee765fa32ee210367752f3b16cffb728ce3e2ce2f5e545e0076e84f8f5c50d9c947c8dc0acb9ad40270c1b42fd8f4073cde2095a09da37197153511c0607a20bc9aa524c92605f04bd6938d7be6432721712dfbe9c86ee08a0d555b37c675cf4e799a7b49c1339d07fcf5416d88206cf367", 0x69, r1}, 0x38) r8 = socket$isdn(0x22, 0x3, 0x0) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f0000000ac0)={0x40, 0x2, 0x7, 0x7556}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000b00)=0x0) ptrace(0x10, r9) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44841) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e80)={&(0x7f0000000c80)="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", &(0x7f0000001c80)=""/154, &(0x7f0000001d40)="fd7da0a8a391e30764793febc4aa06c00f1b59215f4d2c25cdce14955fb4ea130bcf5caa44d7bde2ea3a6ab24e10b36e2d", &(0x7f0000001d80)="ba8a5dbf196cb4ef6bf613468b89d0669df9df2374617237227900c36f0467c03636b4b14e18fb6756aaee313bf056794ad9d2b5505fb7df29d93bb6ea9e9cfee1140d08652f4945580d0edef52d35d0315ef6c3667cb68095940be134b983536e251cdc5e5bec5134e22bbda8050b7cc2d7619872effa83aade6d2d5b8c07a9bc3ebfa472edbaf9dc3af68ae96159c2e7714b58c2adee039a57934000739ea1cc979d5c085ec125825dec5d9687ebcc37dadf6b19e74aa27582162aa34b1326f3170ba86e934a71", 0xfff, r7, 0x4}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001ec0)={0xffffffffffffffff}) bind$unix(r11, &(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002000)={{r7}, &(0x7f0000001f80), &(0x7f0000001fc0)='%pS \x00'}, 0x20) openat(r1, &(0x7f0000002040)='./file0\x00', 0x18000, 0x18) getsockopt$inet_dccp_buf(r2, 0x21, 0x80, &(0x7f0000002080)=""/210, &(0x7f0000002180)=0xd2) rt_sigsuspend(&(0x7f00000021c0)={[0xd02]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000002240)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000022c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000002200), r12, 0x0, 0x2, 0x4}}, 0x20) sched_setaffinity(r9, 0x8, &(0x7f0000002300)=0x5) 46.69589114s ago: executing program 3 (id=2623): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(&(0x7f0000000d40)=[{}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x64000600) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x400000, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) getrandom(0x0, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x20}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 46.472096009s ago: executing program 3 (id=2627): socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 46.204176018s ago: executing program 3 (id=2633): creat(&(0x7f0000000300)='./file0\x00', 0xe5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (fail_nth: 4) 46.187964828s ago: executing program 39 (id=2633): creat(&(0x7f0000000300)='./file0\x00', 0xe5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (fail_nth: 4) 15.042861178s ago: executing program 9 (id=3131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x3}, 0x1) 14.781827748s ago: executing program 9 (id=3134): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) ioprio_set$pid(0x2, 0x0, 0x0) 14.632835847s ago: executing program 9 (id=3136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000d3bbca5d0000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000240)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0xde, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', r6, @fallback=0x28, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r3, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x18, 0x2, {0xb}}, 0xf4ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000008ff7b9b846e22f1607fb45296271b6000000000007000000f48a110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x405d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) connect$qrtr(r11, &(0x7f0000000080)={0x2a, 0x4, 0x4001}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg(0xffffffffffffffff, 0x0, 0x8000) write$cgroup_devices(r13, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r13, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r14 = openat$cgroup_devices(r12, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r14, &(0x7f0000000180)={'a', ' *:* ', 'rm\x00'}, 0x9) r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r15, r11, 0x0, 0x1) 13.719896725s ago: executing program 9 (id=3145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @loopback}, 0x2, 0x2, 0x1}}, 0x2e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001d40)=ANY=[@ANYRES16=r2], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d00)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000000940)=""/15, 0xf, 0x0, &(0x7f0000001c80)=""/87, 0x57}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xd, 0x6, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0xc, 0x1, 0x8, 0x18, 0x8}]}, &(0x7f0000000780)='GPL\x00', 0x1, 0x8a, &(0x7f00000007c0)=""/138, 0x41000, 0x40, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x8, 0x6}, 0x10, r6, r0, 0x7, &(0x7f0000001d40), &(0x7f0000001d80)=[{0x4, 0x4, 0xc, 0x8}, {0x0, 0x5, 0x9}, {0x5, 0x2, 0x4, 0x3}, {0x2, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x7, 0x1}, {0x2, 0x5, 0x3, 0x2}, {0x0, 0x4, 0xf, 0xa}], 0x10, 0x5, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r5, 0x1, 0x60bd2b, 0x25dfdc00, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r9 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38) 13.159060614s ago: executing program 9 (id=3152): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001500)={@local, @random="c0bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xe2}}}}}}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x38, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000007000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000800000085000000a500000f90a0feff10000000183a000002000000000000000000000085000de35e3533f97ecd9a000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x9e, 0xf3, &(0x7f00000006c0)=""/243, 0x41000, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x8, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x401, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r7, 0x0, 0x25, 0xf, @void}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@allocspi={0x25c, 0x16, 0x8, 0x70bd28, 0x25dfdbfe, {{{@in=@loopback, @in6=@mcast2, 0x4e20, 0x0, 0x4e21, 0x0, 0x0, 0xa0, 0x0, 0x2c, 0x0, r8}, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4d5, 0x2b}, @in6=@private0, {0xb1, 0x5, 0x8, 0xc, 0x6, 0xfffffffffffffff7, 0xc000000, 0x1}, {0x3, 0xa, 0x7, 0x25ec}, {0x9, 0x1, 0x400}, 0x70bd29, 0x0, 0xa, 0x2, 0x6, 0x90}, 0x5, 0x10000}, [@lastused={0xc, 0xf, 0x7ff}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @algo_aead={0x143, 0x12, {{'aegis256-generic\x00'}, 0x7b8, 0x100, "fa129565743a9fe58f92fd3227278073c157c7943898fbaa7f4eacbd53383624fb658547cba998a5f6455fd55fa90797a3c6e8b2f84cf9f7ab4906283d14f729462484950c162456638295490d60ea3a09901b850891a5a2f1afb5067fc592ce6a0262c9c7fb182c4e22683ca4a0b4f0c9ae4410a031ba9d7f2a4a5dab253c1285f6730ad1a61bacddb86fc3e3ebf53474a2fac40803fa6f8376ef3549b0e87ebdefe260af3067d3bea9237d1f17c9a27bef1ca5ed39696fb2367a26d7271c438ce5be176d51fbe52b942bbaf8bcc5e2ba5da8691a2d98144cd29fea15b438febc7f3a2250368736e329df0004a0a76d7a826b909921ee"}}, @mark={0xc, 0x15, {0x35075d, 0x7}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff7850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) chown(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0xda0c288b395bf1d5, 0xbe, 0xff, 0xb832, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x8001, 0x10}}) 12.432603141s ago: executing program 9 (id=3164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000300)="44697e2c46976bbd3f3138bb1048988cb92eeb0fd1235aad3729a063ad6dee", 0x1f) 12.336063341s ago: executing program 40 (id=3164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000300)="44697e2c46976bbd3f3138bb1048988cb92eeb0fd1235aad3729a063ad6dee", 0x1f) 1.501470093s ago: executing program 1 (id=3424): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x0, 0x1d4) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x8000000000000001, 0x8, 0x2, 0x401, 0x1, 0x7, 0x867, 0x9dc7}, &(0x7f0000000140)={0xffffffffffffffff, 0x101, 0x3, 0x9, 0x9, 0x7fffffffffffffff, 0x70, 0x52d5}, &(0x7f0000000180)={0x80000000, 0x4, 0x24b5, 0x7f27, 0x4, 0xfffffffffffffffa, 0xa80, 0x8}, &(0x7f0000000240)={r1, r2+60000000}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x3]}, 0x8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r3, 0x0, 0xfffe80) 1.424450183s ago: executing program 1 (id=3427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b45, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (fail_nth: 3) 1.051997813s ago: executing program 1 (id=3437): ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="6374b1f5af23ad9c136f9a51d6abdd8d34b2b0997d2e59701a0f55b5996809964fa08da841899a9f9519743e48e14f1b6090661ee8137a35bf4f9fd1db39a0b2aaf53bfd538c1fc8cb7f102858ab7769036f1030a377fb179ad6ba9293998969934e98382d2fb78fe83103ce2ffca8a78d7b2e95428bd79eda5092acd2f281197f6bb62c668e3001a7a19c2c3444707c687471cd43404519b2a8d57f9d8b6e8301c3c30a6166fcb68e97655d043422b54bd44bf26557a62e5e7e1d8fc6bcb4a5c1368f8fa008c411ab3e1ec47a67060cd1dde5a9a1c7b42ecfeb090c54901fb81fa6cbd3f4811faa41af8328e599b3f3f11225e0b47498ad53d6e640549d5f074328f34faeb0e21a131e26ae6c76d0b1d80a7e8983bc096830d062a128fb12169ad149e2c49757b6cfeeefec2d317a060d9d3da51cbc677c23c4355f777ba7e57837ec785c7e3da7c0f9c64ccd215850ad1e06179b71759a90b8a6a2cafb249d6d9b273db7d4f6fdd9bba6ca9b2b43a0497c716466cbb52ed2b1f84e193cb10de463d51622d8a0194ef700dc9a2492ba8ebf4abd971cbe684ad391a88e2aa261f04b6b2872d19b87f6caf9f9abb49c8a15bf8f6ce0a69917e9cf35ae22bc01aab6165537f01277fde93785d0efd6510588d2b3dc0c19f889e660f9f00a31dba0088f1528260c87e628b78f1a84a060efa750c84e9083a94388abe27f4bfb7c347b7d230a51a825f6d9f91f11a8bc8fb51a4979c7e2847700b5ce091029dcadd92decbc038bb5e4dd79c5da532e836ad2730a590790cd18479d239b0e3a72b199f59ad8d0bbfdf8968d8c5ec267b15503a3fa8e111a0c0692353694b1290465bcc55e14b53a490d89092b097c4ea888594f1d35a56c1044110d2f703f33a5c19240d724b3ed016a4b4846ef40306858119d4b81be2a9c0e6068edc8db153bd73db0c9bc9d4ab6e489e75bfbea540594a6d1007c0fa06ee9355eb05d8c93341d2fd9adf7bc9b97368149ed9d64aacb638e25e5ab98c2c8b0524e7be357c371f0d1703fff1a6a3d1ba02b838c2e347bad4315795d58696c263a8efd362da6f32361b26b5a29b58d3938dbed09e7b46eb0c709c7708862f7d78474f789e5ce5c6251eca9d919cfa695223fd492837730e97fb613965ecb40e3b3c982d12fe34d3c89783edd4e88af775af7204c81a8ee66a2ac1a7a8c4454ab4b6d74cdb260c6b8982b97493cc2fd2719b05be40028f9b53dc643e8977244b13e596ccd327861be232a9800f93cc3c714fffd1b9d70aeabce2f7e7c406f547e8d107ea666bcd74ed0498ac4dd3d6744ce592f3995fd6d8b845cb7e1580fc05175418efec6e579a20141f93e33e3966cc3f1047bf8b8d6d567ac4a115e8751c60833413cb7a15cd848f1fbfbcd7063e1ff494e577e7c562b7e90bbfd963629a56573bd2b1b59d6dd9e8f80a1cf2a05f31c0487f6e2e1427e392042d73bd04ea52307109c2ca3b51867de5efe619adaf5c0bbfac779bc1f62ea249f86e533c8307c8239c49db453d1f10fcc3cbd6a53260b6b589d56cf443de3da408d6dd132f30006daa0977c2522e120cf25cb356a4a84458c86766fef7cd2e2a55e2bc139fddce7b96c0eddd5d3e32a8347734d56212a0333bffcb6e233312d84a090c7550b64379b0c56102248a069084e383e67eb0b1a6e410d1711daf2cbd79bdeea43fa7905eee06299622951e2706c1ca11c4a5aa14b0a4c6e6ed2f21f779eaa4428a879f26143af9d7a69163fd0fdff5ff29c0f4e22826c20f96d769473ba266a7fc34aec122a6db95394dc484d58474d1bb28dc16fa88021ed7daf9f0b8f423d133b51cd62148917ff7257e718fe73d306d0ee10a57547f707443e4c89f6c1294b2c433b9f518beaadf1d32a23b9f1224e685bff0f67f9196296e66b6c24a629918db409a1854349f3a6f04e356a42fa0b6aceed10c155052ded2ba8915787c30ceebf7bce7254d2d141687cbbbf2ed2575b3cb17a3de43ec6548af7c1e112b4300aeaadd562a34af26cac700ad229403eb00385831db44576c5f4bbe395938ce9b35880e821a1d4d0aa068a15145ddb115daad4e9ee085c4fa0f095ca08de60535aa3c66f7d82ad2d92fd8b2070db6e0c3ca8770effb45d48499995bb116d53dd80ac8df5893e436ecab6005951f78eae4e1d7926a727da45d8f0932aa568089f90f41bbf368ef9c4efbea8dd3f72d8a9d72c55495acd60ec671ea2f87686c49a0e03304c5c17a3d050353a485767240b4a7692931ecee1162c818e27baf01ac7b4dc182b2ac0d0f60025660d3c4fab1dae923c00836786c82dc73226703b909f2f72df8a3c650a1e94cb8aa7f2f261b8ccaab943472f7435bb660803a1f2f602d3dd757618f23710b86356347e4c65da3c75424a2c32e887d546edfe78a45c333eb6dd261a99d96758e5c3e0afcafdd76df8e5065e909150a38cabe940d596d9ee456441f8ccde3032cb73dc3e5535817d5ed7866b3365e15ec0812cb137307a71734383650fd6a5e9b2a1e3f350d43fe99b1bce02a1501e61968e9b373b3b8827530b5a89418a0497ba600046478452f9323f260ba5fdccb70f364788849b8123c98d99f8f747c903a6ef9ff8d57961a95d25b2b97c111146e5a9f56ec2e7e8553788bd00d82275f274cfe76f080bcd54754cc0ab4bae4da6a031f64f7963e66f7cf4518a9b67f81f14df30994442618e3f1754d1346d4e5de15581681c3e8efc084a0bce32dc6508e689c2f4c4405e5dd3eddd6f3155cdf624d07bdaa8ddf28f4517c88d75268e78247b574073b0c7022cc69f7b20c7c79301771b6872d7eb97e9c7585b3162d2b920486a17122cf2159fbfa125379332ba2a8d55eef2853f6c2b34392ab526d18dcfcb5456f176e17df7f66038aa869c9aa49536768039889869843d6fd771fa24ecaba2f9134c9832fc3dfa62e5912bf42c8569dfa69adff6c0a1bda9b9d28fc9422fa622f790d7299ad78d4e564090629862000d4bb3f90e3653aff1fdebdbc8463efaecfc703505cf5d30e4db1efa66869e754f77a79bc17034824fa5109d0c4e7d706928233a12c4c54e1eeb87ce17c20d55b75ede5164bf8c736c7404be849829ace98c2788058f9c68dab04808e7970d44b20f8bf53a76fe179d402856f35d320cca85c68b84cb469b30143e5356aa4beb93d113df39e1b60304863f5c921ea8690eca2ba495512c0f88d0671e39c223e95c0e1400d08b15d8945c474c96105e0ca154cdc2b5af75606c123dfb177acd43f9b225b4985b1d11fa1211de815e8544007357a7807d70e2ce00281587d0d5ec7890ec3bdd963d35c74016c3f66808c4be1428183ecd470cf10e9a314f4b6fe0de5371024a6d1e3c9d24fc2942037c5551e18a9c9429045550411b4c7256e27636288498881129e6726fdfb5b5c787e5bcd4caa1ce019640274c71c7ad429606f404aa4703a05ebe4666b48b750661052b30bf87af8a7246f07d854aa32e8d986ed0747cc08e4c9d41fc263b7db67f7c4dbddce06a8737aa634c8dcff6245381862e6c3508791dd136970c5e6736dbe530d532a21f5136873772d59d3de79f10864c5927addf5cfb4165367004c38417ad9d6d72d3bd688509e92a3d70678b38b47f465c07cd7703d692a1b52093d20eb7a97927e15ffb9931c1d9a5e0f97aeeb7d85eee9048d6cc1430d3e235cf3aedfea58202da9d38626d5a73d0ee83bdf7b744549543720771c217df28001a9fc5d25434eff940cd56e623c196ced839f2d68a6923061867742dc23c40381df9db8982c1b794c50c8ccc039ad4e13b30668c57b3c0626fbf3ff9f9db3a0adde9b8fd85dbd3e1db2eac1486f61723d7076e51df2acebe02396343db594e90e2287a95df057a4c1dbf31785ff68cc11c2bcef3f5599e509f09864f73e99a1d7495bdaaa9687ffacdc73cbcbe662420758c92430e269661acc4a2fc3b3059356794889dadd55fb7494837ac896d1d07110737263992a7e8d2d406c5323f1d9ba27356be7b0bcb284e68a71714e6f8606b7f66e0ca89b3099862ff1f701d6bc3886388b8e27cf43fbd575e9c7b4e0ca458b997fb13a5528eef75ccbfb4a70ae04c8f5f4b84060944b9d37384ff13f7a3ce5e9978f709cc4b1751c869f80242f5531d3a662d32eaa077fb357555d7c3100e09716b76bd9e4ed2fbd3cde2c7913ceaffef7ab56ff28da97bb04d942a2b8579bec70b6f8726400017cbd111b0391b9f2d5850dc7bbef8c25789a55e28cba472585fa21a788e8c750431a05815ac534901e8a3bd9627a0e7df31d2c13b97dcb37a8ac154f06c20588b0ea27149db2b827ab7c30396d521d3f2b4208285d487c3000359122a95ed03e68933d2c4ebd4878e55f5031afd2f207c385252013542ee24fa842ab01345451f9f3f24734d2e3b50af3b126ca80440209972f40e5b536399e9d5120a2ad39cb898c3d3ec52cf297067356886790ff7747fb5e9f218726c8444de92e00ed6bcbda90625b5338a75dd1542f21fea2b46b0838a429ee23c6f41d413c41cc3327743106548370c934bfc0816ee79983c8634682e40b2b515fae1b734ce4ab365941b3ec82dbc2b46253e901c405f81670e57feee92a87e11559203e3baff82d75f36844be19f61e89d4ee2e264d10c549801d0353a2cf7e784af8d3f567ef9965f26d92aaefc4574c66c780f9d28d2484e05a09599896db233f1cb96edd254d75a36359079d016b6b03d95e25e8d77b3ac345ee92a5f86070056814a4ea26b9c38a6ccac3ced1faad8abcfa3eda9aae00c81db5da54993c3bace94bd62a9ce55c9e31cd5a24e43c2e7eb3697aa71c2731bd3652231f0f364d76097a0c8106f4ce4fd3ab2f5078dbae6c243bfea5d095d3f64d5beec1d159f09dbbde0cca529838e46d0f4a8ae616a9ff8fab790b85b808ad6e08cb455db654de2f71cbc400788b152f31cd54b9302a4592c3b3bd88e6d38089f3ddc2560faa4beb788250daa98b8d7c0f7f1d59dd22f90f83116a59ff9d394abda23a5af6ff10fb959a0031fdf4f6cceb3fccc69e2e6732a42af490ba21210746d55d982be328d78e897c368d36019d6b145d2a40de08c41a712acca172fe4dc94b84474880f0fe0af5bed19ecb7ded5b7ffd7b3cf09e8f93fe07642527b69798ee7d3c9d325626d23945aca036c1b244da78074153d7191985438caa1477e039e5b77d606c3ea4549c2405ec55aa50738e61dc57bf22c559bbbc53f8fc91c508cb32b497cdfe0466d6ffda24e7ddea3fa313a4c51f0b817cf4d74aa6aa328b8c5020301c40488cd0cc2ba8cf839239ab378062505d6b41860a23550fefd3108dd0fedbeff86e938bf1c4aaf4a2ae20ec5f30fafd6d7ba01a9a81038f0493c610295d3110d1304a3bd4dd9d8173ce4faf4112f39fa6bfa25a8d2383fa614b79a0f66b2e163c39ea8f98d63ae9fbe50d9a22a8120a7fdc2a9b847192a772a5e086959c4e4fa9fe36ffca69484294eb42fbe33192c12d7f1f144816741b1ee881310e3f6be387e972850bdda0da2795594278a2c47903f9d720a4b66a218080db0bdd61533a80609087e6aa81024d87d0e7c6e712d864458cda4d639f30bfab98e32976d25c5d17476a43d2662783695c88c7ad3d52128ae8334171adeafd0583c4943c5fd061f847679791bc9734dbffd5b1346c6e8b03a1f787d842da7cb9e45cca46c6bfc656e55e071118134fc37e3fde49da8a4c2caa9221c25a7efafffa1fae308afb9b2959bcd4ed193c736193009b0f63eb006") (async) r0 = creat(&(0x7f0000001000)='./file0\x00', 0x162) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001180)={'gretap0\x00', &(0x7f0000001040)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x2, 0x62, {{0x41, 0x4, 0x0, 0x1, 0x104, 0x67, 0x0, 0x9b, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x24, 0xa3, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x51f1}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010100, 0xffff}]}, @rr={0x7, 0x1b, 0xff, [@broadcast, @loopback, @remote, @local, @multicast2, @private=0xa010102]}, @cipso={0x86, 0xf, 0x3, [{0x5, 0x2}, {0x6, 0x7, "a0938687d0"}]}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x6, 0x2}, {0x0, 0x12, "3b6ff5aff62d8166fbc8b62382c57761"}]}, @timestamp={0x44, 0x1c, 0xab, 0x0, 0x6, [0x3ff, 0x0, 0x6, 0x0, 0x1ff, 0x4f4]}, @lsrr={0x83, 0xf, 0x7b, [@dev={0xac, 0x14, 0x14, 0x29}, @empty, @broadcast]}, @ssrr={0x89, 0x13, 0x47, [@private=0xa010101, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0xf, "5484c783bac6d61a72312721f1"}, @cipso={0x86, 0x39, 0x1, [{0xdf03f0e69dc817c3, 0x2}, {0x2, 0xb, "7cf8fd60e044802f88"}, {0x5, 0x9, "ccca007191e2a0"}, {0x6, 0x7, "db056e990e"}, {0x6, 0x10, "0729d7e019da3e6afd4f4136083d"}, {0x1, 0x6, "9b3d9733"}]}]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x5, 0x2, 0x3, 0x7, 0x14080, 0x1, 0x7, '\x00', r1, r0, 0x3, 0x5, 0x3, 0x0, @void, @value, @value=r0}, 0x50) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x6666, 0x8801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x77f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf, 0x6c, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x9c, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x300, 0x9, 0xd2, 0x2, 0x10, 0x3}, 0x24, &(0x7f00000012c0)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x46, 0x3, 0x5, 0xf000, 0x1000, [0x1fe000f, 0xff00ff, 0xff3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x4, 0x1}]}, 0x2, [{0x4d, &(0x7f0000001300)=@string={0x4d, 0x3, "c53d31378c90f93f68f53de735e513a3dd4d0578a500aab508f484c6509d4e3adfd35250ceab4d63d2b8941ba881845db11de8425ad2489b414801854195b2b2643d1465f5ea07f6c8bc81"}}, {0x56, &(0x7f0000001380)=@string={0x56, 0x3, "83fc7b7735a1cffa2a3ca201d715faa12eb06e8860fc0942d4f7240e72075e26619b98e4377333ac779c12d07952fab0840509ebfaa4eab7606fe3cdfb6fb25fb90feb2365fd1b93664d302ab86cdd09386d4e4b"}}]}) (async) bind$inet6(r0, &(0x7f0000001440)={0xa, 0x4e21, 0xba3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c) (async, rerun: 32) bind$inet6(r0, &(0x7f0000001480)={0xa, 0x4e21, 0x4, @empty, 0xe9}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000014c0)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x40, 0x0, "78924b0df34f35742ad6831043c6d8fdf7072446dcc44a028c6535fcd5774a0433d41a6a5f378c202b0a851289a0a252e7fe99eb0acc942c6c556b7717802f262de83b14d95eed8753b2dcc8a93da13f"}, 0xd8) r3 = geteuid() (async) stat(&(0x7f00000015c0)='./file1\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001680)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) statx(r0, &(0x7f00000016c0)='./file0\x00', 0x400, 0x200, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001800)={{0x0, r3, r4, r6, r7, 0x4, 0x9ad5}, 0x0, 0x0, 0x2863, 0xf0f, 0x3, 0x55, 0x200000000000000, 0x6, 0x5, 0x7}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001880), r5) (async, rerun: 32) r8 = msgget$private(0x0, 0x0) (rerun: 32) msgctl$MSG_STAT_ANY(r8, 0xd, &(0x7f00000018c0)=""/26) (async, rerun: 32) timer_create(0x4, &(0x7f0000001ac0)={0x0, 0xe, 0x0, @thr={&(0x7f0000001900)="0e6e578928630c24b9a9ee418d033b1ec187ccf73e65091e184117f4fdb396c134a669f79d61f7f18ea3c97389324f4094b0c2d8cfa92c225b13ff85c7e14a258fa11aaa8355d933aaf274d43dce1764b84bf5decb250544f96f25c5e1226f77ff1f7e3f38a99635f24a0d4d63c87c4cc83ba2a7ed9cac5574e29ce985ebb4e992520b439e43061a6eb021927e8f0714640d21c20ead29f947f2f2faaf4f4cd8c2a11d", &(0x7f00000019c0)="b033dd226502a699ef49f671c2bec9e951e904e17e23e9f715bfa29fb0a35f39ccb5796ac7e62d9f312690ed96fe9b992a2870f88f9f13cd5690d827829d287e491ccf10ace52af408caea2d21ecfd3b20ce7f9a3b46e6426acfd62551ce0c15f98d131d3668692927e43f36f1409b02baaf191808de626b64864b61875fcaee46894ffadd8b1a8162e99297acf06d2a727b6251c630ea9f93b761ca355315c0cd43172c28a72bf11d4cc23d0fd040d86b90ed0d09dffb28f0abe00df6ec34f04eb00496b03aa1ce125cd6770280f8014424962218cec7f6a3b37706ad86858272a9857626572d65fe2df23184404574506a"}}, &(0x7f0000001b00)=0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) timer_settime(r9, 0x0, &(0x7f0000001b80)={{r10, r11+10000000}}, &(0x7f0000001bc0)) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c40), r5) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c00), 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xb0, r12, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) mount$cgroup(0x0, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00), 0x8018, &(0x7f0000001e40)={[{@xattr}, {@xattr}, {@subsystem='devices'}], [{@appraise_type}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}]}) write$P9_RVERSION(r5, &(0x7f0000001ec0)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000001f00)=""/14, &(0x7f0000001f40)=0xe) (async, rerun: 64) r13 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002200)={0x8000, 0x0}, 0x8) (async, rerun: 64) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x18, 0x4, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1ff}, [@alu={0x7, 0x1, 0xa, 0x6, 0x5, 0x1, 0x10}]}, &(0x7f0000002280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', r1, 0x0, r14, 0x8, &(0x7f00000022c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002300)=[r14, r0, r2, r0, r0], &(0x7f0000002340)=[{0x5, 0x2}], 0x10, 0x3, @void, @value}, 0x94) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r14, 0xc018937c, &(0x7f0000002440)={{0x1, 0x1, 0x18, r13, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x6, 0xb, &(0x7f0000001fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x1, 0x4, 0x3, 0x100}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000000}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xb0}]}, &(0x7f0000002040)='syzkaller\x00', 0xeb97, 0xfe, &(0x7f0000002080)=""/254, 0x41000, 0x8, '\x00', r1, @xdp=0x25, r0, 0x8, &(0x7f0000002180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000021c0)={0x3, 0x0, 0x9, 0x2}, 0x10, r15, r16, 0x3, &(0x7f0000002480)=[r0, r5, r2, r14, r17, r5], &(0x7f00000024c0)=[{0x2, 0x4, 0xb, 0x9}, {0x3, 0x2, 0xf, 0xc}, {0x1, 0x4, 0x1}], 0x10, 0x7, @void, @value}, 0x94) 995.714532ms ago: executing program 1 (id=3439): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) ioprio_set$pid(0x2, 0x0, 0x0) 907.489892ms ago: executing program 1 (id=3443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='sys_enter\x00', r0}, 0x18) setpriority(0x1, 0xff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x351002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000380)=r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000500e215000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a0104000000000000002ea29a830008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a010300000000000000000700000809000200732c18b94b0000060000000073797a300000000028000380240000800800034000000003b8fe0b80140001800a0001006c696d697400000004000280140000001000010000000000000000000084"], 0xd8}}, 0x0) 783.778652ms ago: executing program 0 (id=3454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r2, r1) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f2", 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1822, 0x0, 0x0, 0x0, 0x4db7}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x17, &(0x7f00000003c0)=""/23, 0x41100, 0x28, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000540)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x9, 0xf18}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x0, 0x5, 0x3, 0x8}, {0x1, 0x4, 0x6, 0x4}, {0x3, 0x2, 0x0, 0x4}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 726.281912ms ago: executing program 0 (id=3459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) close(r2) 725.687902ms ago: executing program 5 (id=3460): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x1004400, &(0x7f0000000b80)=ANY=[], 0x1, 0x5c1, &(0x7f0000000440)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[], 0x0, 0x600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000aff82892c3c198e8f6aa2ea86296b80801"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9c5}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='cachefiles_ondemand_fd_write\x00', r6, 0x0, 0xf}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r9, 0x25, 0x0, @val=@perf_event}, 0x40) 689.865942ms ago: executing program 2 (id=3462): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES64=0x0, @ANYBLOB="000000654d4b0758360e8f1abd1099c3810000000004000007000000000000000000000000000000000021bd0c5bc23cb0236c348700b5834530f33cf181a58d9f37000000fded9ba7e742192605e26bfcf2842fab7df3f2"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) (async) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtclass={0x54, 0x28, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xffe0, 0xfff3}, {0xf, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xeb}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x81}}, @TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtclass={0x54, 0x28, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xffe0, 0xfff3}, {0xf, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xeb}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x81}}, @TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r5}, 0x18) mq_unlink(0x0) unshare(0x400) (async) unshare(0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, 0x0, 0x2, 0x0) sendfile(r7, r7, 0x0, 0x200) (async) sendfile(r7, r7, 0x0, 0x200) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="5fdd82c0b72941c06704bd3fe1fbe3cd4d091626718ecd224024413ea876c78b43526a9999895e727d2db9b5709152883f9abd652b08d127279664915bca5192d020f47df08df127daf73950459176516d46b69dc159e20e32cbce888c47c89c8712181a79ecf6ec0166d3e1902b2f3ea4ddb8d783b45c07a0ba98a65f08a350ecc012551ea7b219ec125dd2b903", @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x256, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000008b3d1c1550ce9fa4002691392d4ed0b4a769c3a5180100002020082500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095aa7cb8dc756ae5332181ee11f843e9c3fb9e804bb6d507d71b39853d6d8dfbf28d4d0767c4cb1f21b36bed1177dac57cc051fd7d7e1f1f64ebd1ec10a04def56b07fed64a0db7021399e528f717d2f0318cc7cf52b4008f866280dd145cc9b0816cd209ae451200e0a1425231830a5036ccf0af25e1daf8a0dcae37bcaa519549e9eb915c2109fe13d8747470275124d6aadcfe26363d4b2b6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffd}, 0x18) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) copy_file_range(r9, 0x0, r8, &(0x7f0000000000)=0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff000000289500002c0000000079b83505000000aefce371fac96a0a8459dd189f6d6445d9cf5ccfde557cc03504cf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff000000289500002c0000000079b83505000000aefce371fac96a0a8459dd189f6d6445d9cf5ccfde557cc03504cf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 653.177341ms ago: executing program 0 (id=3463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x6200, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef) 652.577882ms ago: executing program 2 (id=3464): socket$inet6(0x10, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1e0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x168, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'pimreg\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, 0x0, 0x45}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write(r0, &(0x7f00000006c0)="7b12620af288132cda34e87859fdead09a81b4ed67be3088cd18815b5637e5f7c77756ef3b0157dbda86ba2c2fdd581785f9cd4f634f6398db829e7c64d5802f9f4211a489f23af050a56416fb139a5afd21a3e51520b1393d24e19b59482b79bfba2c6d1798e6b41d384e12d46bf2107bcfdc1571815c566824d0c1589b04ca16ac29c26fba7b3fe0657a6d60be2c4c94c7c11638804529057be3445c70202bcd4397647f5fc4b4840f7cc2f762773e8a097d381d6a641611", 0xb9) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000180)) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'veth0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 650.436181ms ago: executing program 5 (id=3465): perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x17b759, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x18a1, 0x3fd, 0x200, 0x8, 0x4, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x0, 0x0}, 0x10) openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) 603.497902ms ago: executing program 0 (id=3467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "af602a03ca4f6c02", "debddda6fa83a96b164692f6764596f3", '\x00', "7061eef9feb9a03e"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x2) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) r7 = socket$kcm(0xa, 0x1, 0x106) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = getpid() r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r7) 591.767561ms ago: executing program 2 (id=3469): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r5, @ANYRES32, @ANYBLOB="400002"], 0x5c}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x2) 414.996891ms ago: executing program 2 (id=3476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) pwrite64(r5, 0x0, 0x0, 0x80000001) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0xf, 0x3, 0x0, r5, 0x200, '\x00', 0x0, r5, 0x3, 0x1, 0x2, 0x4, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x20004000) 257.35907ms ago: executing program 5 (id=3477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) (fail_nth: 1) 256.69079ms ago: executing program 4 (id=3478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x6200, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef) 211.51659ms ago: executing program 0 (id=3479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) pidfd_send_signal(r3, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0x10001}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 73.23718ms ago: executing program 4 (id=3480): socket$inet6(0x10, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1e0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x168, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'pimreg\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, 0x0, 0x45}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write(r0, &(0x7f00000006c0)="7b12620af288132cda34e87859fdead09a81b4ed67be3088cd18815b5637e5f7c77756ef3b0157dbda86ba2c2fdd581785f9cd4f634f6398db829e7c64d5802f9f4211a489f23af050a56416fb139a5afd21a3e51520b1393d24e19b59482b79bfba2c6d1798e6b41d384e12d46bf2107bcfdc1571815c566824d0c1589b04ca16ac29c26fba7b3fe0657a6d60be2c4c94c7c11638804529057be3445c70202bcd4397647f5fc4b4840f7cc2f762773e8a097d381d6a641611", 0xb9) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000180)) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) socket$pppoe(0x18, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 72.6396ms ago: executing program 1 (id=3481): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) (async) r6 = getpid() setreuid(0xee00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_pidfd_open(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@remote, 0xffff}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0x2}, {0x0, 0x3, 0xfffffffc}, 0x0, 0x4000, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x4, {{'ecb(arc4)\x00'}}}]}, 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setns(r7, 0x24020000) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 70.21586ms ago: executing program 2 (id=3482): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 493.079µs ago: executing program 2 (id=3483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000004000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=3484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000020601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000008001240000afff116000300686173683a6e6574"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): [ 145.664561][T11066] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.718753][T11055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.733541][T11055] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.746736][T11055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.757922][T11076] $H˙: renamed from bond0 (while UP) [ 145.767249][T11076] $H˙: entered promiscuous mode [ 145.772320][T11076] bond_slave_0: entered promiscuous mode [ 145.778169][T11076] bond_slave_1: entered promiscuous mode [ 145.856193][T11077] wireguard0: entered promiscuous mode [ 145.861706][T11077] wireguard0: entered allmulticast mode [ 146.180764][T11103] xt_hashlimit: max too large, truncated to 1048576 [ 146.204168][T11103] Cannot find set identified by id 0 to match [ 146.227377][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'. [ 146.247547][T11103] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 146.298401][T11105] loop5: detected capacity change from 0 to 512 [ 146.323523][T11105] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 146.340363][T11108] loop4: detected capacity change from 0 to 512 [ 146.373549][T11105] EXT4-fs (loop5): failed to open journal device unknown-block(7,4171) -6 [ 146.401344][T11108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.441140][T11105] loop5: detected capacity change from 0 to 512 [ 146.461931][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.480421][ T4008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.490589][T11105] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2709: bg 0: block 248: padding at end of block bitmap is not set [ 146.510326][T11105] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2709: Failed to acquire dquot type 1 [ 146.534278][T11113] loop4: detected capacity change from 0 to 512 [ 146.546671][T11105] EXT4-fs (loop5): 1 truncate cleaned up [ 146.550940][T11115] loop9: detected capacity change from 0 to 128 [ 146.552826][T11105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.576935][T11105] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.596281][T11115] FAULT_INJECTION: forcing a failure. [ 146.596281][T11115] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.609537][T11115] CPU: 0 UID: 0 PID: 11115 Comm: syz.9.2713 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 146.609572][T11115] Tainted: [W]=WARN [ 146.609580][T11115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.609592][T11115] Call Trace: [ 146.609619][T11115] [ 146.609683][T11115] dump_stack_lvl+0xf2/0x150 [ 146.609712][T11115] dump_stack+0x15/0x1a [ 146.609734][T11115] should_fail_ex+0x24a/0x260 [ 146.609763][T11115] should_fail+0xb/0x10 [ 146.609869][T11115] should_fail_usercopy+0x1a/0x20 [ 146.609968][T11115] _copy_to_iter+0xd5/0xd00 [ 146.610080][T11115] get_random_bytes_user+0x112/0x260 [ 146.610118][T11115] ? import_ubuf+0xec/0x130 [ 146.610137][T11115] __x64_sys_getrandom+0xb5/0x190 [ 146.610269][T11115] x64_sys_call+0x118a/0x2dc0 [ 146.610317][T11115] do_syscall_64+0xc9/0x1c0 [ 146.610368][T11115] ? clear_bhb_loop+0x55/0xb0 [ 146.610394][T11115] ? clear_bhb_loop+0x55/0xb0 [ 146.610421][T11115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.610448][T11115] RIP: 0033:0x7fca6041d169 [ 146.610463][T11115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.610483][T11115] RSP: 002b:00007fca5ea87038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 146.610502][T11115] RAX: ffffffffffffffda RBX: 00007fca60635fa0 RCX: 00007fca6041d169 [ 146.610514][T11115] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000400000000240 [ 146.610526][T11115] RBP: 00007fca5ea87090 R08: 0000000000000000 R09: 0000000000000000 [ 146.610537][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.610613][T11115] R13: 0000000000000000 R14: 00007fca60635fa0 R15: 00007ffd6996dff8 [ 146.610631][T11115] [ 146.613099][T11105] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.727609][T11113] EXT4-fs (loop4): 1 orphan inode deleted [ 146.739998][T11105] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 146.749262][ T3385] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 146.762392][T11113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.839405][T11113] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.860550][T11126] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 146.908912][ T3463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.920721][ T36] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 146.998389][T11142] FAULT_INJECTION: forcing a failure. [ 146.998389][T11142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.011701][T11142] CPU: 0 UID: 0 PID: 11142 Comm: syz.5.2722 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 147.011737][T11142] Tainted: [W]=WARN [ 147.011745][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.011815][T11142] Call Trace: [ 147.011821][T11142] [ 147.011828][T11142] dump_stack_lvl+0xf2/0x150 [ 147.011855][T11142] dump_stack+0x15/0x1a [ 147.011876][T11142] should_fail_ex+0x24a/0x260 [ 147.011910][T11142] should_fail+0xb/0x10 [ 147.011992][T11142] should_fail_usercopy+0x1a/0x20 [ 147.012030][T11142] _copy_from_user+0x1c/0xa0 [ 147.012068][T11142] copy_msghdr_from_user+0x54/0x2a0 [ 147.012103][T11142] ? __fget_files+0x17c/0x1c0 [ 147.012210][T11142] __sys_sendmsg+0x13e/0x230 [ 147.012255][T11142] __x64_sys_sendmsg+0x46/0x50 [ 147.012281][T11142] x64_sys_call+0x2734/0x2dc0 [ 147.012328][T11142] do_syscall_64+0xc9/0x1c0 [ 147.012362][T11142] ? clear_bhb_loop+0x55/0xb0 [ 147.012392][T11142] ? clear_bhb_loop+0x55/0xb0 [ 147.012451][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.012481][T11142] RIP: 0033:0x7f4da6a7d169 [ 147.012499][T11142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.012597][T11142] RSP: 002b:00007f4da50e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.012620][T11142] RAX: ffffffffffffffda RBX: 00007f4da6c95fa0 RCX: 00007f4da6a7d169 [ 147.012635][T11142] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000005 [ 147.012647][T11142] RBP: 00007f4da50e7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.012660][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.012698][T11142] R13: 0000000000000000 R14: 00007f4da6c95fa0 R15: 00007ffcb5326158 [ 147.012716][T11142] [ 147.674210][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 147.674228][ T29] audit: type=1400 audit(1740792833.614:612): avc: denied { bind } for pid=11161 comm="syz.5.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.682121][T11162] net_ratelimit: 272 callbacks suppressed [ 147.682141][T11162] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 147.699862][ T29] audit: type=1400 audit(1740792833.614:613): avc: denied { name_bind } for pid=11161 comm="syz.5.2728" src=28191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 147.733782][ T29] audit: type=1400 audit(1740792833.614:614): avc: denied { node_bind } for pid=11161 comm="syz.5.2728" saddr=2001:: src=28191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 147.757270][ T29] audit: type=1400 audit(1740792833.624:615): avc: denied { name_bind } for pid=11161 comm="syz.5.2728" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 147.797738][ T29] audit: type=1400 audit(1740792833.744:616): avc: denied { listen } for pid=11161 comm="syz.5.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.839501][ T29] audit: type=1400 audit(1740792833.764:617): avc: denied { accept } for pid=11161 comm="syz.5.2728" lport=50359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 148.169415][T11181] serio: Serial port ptm0 [ 148.578574][ T29] audit: type=1400 audit(1740792834.524:618): avc: denied { read write } for pid=11193 comm="syz.5.2741" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.602207][ T29] audit: type=1400 audit(1740792834.524:619): avc: denied { open } for pid=11193 comm="syz.5.2741" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.668599][T11194] serio: Serial port ptm0 [ 148.675402][T11196] veth1_to_bridge: entered allmulticast mode [ 148.684697][T11196] veth1_to_bridge: left allmulticast mode [ 148.702219][ T29] audit: type=1326 audit(1740792834.584:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.0.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912babd169 code=0x7ffc0000 [ 148.725687][ T29] audit: type=1326 audit(1740792834.584:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.0.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f912babd169 code=0x7ffc0000 [ 148.763355][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.840433][T11204] serio: Serial port ptm1 [ 148.957696][T11212] loop9: detected capacity change from 0 to 2048 [ 148.972226][T11212] EXT4-fs: Ignoring removed bh option [ 148.997714][T11212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.063887][T11200] loop4: detected capacity change from 0 to 1024 [ 149.143227][T11200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.216027][T10906] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 149.283983][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.361461][T11230] loop4: detected capacity change from 0 to 512 [ 149.380427][T11230] EXT4-fs: Ignoring removed bh option [ 149.406535][T11230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.428335][ T36] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 149.440668][ T36] EXT4-fs (loop9): This should not happen!! Data will be lost [ 149.440668][ T36] [ 149.450698][ T36] EXT4-fs (loop9): Total free blocks count 0 [ 149.456856][ T36] EXT4-fs (loop9): Free/Dirty block details [ 149.462787][ T36] EXT4-fs (loop9): free_blocks=2415919104 [ 149.468721][ T36] EXT4-fs (loop9): dirty_blocks=8224 [ 149.474367][ T36] EXT4-fs (loop9): Block reservation details [ 149.480425][ T36] EXT4-fs (loop9): i_reserved_data_blocks=514 [ 149.514078][T11230] EXT4-fs (loop4): 1 truncate cleaned up [ 149.520241][T11230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.554578][ T36] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 149.591275][T11242] serio: Serial port ptm0 [ 149.618277][ T3298] syz_tun (unregistering): left allmulticast mode [ 149.657702][T11230] bridge0: port 3(syz_tun) entered blocking state [ 149.664217][T11230] bridge0: port 3(syz_tun) entered disabled state [ 149.708299][T11230] syz_tun: entered allmulticast mode [ 149.721316][T11230] syz_tun: entered promiscuous mode [ 149.727247][T11230] bridge0: port 3(syz_tun) entered blocking state [ 149.733759][T11230] bridge0: port 3(syz_tun) entered forwarding state [ 149.750955][T11250] loop5: detected capacity change from 0 to 764 [ 149.762927][T11250] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 149.883558][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.939925][T11264] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 150.407817][T11267] loop4: detected capacity change from 0 to 1024 [ 150.411999][T11273] serio: Serial port ptm0 [ 150.438604][T11267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.487883][T11246] chnl_net:caif_netlink_parms(): no params data found [ 150.500328][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.571997][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.579193][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.586578][T11246] bridge_slave_0: entered allmulticast mode [ 150.593322][T11246] bridge_slave_0: entered promiscuous mode [ 150.602615][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.609909][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.617618][T11246] bridge_slave_1: entered allmulticast mode [ 150.631175][T11246] bridge_slave_1: entered promiscuous mode [ 150.652142][T11246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.665412][T11246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.702287][T11246] team0: Port device team_slave_0 added [ 150.702506][T11297] serio: Serial port ptm1 [ 150.734211][T11299] loop4: detected capacity change from 0 to 128 [ 150.744395][T11246] team0: Port device team_slave_1 added [ 150.792329][T11246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.799461][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.825561][T11246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.837967][T11246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.845042][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.871243][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.984811][T11246] hsr_slave_0: entered promiscuous mode [ 150.996298][T11246] hsr_slave_1: entered promiscuous mode [ 151.006315][T11246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.014402][T11246] Cannot create hsr debugfs directory [ 151.176626][T11246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.244271][T11246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.338993][T11246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.408839][T11246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.498161][T11335] loop5: detected capacity change from 0 to 764 [ 151.516764][T11335] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 151.534200][T11246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.605096][T11246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.628209][T11246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.642140][T11246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.675894][T11341] tipc: Started in network mode [ 151.680796][T11341] tipc: Node identity 3a15bc7f8667, cluster identity 4711 [ 151.688184][T11341] tipc: Enabled bearer , priority 0 [ 151.719120][T11341] +: renamed from syzkaller0 [ 151.725509][T11341] tipc: Disabling bearer [ 151.737036][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2789'. [ 151.768151][T11246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.787521][T11343] bridge0: port 4(batadv1) entered blocking state [ 151.794015][T11343] bridge0: port 4(batadv1) entered disabled state [ 151.801167][T11343] batadv1: entered allmulticast mode [ 151.807058][T11343] batadv1: entered promiscuous mode [ 151.823230][T11246] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.848591][T11354] xt_hashlimit: max too large, truncated to 1048576 [ 151.856667][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.863788][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.866670][T11354] Cannot find set identified by id 0 to match [ 151.886989][T11354] loop4: detected capacity change from 0 to 1024 [ 151.893903][T11354] EXT4-fs: Ignoring removed bh option [ 151.905347][ T3385] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.912523][ T3385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.930844][T11354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.975507][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2792'. [ 151.985182][T11354] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 152.030372][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.065081][T11354] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.2792: Allocating blocks 497-513 which overlap fs metadata [ 152.080261][T11354] EXT4-fs (loop4): pa ffff88810685a8c0: logic 256, phys. 385, len 8 [ 152.088473][T11354] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 152.168742][T11246] veth0_vlan: entered promiscuous mode [ 152.178905][T11246] veth1_vlan: entered promiscuous mode [ 152.194365][T11246] veth0_macvtap: entered promiscuous mode [ 152.201769][T11246] veth1_macvtap: entered promiscuous mode [ 152.212626][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.223337][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.233199][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.243742][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.253691][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.264162][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.274098][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.284630][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.295589][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.296353][ T3385] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 152.303852][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.312088][ T3385] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 152.322493][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.322511][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.352057][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.362066][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.372604][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.382557][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.393089][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.404828][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.405726][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.422659][T11246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.431458][T11246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.440251][T11246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.449061][T11246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.617208][T11396] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 152.884412][T11410] loop2: detected capacity change from 0 to 128 [ 153.130879][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 153.130896][ T29] audit: type=1400 audit(1740792839.074:697): avc: denied { mount } for pid=11422 comm="syz.9.2811" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 153.162287][T11424] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 153.189702][ T29] audit: type=1400 audit(1740792839.074:698): avc: denied { unmount } for pid=11422 comm="syz.9.2811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 153.281616][T11428] loop4: detected capacity change from 0 to 1024 [ 153.314415][T11428] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 153.325483][T11428] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 153.344324][T11428] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 153.355690][T11428] EXT4-fs (loop4): invalid journal inode [ 153.363553][T11428] EXT4-fs (loop4): can't get journal size [ 153.371927][T11428] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.2814: blocks 2-2 from inode overlap system zone [ 153.388196][T11428] EXT4-fs (loop4): failed to initialize system zone (-117) [ 153.413471][T11428] EXT4-fs (loop4): mount failed [ 153.468647][T11431] loop5: detected capacity change from 0 to 1024 [ 153.571528][T11438] pim6reg1: entered promiscuous mode [ 153.576991][T11438] pim6reg1: entered allmulticast mode [ 153.710414][T11431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.874079][T11451] loop9: detected capacity change from 0 to 512 [ 153.903344][T11451] EXT4-fs: Ignoring removed bh option [ 153.916813][T11451] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 153.958011][T11451] EXT4-fs (loop9): 1 truncate cleaned up [ 153.960880][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2820'. [ 153.966620][T11451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.002921][ T3463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.018815][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 154.046357][ T4008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.095318][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.120892][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.149961][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.189035][T11473] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 154.189126][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.213454][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.230102][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.246777][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.321214][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.389424][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.407481][ T29] audit: type=1400 audit(1740792840.354:699): avc: denied { read } for pid=11488 comm="syz.0.2833" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 154.431415][T11489] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 154.439207][T11489] audit: out of memory in audit_log_start [ 154.445265][T11466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9593 sclass=netlink_route_socket pid=11466 comm=syz.9.2826 [ 154.470588][ T29] audit: type=1400 audit(1740792840.374:700): avc: denied { open } for pid=11488 comm="syz.0.2833" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 154.613459][ T29] audit: type=1400 audit(1740792840.554:701): avc: denied { read write } for pid=11496 comm="+u[@" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 154.649762][ T29] audit: type=1400 audit(1740792840.554:702): avc: denied { open } for pid=11496 comm="+u[@" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 154.742975][T11501] loop2: detected capacity change from 0 to 2048 [ 154.816718][T11501] Alternate GPT is invalid, using primary GPT. [ 154.823053][T11501] loop2: p1 p2 p3 [ 154.830842][T11501] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2838'. [ 155.032897][T11514] loop2: detected capacity change from 0 to 1024 [ 155.052259][T11516] netem: change failed [ 155.060190][T11514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.088216][ T29] audit: type=1400 audit(1740792841.024:703): avc: denied { lock } for pid=11513 comm="syz.2.2843" path="/15/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.111521][ T29] audit: type=1400 audit(1740792841.024:704): avc: denied { link } for pid=11513 comm="syz.2.2843" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.124683][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 155.540446][T11544] FAULT_INJECTION: forcing a failure. [ 155.540446][T11544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.553666][T11544] CPU: 1 UID: 0 PID: 11544 Comm: +}[@ Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 155.553702][T11544] Tainted: [W]=WARN [ 155.553711][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.553726][T11544] Call Trace: [ 155.553767][T11544] [ 155.553775][T11544] dump_stack_lvl+0xf2/0x150 [ 155.553804][T11544] dump_stack+0x15/0x1a [ 155.553830][T11544] should_fail_ex+0x24a/0x260 [ 155.553928][T11544] should_fail+0xb/0x10 [ 155.553957][T11544] should_fail_usercopy+0x1a/0x20 [ 155.553996][T11544] _copy_from_iter+0xd5/0xd00 [ 155.554105][T11544] ? kmalloc_reserve+0x16e/0x190 [ 155.554131][T11544] ? __build_skb_around+0x196/0x1f0 [ 155.554155][T11544] ? __alloc_skb+0x21f/0x310 [ 155.554173][T11544] ? __virt_addr_valid+0x1ed/0x250 [ 155.554198][T11544] ? __check_object_size+0x364/0x520 [ 155.554267][T11544] netlink_sendmsg+0x460/0x6e0 [ 155.554313][T11544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.554405][T11544] __sock_sendmsg+0x140/0x180 [ 155.554435][T11544] ____sys_sendmsg+0x326/0x4b0 [ 155.554469][T11544] __sys_sendmmsg+0x227/0x4b0 [ 155.554527][T11544] __x64_sys_sendmmsg+0x57/0x70 [ 155.554560][T11544] x64_sys_call+0x29aa/0x2dc0 [ 155.554655][T11544] do_syscall_64+0xc9/0x1c0 [ 155.554808][T11544] ? clear_bhb_loop+0x55/0xb0 [ 155.554840][T11544] ? clear_bhb_loop+0x55/0xb0 [ 155.554871][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.554941][T11544] RIP: 0033:0x7f4da6a7d169 [ 155.554959][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.555056][T11544] RSP: 002b:00007f4da50e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.555079][T11544] RAX: ffffffffffffffda RBX: 00007f4da6c95fa0 RCX: 00007f4da6a7d169 [ 155.555093][T11544] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000004 [ 155.555109][T11544] RBP: 00007f4da50e7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.555123][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.555136][T11544] R13: 0000000000000000 R14: 00007f4da6c95fa0 R15: 00007ffcb5326158 [ 155.555155][T11544] [ 155.983366][T11554] FAULT_INJECTION: forcing a failure. [ 155.983366][T11554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.997085][T11554] CPU: 1 UID: 0 PID: 11554 Comm: syz.9.2854 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 155.997185][T11554] Tainted: [W]=WARN [ 155.997192][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.997212][T11554] Call Trace: [ 155.997220][T11554] [ 155.997230][T11554] dump_stack_lvl+0xf2/0x150 [ 155.997261][T11554] dump_stack+0x15/0x1a [ 155.997287][T11554] should_fail_ex+0x24a/0x260 [ 155.997342][T11554] should_fail+0xb/0x10 [ 155.997371][T11554] should_fail_usercopy+0x1a/0x20 [ 155.997418][T11554] strncpy_from_user+0x25/0x210 [ 155.997447][T11554] ? strncpy_from_user_nofault+0x9e/0xe0 [ 155.997479][T11554] strncpy_from_user_nofault+0x66/0xe0 [ 155.997529][T11554] bpf_probe_read_compat_str+0xb3/0x130 [ 155.997576][T11554] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 155.997597][T11554] bpf_trace_run3+0x10c/0x1d0 [ 155.997627][T11554] ? sctp_chunk_put+0x103/0x130 [ 155.997652][T11554] ? kmem_cache_free+0xdc/0x2d0 [ 155.997744][T11554] ? sctp_chunk_put+0x103/0x130 [ 155.997764][T11554] kmem_cache_free+0x237/0x2d0 [ 155.997785][T11554] ? __kfree_skb+0x102/0x150 [ 155.997819][T11554] sctp_chunk_put+0x103/0x130 [ 155.997844][T11554] sctp_make_abort_user+0x339/0x3a0 [ 155.997887][T11554] ? sctp_epaddr_lookup_transport+0x97/0x130 [ 155.997981][T11554] sctp_sendmsg_check_sflags+0x17c/0x1d0 [ 155.998007][T11554] sctp_sendmsg+0x73f/0x18f0 [ 155.998039][T11554] ? __pfx_sctp_sendmsg+0x10/0x10 [ 155.998069][T11554] inet_sendmsg+0xc5/0xd0 [ 155.998137][T11554] __sock_sendmsg+0x102/0x180 [ 155.998172][T11554] ____sys_sendmsg+0x326/0x4b0 [ 155.998200][T11554] __sys_sendmmsg+0x227/0x4b0 [ 155.998252][T11554] __x64_sys_sendmmsg+0x57/0x70 [ 155.998339][T11554] x64_sys_call+0x29aa/0x2dc0 [ 155.998369][T11554] do_syscall_64+0xc9/0x1c0 [ 155.998400][T11554] ? clear_bhb_loop+0x55/0xb0 [ 155.998476][T11554] ? clear_bhb_loop+0x55/0xb0 [ 155.998510][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.998544][T11554] RIP: 0033:0x7fca6041d169 [ 155.998562][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.998619][T11554] RSP: 002b:00007fca5ea87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.998638][T11554] RAX: ffffffffffffffda RBX: 00007fca60635fa0 RCX: 00007fca6041d169 [ 155.998726][T11554] RDX: 0000000000000001 RSI: 0000400000000bc0 RDI: 0000000000000005 [ 155.998739][T11554] RBP: 00007fca5ea87090 R08: 0000000000000000 R09: 0000000000000000 [ 155.998750][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.998762][T11554] R13: 0000000000000000 R14: 00007fca60635fa0 R15: 00007ffd6996dff8 [ 155.998779][T11554] [ 156.322120][T11526] SELinux: security_context_str_to_sid () failed with errno=-22 [ 156.521318][T11571] serio: Serial port ptm0 [ 156.602866][T11580] loop5: detected capacity change from 0 to 1024 [ 156.646817][T11580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.735372][T11246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.885273][T11591] veth1_to_bridge: entered allmulticast mode [ 156.892415][T11591] veth1_to_bridge: left allmulticast mode [ 156.973436][ T3463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.002244][T11600] serio: Serial port ptm0 [ 157.147802][T11607] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 157.939975][T11636] loop9: detected capacity change from 0 to 1024 [ 157.990927][T11636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.023923][T11614] loop2: detected capacity change from 0 to 1024 [ 158.099350][T11614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.240335][T11666] loop5: detected capacity change from 0 to 764 [ 158.243392][T11669] FAULT_INJECTION: forcing a failure. [ 158.243392][T11669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.259933][T11669] CPU: 0 UID: 0 PID: 11669 Comm: syz.0.2897 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 158.259965][T11669] Tainted: [W]=WARN [ 158.259972][T11669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.259984][T11669] Call Trace: [ 158.259992][T11669] [ 158.260001][T11669] dump_stack_lvl+0xf2/0x150 [ 158.260072][T11669] dump_stack+0x15/0x1a [ 158.260093][T11669] should_fail_ex+0x24a/0x260 [ 158.260123][T11669] should_fail+0xb/0x10 [ 158.260149][T11669] should_fail_usercopy+0x1a/0x20 [ 158.260197][T11669] _copy_from_user+0x1c/0xa0 [ 158.260233][T11669] vmemdup_user+0x12e/0x1b0 [ 158.260261][T11669] map_lookup_and_delete_elem+0x2db/0x630 [ 158.260297][T11669] __sys_bpf+0x53c/0x7a0 [ 158.260410][T11669] __x64_sys_bpf+0x43/0x50 [ 158.260436][T11669] x64_sys_call+0x2914/0x2dc0 [ 158.260462][T11669] do_syscall_64+0xc9/0x1c0 [ 158.260522][T11669] ? clear_bhb_loop+0x55/0xb0 [ 158.260549][T11669] ? clear_bhb_loop+0x55/0xb0 [ 158.260577][T11669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.260604][T11669] RIP: 0033:0x7f912babd169 [ 158.260619][T11669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.260679][T11669] RSP: 002b:00007f912a127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.260698][T11669] RAX: ffffffffffffffda RBX: 00007f912bcd5fa0 RCX: 00007f912babd169 [ 158.260718][T11669] RDX: 0000000000000020 RSI: 0000400000000640 RDI: 0000000000000015 [ 158.260730][T11669] RBP: 00007f912a127090 R08: 0000000000000000 R09: 0000000000000000 [ 158.260742][T11669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.260754][T11669] R13: 0000000000000000 R14: 00007f912bcd5fa0 R15: 00007ffd0c5598c8 [ 158.260773][T11669] [ 158.264745][T11666] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 158.456542][T11246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.484733][ T4008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.490655][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 158.490673][ T29] audit: type=1400 audit(1740792844.434:782): avc: denied { module_request } for pid=11670 comm="syz.0.2898" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 158.579906][T11676] loop5: detected capacity change from 0 to 1024 [ 158.593761][T11680] serio: Serial port ptm0 [ 158.644262][T11676] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 158.654816][T11676] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 158.664458][T11676] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2901: Failed to acquire dquot type 0 [ 158.704898][ T29] audit: type=1326 audit(1740792844.644:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 158.729566][T11676] EXT4-fs (loop5): 1 truncate cleaned up [ 158.735652][T11676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.745145][ T29] audit: type=1326 audit(1740792844.654:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 158.805346][ T29] audit: type=1326 audit(1740792844.714:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 158.828888][ T29] audit: type=1326 audit(1740792844.714:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 158.878274][ T29] audit: type=1326 audit(1740792844.824:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 158.886830][ T3463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.901790][ T29] audit: type=1326 audit(1740792844.824:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 158.998221][ T29] audit: type=1326 audit(1740792844.854:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 159.025701][T11690] loop2: detected capacity change from 0 to 1024 [ 159.104990][T11690] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 159.135385][T11690] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 159.215953][T11690] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #32: comm syz.2.2906: iget: special inode unallocated [ 159.241353][T11690] EXT4-fs (loop2): no journal found [ 159.246805][T11690] EXT4-fs (loop2): can't get journal size [ 159.283229][T11716] serio: Serial port ptm0 [ 159.301074][T11690] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz.2.2906: iget: special inode unallocated [ 159.356030][T11690] EXT4-fs (loop2): failed to initialize system zone (-117) [ 159.363360][T11690] EXT4-fs (loop2): mount failed [ 159.465649][T11726] loop4: detected capacity change from 0 to 512 [ 159.479260][T11726] EXT4-fs: Ignoring removed bh option [ 159.506435][T11726] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.521077][T11726] EXT4-fs (loop4): 1 truncate cleaned up [ 159.547634][T11726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.642368][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.964340][T11738] loop4: detected capacity change from 0 to 2048 [ 160.000049][T11740] tmpfs: Bad value for 'mpol' [ 160.010738][T11738] pim6reg: entered allmulticast mode [ 160.066021][T11743] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2923'. [ 160.070591][T11745] serio: Serial port ptm0 [ 160.076690][T11740] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2923'. [ 160.106480][T11743] ip6t_REJECT: ECHOREPLY is not supported [ 160.602278][T11782] FAULT_INJECTION: forcing a failure. [ 160.602278][T11782] name failslab, interval 1, probability 0, space 0, times 0 [ 160.615010][T11782] CPU: 1 UID: 0 PID: 11782 Comm: syz.4.2937 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 160.615046][T11782] Tainted: [W]=WARN [ 160.615053][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.615068][T11782] Call Trace: [ 160.615076][T11782] [ 160.615086][T11782] dump_stack_lvl+0xf2/0x150 [ 160.615173][T11782] dump_stack+0x15/0x1a [ 160.615196][T11782] should_fail_ex+0x24a/0x260 [ 160.615256][T11782] should_failslab+0x8f/0xb0 [ 160.615338][T11782] kmem_cache_alloc_noprof+0x52/0x320 [ 160.615366][T11782] ? copy_fs_struct+0x31/0x110 [ 160.615392][T11782] copy_fs_struct+0x31/0x110 [ 160.615412][T11782] copy_fs+0x5a/0xf0 [ 160.615441][T11782] copy_process+0xc91/0x1f50 [ 160.615498][T11782] kernel_clone+0x167/0x5e0 [ 160.615534][T11782] ? vfs_write+0x644/0x920 [ 160.615609][T11782] __x64_sys_clone+0xe7/0x120 [ 160.615651][T11782] x64_sys_call+0x2d7e/0x2dc0 [ 160.615683][T11782] do_syscall_64+0xc9/0x1c0 [ 160.615713][T11782] ? clear_bhb_loop+0x55/0xb0 [ 160.615792][T11782] ? clear_bhb_loop+0x55/0xb0 [ 160.615827][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.615866][T11782] RIP: 0033:0x7fe6f404d169 [ 160.615881][T11782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.615899][T11782] RSP: 002b:00007fe6f2674fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 160.615916][T11782] RAX: ffffffffffffffda RBX: 00007fe6f4266160 RCX: 00007fe6f404d169 [ 160.615976][T11782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 160.615990][T11782] RBP: 00007fe6f2675090 R08: 0000000000000000 R09: 0000000000000000 [ 160.616001][T11782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 160.616074][T11782] R13: 0000000000000000 R14: 00007fe6f4266160 R15: 00007ffcbe40b708 [ 160.616111][T11782] [ 161.627249][T11793] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 161.902752][ T149] batman_adv: batadv1: IGMP Querier appeared [ 162.108999][T11833] loop9: detected capacity change from 0 to 512 [ 162.156400][T11833] EXT4-fs (loop9): 1 orphan inode deleted [ 162.174997][T11833] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.186439][T11842] netlink: 'syz.4.2962': attribute type 1 has an invalid length. [ 162.195459][ T4874] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:10: Failed to release dquot type 1 [ 162.208652][T11833] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.388940][T11862] netlink: 'syz.4.2970': attribute type 29 has an invalid length. [ 162.405336][T11862] netlink: 'syz.4.2970': attribute type 29 has an invalid length. [ 162.712828][T11884] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 162.819415][T11884] selinux_netlink_send: 50 callbacks suppressed [ 162.819437][T11884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11884 comm=syz.4.2980 [ 162.870141][T11896] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 162.956809][T11884] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.966015][T11884] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.974848][T11884] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.983709][T11884] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.029456][T11902] loop2: detected capacity change from 0 to 128 [ 163.057697][T11884] bond0: (slave geneve2): making interface the new active one [ 163.065675][T11884] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 163.123036][T11902] vlan2: entered allmulticast mode [ 163.379855][T11913] xt_hashlimit: max too large, truncated to 1048576 [ 163.398223][ T4008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.582828][T11920] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 163.726332][T11932] serio: Serial port ptm0 [ 163.865630][T11937] loop2: detected capacity change from 0 to 1024 [ 163.904481][T11937] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.906763][T11944] loop9: detected capacity change from 0 to 512 [ 163.933493][T11944] EXT4-fs: Ignoring removed bh option [ 163.943591][T11944] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 163.953922][T11937] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 163.975946][T11937] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.995356][T11944] EXT4-fs (loop9): 1 truncate cleaned up [ 164.001633][T11937] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 164.011618][T11944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.034816][T11937] EXT4-fs (loop2): Remounting filesystem read-only [ 164.055897][T11937] __quota_error: 55 callbacks suppressed [ 164.055980][T11937] Quota error (device loop2): write_blk: dquota write failed [ 164.069093][T11937] Quota error (device loop2): write_blk: dquota write failed [ 164.076554][T11937] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 164.107505][T11937] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 164.118139][T11937] EXT4-fs (loop2): 1 orphan inode deleted [ 164.124510][T11937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 164.136447][ T4008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.136691][T11937] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 164.152950][T11937] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.529497][T11964] loop2: detected capacity change from 0 to 164 [ 164.538457][T11964] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 164.569950][T11964] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 164.701846][T11974] loop2: detected capacity change from 0 to 256 [ 164.729691][T11974] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.766469][T11974] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.865904][ T29] audit: type=1400 audit(1740792850.804:844): avc: denied { setopt } for pid=11978 comm="syz.0.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.073710][T11979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.406393][T11979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.635197][T11979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.758310][T11979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.910373][T11979] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.969282][T11979] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.018807][T11979] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.063209][T11979] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.378218][ T29] audit: type=1400 audit(1740792852.324:845): avc: denied { create } for pid=12020 comm="syz.0.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 166.438965][ T29] audit: type=1400 audit(1740792852.384:846): avc: denied { read } for pid=12024 comm="syz.0.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.995191][T12048] loop5: detected capacity change from 0 to 2048 [ 167.180347][T12048] loop5: unable to read partition table [ 167.200882][T12048] loop5: partition table beyond EOD, truncated [ 167.207211][T12048] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 167.276492][T12070] FAULT_INJECTION: forcing a failure. [ 167.276492][T12070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.289667][T12070] CPU: 0 UID: 0 PID: 12070 Comm: syz.9.3049 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 167.289700][T12070] Tainted: [W]=WARN [ 167.289708][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.289721][T12070] Call Trace: [ 167.289789][T12070] [ 167.289798][T12070] dump_stack_lvl+0xf2/0x150 [ 167.289851][T12070] dump_stack+0x15/0x1a [ 167.289939][T12070] should_fail_ex+0x24a/0x260 [ 167.289970][T12070] should_fail+0xb/0x10 [ 167.289998][T12070] should_fail_usercopy+0x1a/0x20 [ 167.290030][T12070] _copy_from_user+0x1c/0xa0 [ 167.290088][T12070] copy_msghdr_from_user+0x54/0x2a0 [ 167.290121][T12070] ? __fget_files+0x17c/0x1c0 [ 167.290170][T12070] __sys_sendmmsg+0x1e8/0x4b0 [ 167.290218][T12070] __x64_sys_sendmmsg+0x57/0x70 [ 167.290252][T12070] x64_sys_call+0x29aa/0x2dc0 [ 167.290279][T12070] do_syscall_64+0xc9/0x1c0 [ 167.290403][T12070] ? clear_bhb_loop+0x55/0xb0 [ 167.290431][T12070] ? clear_bhb_loop+0x55/0xb0 [ 167.290458][T12070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.290485][T12070] RIP: 0033:0x7fca6041d169 [ 167.290517][T12070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.290537][T12070] RSP: 002b:00007fca5ea87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 167.290557][T12070] RAX: ffffffffffffffda RBX: 00007fca60635fa0 RCX: 00007fca6041d169 [ 167.290570][T12070] RDX: 00000000000003ef RSI: 0000400000000180 RDI: 0000000000000004 [ 167.290584][T12070] RBP: 00007fca5ea87090 R08: 0000000000000000 R09: 0000000000000000 [ 167.290596][T12070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.290609][T12070] R13: 0000000000000000 R14: 00007fca60635fa0 R15: 00007ffd6996dff8 [ 167.290628][T12070] [ 167.481711][T12067] netlink: 'syz.2.3047': attribute type 16 has an invalid length. [ 167.489669][T12067] netlink: 'syz.2.3047': attribute type 17 has an invalid length. [ 167.574232][T12081] program syz.4.3052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.600159][ T29] audit: type=1400 audit(1740792853.544:847): avc: denied { ioctl } for pid=12082 comm="syz.9.3053" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.626736][T12067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.646958][T12081] loop4: detected capacity change from 0 to 164 [ 167.727402][ T2998] loop5: unable to read partition table [ 167.733194][ T2998] loop5: partition table beyond EOD, truncated [ 167.757397][T12081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3052'. [ 167.766458][T12081] unsupported nla_type 19467 [ 167.815848][ T29] audit: type=1326 audit(1740792853.754:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12086 comm="syz.2.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 167.839595][ T29] audit: type=1326 audit(1740792853.754:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12086 comm="syz.2.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 168.208597][T12112] loop9: detected capacity change from 0 to 256 [ 168.298080][T12117] FAULT_INJECTION: forcing a failure. [ 168.298080][T12117] name failslab, interval 1, probability 0, space 0, times 0 [ 168.310853][T12117] CPU: 0 UID: 0 PID: 12117 Comm: syz.0.3067 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 168.310894][T12117] Tainted: [W]=WARN [ 168.310914][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.310931][T12117] Call Trace: [ 168.310939][T12117] [ 168.310949][T12117] dump_stack_lvl+0xf2/0x150 [ 168.311063][T12117] dump_stack+0x15/0x1a [ 168.311088][T12117] should_fail_ex+0x24a/0x260 [ 168.311123][T12117] ? do_eventfd+0x58/0x1b0 [ 168.311153][T12117] should_failslab+0x8f/0xb0 [ 168.311249][T12117] __kmalloc_cache_noprof+0x4e/0x320 [ 168.311276][T12117] ? ksys_write+0x176/0x1b0 [ 168.311308][T12117] do_eventfd+0x58/0x1b0 [ 168.311338][T12117] __x64_sys_eventfd+0x20/0x30 [ 168.311384][T12117] x64_sys_call+0x2626/0x2dc0 [ 168.311416][T12117] do_syscall_64+0xc9/0x1c0 [ 168.311453][T12117] ? clear_bhb_loop+0x55/0xb0 [ 168.311485][T12117] ? clear_bhb_loop+0x55/0xb0 [ 168.311548][T12117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.311580][T12117] RIP: 0033:0x7f912babd169 [ 168.311600][T12117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.311625][T12117] RSP: 002b:00007f912a127038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 168.311648][T12117] RAX: ffffffffffffffda RBX: 00007f912bcd5fa0 RCX: 00007f912babd169 [ 168.311664][T12117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.311679][T12117] RBP: 00007f912a127090 R08: 0000000000000000 R09: 0000000000000000 [ 168.311694][T12117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.311753][T12117] R13: 0000000000000000 R14: 00007f912bcd5fa0 R15: 00007ffd0c5598c8 [ 168.311775][T12117] [ 168.348957][T12122] loop9: detected capacity change from 0 to 512 [ 168.538378][T12122] EXT4-fs (loop9): 1 orphan inode deleted [ 168.545946][T12122] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.568449][T12139] FAULT_INJECTION: forcing a failure. [ 168.568449][T12139] name failslab, interval 1, probability 0, space 0, times 0 [ 168.571967][ T4874] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:10: Failed to release dquot type 1 [ 168.581404][T12139] CPU: 1 UID: 0 PID: 12139 Comm: syz.5.3076 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 168.581440][T12139] Tainted: [W]=WARN [ 168.581447][T12139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.581460][T12139] Call Trace: [ 168.581469][T12139] [ 168.581476][T12139] dump_stack_lvl+0xf2/0x150 [ 168.581510][T12139] dump_stack+0x15/0x1a [ 168.581531][T12139] should_fail_ex+0x24a/0x260 [ 168.581635][T12139] should_failslab+0x8f/0xb0 [ 168.581675][T12139] kmem_cache_alloc_noprof+0x52/0x320 [ 168.581703][T12139] ? audit_log_start+0x34c/0x6b0 [ 168.581752][T12139] audit_log_start+0x34c/0x6b0 [ 168.581838][T12139] audit_seccomp+0x4b/0x130 [ 168.581875][T12139] __seccomp_filter+0x6fa/0x1180 [ 168.581906][T12139] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.581951][T12139] ? vfs_write+0x644/0x920 [ 168.582054][T12139] __secure_computing+0x9f/0x1c0 [ 168.582084][T12139] syscall_trace_enter+0xd1/0x1f0 [ 168.582108][T12139] ? fpregs_assert_state_consistent+0x83/0xa0 [ 168.582131][T12139] do_syscall_64+0xaa/0x1c0 [ 168.582168][T12139] ? clear_bhb_loop+0x55/0xb0 [ 168.582255][T12139] ? clear_bhb_loop+0x55/0xb0 [ 168.582289][T12139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.582324][T12139] RIP: 0033:0x7f4da6a7d169 [ 168.582344][T12139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.582394][T12139] RSP: 002b:00007f4da50e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 168.582418][T12139] RAX: ffffffffffffffda RBX: 00007f4da6c95fa0 RCX: 00007f4da6a7d169 [ 168.582434][T12139] RDX: fffffffffffffee3 RSI: 0000000000000000 RDI: 0000000000000006 [ 168.582450][T12139] RBP: 00007f4da50e7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.582465][T12139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.582480][T12139] R13: 0000000000000000 R14: 00007f4da6c95fa0 R15: 00007ffcb5326158 [ 168.582567][T12139] [ 168.654748][T12122] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.874418][T12152] loop4: detected capacity change from 0 to 256 [ 168.896585][T12155] erspan0: entered promiscuous mode [ 168.906945][T12155] erspan0: left promiscuous mode [ 169.070675][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 169.070692][ T29] audit: type=1326 audit(1740792855.004:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4da6a74127 code=0x7ffc0000 [ 169.100876][ T29] audit: type=1326 audit(1740792855.004:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4da6a19359 code=0x7ffc0000 [ 169.124439][ T29] audit: type=1326 audit(1740792855.004:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f4da6a7d169 code=0x7ffc0000 [ 169.148056][ T29] audit: type=1326 audit(1740792855.014:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.2.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96782e4127 code=0x7ffc0000 [ 169.171653][ T29] audit: type=1326 audit(1740792855.014:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.2.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9678289359 code=0x7ffc0000 [ 169.195646][ T29] audit: type=1326 audit(1740792855.014:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.2.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f96782ed169 code=0x7ffc0000 [ 169.239853][ T29] audit: type=1326 audit(1740792855.014:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4da6a74127 code=0x7ffc0000 [ 169.263396][ T29] audit: type=1326 audit(1740792855.014:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4da6a19359 code=0x7ffc0000 [ 169.287264][ T29] audit: type=1326 audit(1740792855.014:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f4da6a7d169 code=0x7ffc0000 [ 169.311305][ T29] audit: type=1326 audit(1740792855.024:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.5.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4da6a74127 code=0x7ffc0000 [ 169.471958][ T4008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.630640][T12189] FAULT_INJECTION: forcing a failure. [ 169.630640][T12189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.643796][T12189] CPU: 0 UID: 0 PID: 12189 Comm: syz.9.3093 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 169.643829][T12189] Tainted: [W]=WARN [ 169.643841][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.643854][T12189] Call Trace: [ 169.643860][T12189] [ 169.643868][T12189] dump_stack_lvl+0xf2/0x150 [ 169.643904][T12189] dump_stack+0x15/0x1a [ 169.643930][T12189] should_fail_ex+0x24a/0x260 [ 169.643968][T12189] should_fail+0xb/0x10 [ 169.644060][T12189] should_fail_usercopy+0x1a/0x20 [ 169.644094][T12189] _copy_from_user+0x1c/0xa0 [ 169.644130][T12189] copy_bpf_fprog_from_user+0xda/0x250 [ 169.644182][T12189] sk_setsockopt+0xb4c/0x1f00 [ 169.644208][T12189] sock_setsockopt+0x3c/0x50 [ 169.644231][T12189] __sys_setsockopt+0x13d/0x200 [ 169.644257][T12189] __x64_sys_setsockopt+0x66/0x80 [ 169.644326][T12189] x64_sys_call+0x282e/0x2dc0 [ 169.644354][T12189] do_syscall_64+0xc9/0x1c0 [ 169.644411][T12189] ? clear_bhb_loop+0x55/0xb0 [ 169.644437][T12189] ? clear_bhb_loop+0x55/0xb0 [ 169.644528][T12189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.644556][T12189] RIP: 0033:0x7fca6041d169 [ 169.644573][T12189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.644644][T12189] RSP: 002b:00007fca5ea87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 169.644663][T12189] RAX: ffffffffffffffda RBX: 00007fca60635fa0 RCX: 00007fca6041d169 [ 169.644675][T12189] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000006 [ 169.644686][T12189] RBP: 00007fca5ea87090 R08: 0000000000000010 R09: 0000000000000000 [ 169.644698][T12189] R10: 00004000000a2000 R11: 0000000000000246 R12: 0000000000000001 [ 169.644712][T12189] R13: 0000000000000000 R14: 00007fca60635fa0 R15: 00007ffd6996dff8 [ 169.644748][T12189] [ 169.892535][T12196] serio: Serial port ptm0 [ 169.968232][ T4868] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.021901][T12209] loop4: detected capacity change from 0 to 512 [ 170.043389][T12209] EXT4-fs (loop4): 1 orphan inode deleted [ 170.053504][ T4868] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.064139][ T4864] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 170.081105][T12209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.096828][T12214] serio: Serial port ptm0 [ 170.121716][T12209] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.171185][ T4868] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.227084][T12222] FAULT_INJECTION: forcing a failure. [ 170.227084][T12222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.240425][T12222] CPU: 1 UID: 0 PID: 12222 Comm: syz.9.3102 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 170.240459][T12222] Tainted: [W]=WARN [ 170.240465][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.240477][T12222] Call Trace: [ 170.240482][T12222] [ 170.240489][T12222] dump_stack_lvl+0xf2/0x150 [ 170.240533][T12222] dump_stack+0x15/0x1a [ 170.240559][T12222] should_fail_ex+0x24a/0x260 [ 170.240596][T12222] should_fail+0xb/0x10 [ 170.240628][T12222] should_fail_usercopy+0x1a/0x20 [ 170.240676][T12222] _copy_from_user+0x1c/0xa0 [ 170.240709][T12222] __sys_bpf+0x14e/0x7a0 [ 170.240777][T12222] __x64_sys_bpf+0x43/0x50 [ 170.240875][T12222] x64_sys_call+0x2914/0x2dc0 [ 170.240907][T12222] do_syscall_64+0xc9/0x1c0 [ 170.240943][T12222] ? clear_bhb_loop+0x55/0xb0 [ 170.240977][T12222] ? clear_bhb_loop+0x55/0xb0 [ 170.241046][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.241079][T12222] RIP: 0033:0x7fca6041d169 [ 170.241094][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.241165][T12222] RSP: 002b:00007fca5ea87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.241188][T12222] RAX: ffffffffffffffda RBX: 00007fca60635fa0 RCX: 00007fca6041d169 [ 170.241204][T12222] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 170.241219][T12222] RBP: 00007fca5ea87090 R08: 0000000000000000 R09: 0000000000000000 [ 170.241233][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.241247][T12222] R13: 0000000000000000 R14: 00007fca60635fa0 R15: 00007ffd6996dff8 [ 170.241265][T12222] [ 170.439262][ T4868] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.457029][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.466960][T12228] FAULT_INJECTION: forcing a failure. [ 170.466960][T12228] name failslab, interval 1, probability 0, space 0, times 0 [ 170.479699][T12228] CPU: 1 UID: 0 PID: 12228 Comm: syz.9.3104 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 170.479734][T12228] Tainted: [W]=WARN [ 170.479743][T12228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.479758][T12228] Call Trace: [ 170.479764][T12228] [ 170.479774][T12228] dump_stack_lvl+0xf2/0x150 [ 170.479826][T12228] dump_stack+0x15/0x1a [ 170.479853][T12228] should_fail_ex+0x24a/0x260 [ 170.479956][T12228] should_failslab+0x8f/0xb0 [ 170.479994][T12228] kmem_cache_alloc_node_noprof+0x59/0x320 [ 170.480030][T12228] ? __alloc_skb+0x10b/0x310 [ 170.480058][T12228] __alloc_skb+0x10b/0x310 [ 170.480082][T12228] netlink_alloc_large_skb+0xad/0xe0 [ 170.480193][T12228] netlink_sendmsg+0x3b4/0x6e0 [ 170.480238][T12228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.480278][T12228] __sock_sendmsg+0x140/0x180 [ 170.480457][T12228] ____sys_sendmsg+0x326/0x4b0 [ 170.480485][T12228] __sys_sendmsg+0x19d/0x230 [ 170.480598][T12228] __x64_sys_sendmsg+0x46/0x50 [ 170.480629][T12228] x64_sys_call+0x2734/0x2dc0 [ 170.480661][T12228] do_syscall_64+0xc9/0x1c0 [ 170.480769][T12228] ? clear_bhb_loop+0x55/0xb0 [ 170.480799][T12228] ? clear_bhb_loop+0x55/0xb0 [ 170.480865][T12228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.480899][T12228] RIP: 0033:0x7fca6041d169 [ 170.480918][T12228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.480941][T12228] RSP: 002b:00007fca5ea87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.480961][T12228] RAX: ffffffffffffffda RBX: 00007fca60635fa0 RCX: 00007fca6041d169 [ 170.480973][T12228] RDX: 0000000000000000 RSI: 0000400000000440 RDI: 0000000000000003 [ 170.480986][T12228] RBP: 00007fca5ea87090 R08: 0000000000000000 R09: 0000000000000000 [ 170.481070][T12228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.481081][T12228] R13: 0000000000000000 R14: 00007fca60635fa0 R15: 00007ffd6996dff8 [ 170.481100][T12228] [ 170.486739][T12190] chnl_net:caif_netlink_parms(): no params data found [ 170.870423][ T4868] bridge_slave_1: left allmulticast mode [ 170.876231][ T4868] bridge_slave_1: left promiscuous mode [ 170.882210][ T4868] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.926532][ T4868] bridge_slave_0: left allmulticast mode [ 170.932314][ T4868] bridge_slave_0: left promiscuous mode [ 170.938193][ T4868] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.075269][T12245] netlink: 'syz.2.3108': attribute type 16 has an invalid length. [ 171.083225][T12245] netlink: 'syz.2.3108': attribute type 17 has an invalid length. [ 171.107436][T12254] serio: Serial port ptm0 [ 171.112600][T12252] loop9: detected capacity change from 0 to 2048 [ 171.149530][ T4868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.157301][T12252] ext4: Unknown parameter 'obj_user' [ 171.166970][T12256] loop4: detected capacity change from 0 to 512 [ 171.183901][ T4868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.197512][ T4868] bond0 (unregistering): Released all slaves [ 171.208558][T12256] EXT4-fs (loop4): 1 orphan inode deleted [ 171.227418][T12256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.240433][ T2297] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 171.252241][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.259485][T12190] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.277623][T12256] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.297162][T12190] bridge_slave_0: entered allmulticast mode [ 171.311851][T12190] bridge_slave_0: entered promiscuous mode [ 171.340893][T12245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.357138][ T4868] tipc: Left network mode [ 171.361831][T12190] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.369085][T12190] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.376618][T12190] bridge_slave_1: entered allmulticast mode [ 171.392214][T12190] bridge_slave_1: entered promiscuous mode [ 171.451315][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.452373][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.480502][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.488085][ T4868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.512068][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.519885][ T4868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.533504][ T4868] veth1_macvtap: left promiscuous mode [ 171.540049][ T4868] veth0_macvtap: left promiscuous mode [ 171.545876][ T4868] veth1_vlan: left promiscuous mode [ 171.561572][ T4868] veth0_vlan: left promiscuous mode [ 171.684432][ T4868] team0 (unregistering): Port device team_slave_1 removed [ 171.720182][ T4868] team0 (unregistering): Port device team_slave_0 removed [ 171.747969][ T2297] smc: removing ib device syz2 [ 171.759516][T12283] serio: Serial port ptm0 [ 171.821891][T12285] loop4: detected capacity change from 0 to 512 [ 171.848956][T12285] EXT4-fs (loop4): 1 orphan inode deleted [ 171.855190][T12285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.870496][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 171.899287][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.903295][T12285] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.989920][T12190] team0: Port device team_slave_0 added [ 172.049852][T12190] team0: Port device team_slave_1 added [ 172.074301][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.197332][T12190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.204365][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.230559][T12190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.301124][T12190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.308344][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.334532][T12190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.366786][T12190] hsr_slave_0: entered promiscuous mode [ 172.373056][T12190] hsr_slave_1: entered promiscuous mode [ 172.379165][T12190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.386812][T12190] Cannot create hsr debugfs directory [ 172.404866][ T4868] IPVS: stop unused estimator thread 0... [ 172.748614][T12324] loop4: detected capacity change from 0 to 1024 [ 172.780657][T12324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.846074][T12190] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.855308][T12190] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.865420][T12190] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.881444][T12190] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.957157][ T3612] printk: udevd: 493 output lines suppressed due to ratelimiting [ 173.156227][T12339] tipc: Started in network mode [ 173.161144][T12339] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 173.201416][T12339] tipc: Enabled bearer , priority 10 [ 173.251544][T12190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.361250][T12190] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.413586][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.420716][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.459305][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.466501][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.593527][T12347] SELinux: security_context_str_to_sid () failed with errno=-22 [ 173.621401][T12190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.751578][T12190] veth0_vlan: entered promiscuous mode [ 173.779249][T12369] loop9: detected capacity change from 0 to 512 [ 173.786776][T12190] veth1_vlan: entered promiscuous mode [ 173.799280][T12369] EXT4-fs (loop9): orphan cleanup on readonly fs [ 173.818871][T12190] veth0_macvtap: entered promiscuous mode [ 173.826626][T12190] veth1_macvtap: entered promiscuous mode [ 173.841923][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.848032][T12375] serio: Serial port ptm0 [ 173.852605][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.852624][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.852639][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.852659][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.886665][T12369] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 173.887671][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.921986][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.932535][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.943283][T12190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.949141][T12369] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm +}[@: Failed to acquire dquot type 1 [ 173.969018][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.979538][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.989478][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.999990][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.003043][T12369] EXT4-fs (loop9): 1 truncate cleaned up [ 174.009902][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.009923][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.009938][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.009954][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.046718][T12190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.076553][T12369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.104224][T12369] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 174.115367][T12190] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.124287][T12190] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.133045][T12190] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.141851][T12190] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.197437][T12369] __quota_error: 166 callbacks suppressed [ 174.197454][T12369] Quota error (device loop9): write_blk: dquota write failed [ 174.210821][T12369] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 174.220753][T12369] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm +}[@: Failed to acquire dquot type 1 [ 174.261943][T12369] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 174.294994][T12369] +}[@ (12369) used greatest stack depth: 9272 bytes left [ 174.309057][ T4008] EXT4-fs error (device loop9): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 174.320762][ T8] tipc: Node number set to 4269801488 [ 174.344011][T12391] loop5: detected capacity change from 0 to 512 [ 174.357227][T12391] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 174.357263][ T4008] EXT4-fs error (device loop9): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 174.376307][T12391] EXT4-fs (loop5): invalid journal inode [ 174.382626][T12391] EXT4-fs (loop5): can't get journal size [ 174.398921][T12391] EXT4-fs (loop5): 1 truncate cleaned up [ 174.404992][T12391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.418933][T12290] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 174.469413][T10858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.579145][T12190] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.868667][T12420] loop2: detected capacity change from 0 to 512 [ 174.928532][T12396] chnl_net:caif_netlink_parms(): no params data found [ 174.985136][T12420] EXT4-fs (loop2): 1 orphan inode deleted [ 174.993503][T12333] SELinux: security_context_str_to_sid () failed with errno=-22 [ 175.001708][T12420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.021654][ T4864] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 175.031542][ T4864] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 175.088464][T12420] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.127262][T12396] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.134410][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.173827][T12396] bridge_slave_0: entered allmulticast mode [ 175.190505][T12396] bridge_slave_0: entered promiscuous mode [ 175.210836][ T4874] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.251262][T12396] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.258543][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.289318][T12396] bridge_slave_1: entered allmulticast mode [ 175.306192][T12396] bridge_slave_1: entered promiscuous mode [ 175.341211][ T4874] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.387525][T12396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.401015][ T4874] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.417804][T12396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.513110][ T4874] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.573229][T12396] team0: Port device team_slave_0 added [ 175.592909][T12396] team0: Port device team_slave_1 added [ 175.640110][T12396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.647175][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.673164][T12396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.737970][T12396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.744966][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.771048][T12396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.819231][ T4874] bridge_slave_1: left allmulticast mode [ 175.824939][ T4874] bridge_slave_1: left promiscuous mode [ 175.830834][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.862781][ T4874] bridge_slave_0: left allmulticast mode [ 175.868634][ T4874] bridge_slave_0: left promiscuous mode [ 175.874349][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.058477][ T4874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.083763][ T4874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.094018][ T4874] bond0 (unregistering): Released all slaves [ 176.108690][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.203084][T12396] hsr_slave_0: entered promiscuous mode [ 176.216499][T12396] hsr_slave_1: entered promiscuous mode [ 176.222363][T12396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.239154][T12396] Cannot create hsr debugfs directory [ 176.253038][ T4874] hsr_slave_0: left promiscuous mode [ 176.259796][ T4874] hsr_slave_1: left promiscuous mode [ 176.269561][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.277109][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.303265][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.310867][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.335447][ T4874] veth1_macvtap: left promiscuous mode [ 176.349065][ T4874] veth0_macvtap: left promiscuous mode [ 176.354700][ T4874] veth1_vlan: left promiscuous mode [ 176.371977][ T4874] veth0_vlan: left promiscuous mode [ 176.401016][T11246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.525262][ T4874] team0 (unregistering): Port device team_slave_1 removed [ 176.535002][ T4874] team0 (unregistering): Port device team_slave_0 removed [ 176.613719][ T29] audit: type=1400 audit(1740792862.554:1364): avc: denied { name_connect } for pid=12482 comm="syz.2.3180" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 176.715057][T12439] chnl_net:caif_netlink_parms(): no params data found [ 176.793986][T12396] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.826060][T12486] loop2: detected capacity change from 0 to 1764 [ 176.840574][ T29] audit: type=1400 audit(1740792862.784:1365): avc: denied { mounton } for pid=12482 comm="syz.2.3180" path="/68/file0/file0" dev="loop2" ino=1986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 176.848263][T12495] loop5: detected capacity change from 0 to 1024 [ 176.872666][T12439] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.879863][T12439] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.887261][T12439] bridge_slave_0: entered allmulticast mode [ 176.893906][T12439] bridge_slave_0: entered promiscuous mode [ 176.894651][T12495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.912962][T12396] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.925393][T12439] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.932633][T12439] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.940649][T12439] bridge_slave_1: entered allmulticast mode [ 176.947880][T12439] bridge_slave_1: entered promiscuous mode [ 176.966412][T12439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.977089][T12396] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.988970][T12439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.011372][T12439] team0: Port device team_slave_0 added [ 177.018558][T12439] team0: Port device team_slave_1 added [ 177.041992][T12396] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.073752][T12439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.080920][T12439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.106994][T12439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.119297][T12439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.126303][T12439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.152349][T12439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.209343][T12396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.255509][T12396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.270182][T12439] hsr_slave_0: entered promiscuous mode [ 177.286675][T12439] hsr_slave_1: entered promiscuous mode [ 177.292638][T12439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.300391][T12439] Cannot create hsr debugfs directory [ 177.306194][T12396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.323519][T12396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.421857][T12396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.518974][T12396] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.535520][T12290] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 177.567110][ T2297] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.574301][ T2297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.584482][T12501] SELinux: security_context_str_to_sid () failed with errno=-22 [ 177.604345][ T2297] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.611496][ T2297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.738762][T12510] loop4: detected capacity change from 0 to 764 [ 177.748108][T12396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.763395][T12510] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 177.794113][T12439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.831368][T12439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.854298][T12439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.883680][T12439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.965572][T12396] veth0_vlan: entered promiscuous mode [ 177.989192][T12439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.011100][T12439] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.021203][T12396] veth1_vlan: entered promiscuous mode [ 178.038903][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.046245][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.059767][ T2297] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.066930][ T2297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.093029][T12396] veth0_macvtap: entered promiscuous mode [ 178.102160][T12396] veth1_macvtap: entered promiscuous mode [ 178.144802][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.155393][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.165332][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.175841][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.185788][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.196342][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.206325][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.216800][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.228496][T12396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.255008][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.265671][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.275574][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.286424][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.296280][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.306732][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.316779][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.327425][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.337167][T12525] loop4: detected capacity change from 0 to 1024 [ 178.338924][T12396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.364346][T12396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.373123][T12396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.381924][T12396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.390869][T12396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.419353][T12525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.512355][T12439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.573081][T12190] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.596494][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 178.608475][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 178.683936][T12439] veth0_vlan: entered promiscuous mode [ 178.692928][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.705205][T12439] veth1_vlan: entered promiscuous mode [ 178.727686][T12439] veth0_macvtap: entered promiscuous mode [ 178.740934][T12439] veth1_macvtap: entered promiscuous mode [ 178.764205][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.774983][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.784929][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.795455][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.805465][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.816095][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.826135][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.836594][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.846563][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.857076][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.868353][T12439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.876947][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.887573][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.897522][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.907973][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.917810][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.928327][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.938167][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.948913][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.958746][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.969436][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.980503][T12439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.996403][T12439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.005508][T12439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.014284][T12439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.023101][T12439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.171621][T12579] loop4: detected capacity change from 0 to 1024 [ 179.180931][T12579] EXT4-fs: dax option not supported [ 179.213384][ T29] audit: type=1326 audit(1740792865.154:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.272962][ T29] audit: type=1326 audit(1740792865.184:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.296843][ T29] audit: type=1326 audit(1740792865.184:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.320485][ T29] audit: type=1326 audit(1740792865.184:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.344237][ T29] audit: type=1326 audit(1740792865.184:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.368544][ T29] audit: type=1326 audit(1740792865.184:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.392355][ T29] audit: type=1326 audit(1740792865.184:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.401257][T12568] loop4: detected capacity change from 0 to 512 [ 179.416097][ T29] audit: type=1326 audit(1740792865.184:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.416151][ T29] audit: type=1326 audit(1740792865.184:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.416310][ T29] audit: type=1326 audit(1740792865.184:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc90c5d169 code=0x7ffc0000 [ 179.524068][T12585] vlan2: entered allmulticast mode [ 179.537225][T12589] loop2: detected capacity change from 0 to 512 [ 179.551926][T12589] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.573287][T12589] EXT4-fs (loop2): 1 truncate cleaned up [ 179.579691][T12589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.595198][T12589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3207'. [ 179.626955][T12568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.643820][T12596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.644666][T12568] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.656956][T12589] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3207'. [ 179.733253][T11246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.755186][T12603] SELinux: security_context_str_to_sid ({˙) failed with errno=-22 [ 179.769245][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 179.795728][T10871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.828888][T12610] tracefs: Unknown parameter 'trans' [ 179.842269][T12610] loop0: detected capacity change from 0 to 1024 [ 179.849610][T12610] EXT4-fs: Ignoring removed orlov option [ 179.855331][T12610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.879672][T12610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.031326][T12396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.054786][T12625] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 180.057177][T12627] vlan2: entered allmulticast mode [ 180.061420][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 180.061592][T12625] vhci_hcd vhci_hcd.0: Device attached [ 180.102116][T12625] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 180.193536][T12638] FAULT_INJECTION: forcing a failure. [ 180.193536][T12638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.206764][T12638] CPU: 0 UID: 0 PID: 12638 Comm: syz.0.3223 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 180.206797][T12638] Tainted: [W]=WARN [ 180.206805][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.206819][T12638] Call Trace: [ 180.206875][T12638] [ 180.206884][T12638] dump_stack_lvl+0xf2/0x150 [ 180.206929][T12638] dump_stack+0x15/0x1a [ 180.206956][T12638] should_fail_ex+0x24a/0x260 [ 180.206991][T12638] should_fail+0xb/0x10 [ 180.207098][T12638] should_fail_usercopy+0x1a/0x20 [ 180.207136][T12638] strncpy_from_user+0x25/0x210 [ 180.207159][T12638] ? kmem_cache_alloc_noprof+0x295/0x320 [ 180.207180][T12638] ? getname_flags+0x81/0x3b0 [ 180.207264][T12638] getname_flags+0xb0/0x3b0 [ 180.207340][T12638] __x64_sys_rmdir+0x21/0x40 [ 180.207410][T12638] x64_sys_call+0x27ca/0x2dc0 [ 180.207513][T12638] do_syscall_64+0xc9/0x1c0 [ 180.207585][T12638] ? clear_bhb_loop+0x55/0xb0 [ 180.207629][T12638] ? clear_bhb_loop+0x55/0xb0 [ 180.207662][T12638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.207688][T12638] RIP: 0033:0x7effbea3d169 [ 180.207703][T12638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.207783][T12638] RSP: 002b:00007effbd0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 180.207807][T12638] RAX: ffffffffffffffda RBX: 00007effbec55fa0 RCX: 00007effbea3d169 [ 180.207822][T12638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00004000000000c0 [ 180.207879][T12638] RBP: 00007effbd0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 180.207890][T12638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.207902][T12638] R13: 0000000000000000 R14: 00007effbec55fa0 R15: 00007ffde86acc78 [ 180.207951][T12638] [ 180.525839][ T3608] usb 6-1: SetAddress Request (2) to port 0 [ 180.535655][ T3608] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 180.544881][T12653] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3230'. [ 180.592483][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'. [ 180.602913][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'. [ 180.620752][T12660] loop5: detected capacity change from 0 to 512 [ 180.638286][T12662] loop0: detected capacity change from 0 to 512 [ 180.639545][T12660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.658421][T12660] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.660093][T12662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.669661][T12660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.681192][T12662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.699393][T12662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.761081][T12669] loop5: detected capacity change from 0 to 2048 [ 180.812077][T12628] vhci_hcd: connection reset by peer [ 180.818444][ T50] vhci_hcd: stop threads [ 180.822190][T12669] loop5: p2 p3 p7 [ 180.822730][ T50] vhci_hcd: release socket [ 180.830917][ T50] vhci_hcd: disconnect device [ 180.953116][T12596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.220694][T12698] FAULT_INJECTION: forcing a failure. [ 181.220694][T12698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.233839][T12698] CPU: 1 UID: 0 PID: 12698 Comm: syz.5.3247 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 181.233935][T12698] Tainted: [W]=WARN [ 181.233942][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.233954][T12698] Call Trace: [ 181.233963][T12698] [ 181.233972][T12698] dump_stack_lvl+0xf2/0x150 [ 181.234092][T12698] dump_stack+0x15/0x1a [ 181.234131][T12698] should_fail_ex+0x24a/0x260 [ 181.234165][T12698] should_fail+0xb/0x10 [ 181.234191][T12698] should_fail_usercopy+0x1a/0x20 [ 181.234232][T12698] _copy_from_user+0x1c/0xa0 [ 181.234288][T12698] kstrtouint_from_user+0x76/0xe0 [ 181.234330][T12698] ? 0xffffffff81000000 [ 181.234346][T12698] ? selinux_file_permission+0x22a/0x360 [ 181.234396][T12698] proc_fail_nth_write+0x4f/0x150 [ 181.234430][T12698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.234461][T12698] vfs_write+0x27d/0x920 [ 181.234505][T12698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.234534][T12698] ? __fget_files+0x17c/0x1c0 [ 181.234650][T12698] ksys_write+0xe8/0x1b0 [ 181.234729][T12698] __x64_sys_write+0x42/0x50 [ 181.234756][T12698] x64_sys_call+0x287e/0x2dc0 [ 181.234900][T12698] do_syscall_64+0xc9/0x1c0 [ 181.234971][T12698] ? clear_bhb_loop+0x55/0xb0 [ 181.235005][T12698] ? clear_bhb_loop+0x55/0xb0 [ 181.235037][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.235074][T12698] RIP: 0033:0x7f6675b2bc1f [ 181.235088][T12698] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 181.235105][T12698] RSP: 002b:00007f6674197030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 181.235130][T12698] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6675b2bc1f [ 181.235145][T12698] RDX: 0000000000000001 RSI: 00007f66741970a0 RDI: 0000000000000003 [ 181.235238][T12698] RBP: 00007f6674197090 R08: 0000000000000000 R09: 0000000000000000 [ 181.235250][T12698] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 181.235263][T12698] R13: 0000000000000000 R14: 00007f6675d45fa0 R15: 00007ffecb851208 [ 181.235284][T12698] [ 181.509967][T12710] FAULT_INJECTION: forcing a failure. [ 181.509967][T12710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.523178][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.5.3251 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 181.523261][T12710] Tainted: [W]=WARN [ 181.523270][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.523283][T12710] Call Trace: [ 181.523289][T12710] [ 181.523296][T12710] dump_stack_lvl+0xf2/0x150 [ 181.523398][T12710] dump_stack+0x15/0x1a [ 181.523425][T12710] should_fail_ex+0x24a/0x260 [ 181.523472][T12710] should_fail+0xb/0x10 [ 181.523570][T12710] should_fail_usercopy+0x1a/0x20 [ 181.523605][T12710] _copy_from_iter+0xd5/0xd00 [ 181.523699][T12710] ? kmalloc_reserve+0x16e/0x190 [ 181.523725][T12710] ? __build_skb_around+0x196/0x1f0 [ 181.523752][T12710] ? __alloc_skb+0x21f/0x310 [ 181.523780][T12710] ? __virt_addr_valid+0x1ed/0x250 [ 181.523870][T12710] ? __check_object_size+0x364/0x520 [ 181.523901][T12710] netlink_sendmsg+0x460/0x6e0 [ 181.523947][T12710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.523989][T12710] __sock_sendmsg+0x140/0x180 [ 181.524094][T12710] ____sys_sendmsg+0x326/0x4b0 [ 181.524167][T12710] __sys_sendmsg+0x19d/0x230 [ 181.524205][T12710] __x64_sys_sendmsg+0x46/0x50 [ 181.524236][T12710] x64_sys_call+0x2734/0x2dc0 [ 181.524270][T12710] do_syscall_64+0xc9/0x1c0 [ 181.524309][T12710] ? clear_bhb_loop+0x55/0xb0 [ 181.524418][T12710] ? clear_bhb_loop+0x55/0xb0 [ 181.524449][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.524483][T12710] RIP: 0033:0x7f6675b2d169 [ 181.524502][T12710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.524593][T12710] RSP: 002b:00007f6674197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.524617][T12710] RAX: ffffffffffffffda RBX: 00007f6675d45fa0 RCX: 00007f6675b2d169 [ 181.524632][T12710] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 181.524644][T12710] RBP: 00007f6674197090 R08: 0000000000000000 R09: 0000000000000000 [ 181.524656][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.524680][T12710] R13: 0000000000000000 R14: 00007f6675d45fa0 R15: 00007ffecb851208 [ 181.524702][T12710] [ 181.869658][T12727] serio: Serial port ptm0 [ 181.959183][T12731] serio: Serial port ptm0 [ 182.474797][T12596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.534720][T12596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.617770][T12596] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.653783][T12596] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.678817][T12596] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.689851][T12596] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.764199][T12797] serio: Serial port ptm0 [ 182.898304][T12818] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 182.904853][T12818] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.912487][T12818] vhci_hcd vhci_hcd.0: Device attached [ 182.928593][T12819] vhci_hcd: connection closed [ 182.928758][ T50] vhci_hcd: stop threads [ 182.937904][ T50] vhci_hcd: release socket [ 182.942394][ T50] vhci_hcd: disconnect device [ 182.950645][T12824] SET target dimension over the limit! [ 183.119015][T12836] serio: Serial port ptm1 [ 183.634115][T12895] FAULT_INJECTION: forcing a failure. [ 183.634115][T12895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.647422][T12895] CPU: 1 UID: 0 PID: 12895 Comm: syz.4.3331 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 183.647461][T12895] Tainted: [W]=WARN [ 183.647469][T12895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.647494][T12895] Call Trace: [ 183.647501][T12895] [ 183.647510][T12895] dump_stack_lvl+0xf2/0x150 [ 183.647594][T12895] dump_stack+0x15/0x1a [ 183.647615][T12895] should_fail_ex+0x24a/0x260 [ 183.647650][T12895] should_fail+0xb/0x10 [ 183.647676][T12895] should_fail_usercopy+0x1a/0x20 [ 183.647731][T12895] _copy_from_iter+0xd5/0xd00 [ 183.647794][T12895] ? kmalloc_reserve+0x16e/0x190 [ 183.647818][T12895] ? __build_skb_around+0x196/0x1f0 [ 183.647841][T12895] ? __alloc_skb+0x21f/0x310 [ 183.647864][T12895] ? __virt_addr_valid+0x1ed/0x250 [ 183.647954][T12895] ? __check_object_size+0x364/0x520 [ 183.647980][T12895] netlink_sendmsg+0x460/0x6e0 [ 183.648024][T12895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.648069][T12895] __sock_sendmsg+0x140/0x180 [ 183.648099][T12895] ____sys_sendmsg+0x326/0x4b0 [ 183.648126][T12895] __sys_sendmsg+0x19d/0x230 [ 183.648162][T12895] __x64_sys_sendmsg+0x46/0x50 [ 183.648192][T12895] x64_sys_call+0x2734/0x2dc0 [ 183.648236][T12895] do_syscall_64+0xc9/0x1c0 [ 183.648271][T12895] ? clear_bhb_loop+0x55/0xb0 [ 183.648297][T12895] ? clear_bhb_loop+0x55/0xb0 [ 183.648359][T12895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.648387][T12895] RIP: 0033:0x7fe6f404d169 [ 183.648403][T12895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.648480][T12895] RSP: 002b:00007fe6f26b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.648509][T12895] RAX: ffffffffffffffda RBX: 00007fe6f4265fa0 RCX: 00007fe6f404d169 [ 183.648525][T12895] RDX: 0000000000000000 RSI: 0000400000006280 RDI: 0000000000000003 [ 183.648600][T12895] RBP: 00007fe6f26b7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.648616][T12895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.648630][T12895] R13: 0000000000000000 R14: 00007fe6f4265fa0 R15: 00007ffcbe40b708 [ 183.648652][T12895] [ 184.037620][T12923] FAULT_INJECTION: forcing a failure. [ 184.037620][T12923] name failslab, interval 1, probability 0, space 0, times 0 [ 184.050324][T12923] CPU: 1 UID: 0 PID: 12923 Comm: syz.4.3344 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 184.050355][T12923] Tainted: [W]=WARN [ 184.050363][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.050378][T12923] Call Trace: [ 184.050386][T12923] [ 184.050395][T12923] dump_stack_lvl+0xf2/0x150 [ 184.050428][T12923] dump_stack+0x15/0x1a [ 184.050450][T12923] should_fail_ex+0x24a/0x260 [ 184.050478][T12923] should_failslab+0x8f/0xb0 [ 184.050508][T12923] kmem_cache_alloc_noprof+0x52/0x320 [ 184.050534][T12923] ? vm_area_dup+0x98/0x130 [ 184.050563][T12923] vm_area_dup+0x98/0x130 [ 184.050590][T12923] __split_vma+0xf7/0x6a0 [ 184.050619][T12923] vma_modify+0x17d/0x1e0 [ 184.050659][T12923] vma_modify_flags+0xf1/0x120 [ 184.050696][T12923] mlock_fixup+0x113/0x450 [ 184.050725][T12923] apply_vma_lock_flags+0x194/0x240 [ 184.050760][T12923] do_mlock+0x3f4/0x570 [ 184.050786][T12923] ? __secure_computing+0x9f/0x1c0 [ 184.050823][T12923] __x64_sys_mlock+0x36/0x40 [ 184.050845][T12923] x64_sys_call+0x26b2/0x2dc0 [ 184.050870][T12923] do_syscall_64+0xc9/0x1c0 [ 184.050902][T12923] ? clear_bhb_loop+0x55/0xb0 [ 184.050934][T12923] ? clear_bhb_loop+0x55/0xb0 [ 184.050967][T12923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.050997][T12923] RIP: 0033:0x7fe6f404d169 [ 184.051014][T12923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.051036][T12923] RSP: 002b:00007fe6f26b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 184.051058][T12923] RAX: ffffffffffffffda RBX: 00007fe6f4265fa0 RCX: 00007fe6f404d169 [ 184.051073][T12923] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000400000ffc000 [ 184.051087][T12923] RBP: 00007fe6f26b7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.051099][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.051110][T12923] R13: 0000000000000000 R14: 00007fe6f4265fa0 R15: 00007ffcbe40b708 [ 184.051127][T12923] [ 184.258269][ T29] kauditd_printk_skb: 1186 callbacks suppressed [ 184.258287][ T29] audit: type=1400 audit(1740792870.024:2562): avc: denied { write } for pid=12917 comm="syz.1.3342" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 184.287666][ T29] audit: type=1400 audit(1740792870.024:2563): avc: denied { map_create } for pid=12917 comm="syz.1.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 184.311979][ T29] audit: type=1400 audit(1740792870.254:2564): avc: denied { load_policy } for pid=12920 comm="syz.5.3343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 184.397693][ T29] audit: type=1326 audit(1740792870.274:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe6f404bb7c code=0x7ffc0000 [ 184.421319][ T29] audit: type=1326 audit(1740792870.274:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6f404bc1f code=0x7ffc0000 [ 184.444688][ T29] audit: type=1326 audit(1740792870.274:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe6f404bdca code=0x7ffc0000 [ 184.468044][ T29] audit: type=1326 audit(1740792870.274:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f404d169 code=0x7ffc0000 [ 184.491667][ T29] audit: type=1326 audit(1740792870.274:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f404d169 code=0x7ffc0000 [ 184.515454][ T29] audit: type=1400 audit(1740792870.274:2570): avc: denied { map_create } for pid=12917 comm="syz.1.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 184.534806][ T29] audit: type=1400 audit(1740792870.284:2571): avc: denied { map_create } for pid=12917 comm="syz.1.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.010912][T12994] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 185.059123][T13002] FAULT_INJECTION: forcing a failure. [ 185.059123][T13002] name failslab, interval 1, probability 0, space 0, times 0 [ 185.071878][T13002] CPU: 1 UID: 0 PID: 13002 Comm: syz.0.3380 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 185.071910][T13002] Tainted: [W]=WARN [ 185.071918][T13002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.071931][T13002] Call Trace: [ 185.071939][T13002] [ 185.071976][T13002] dump_stack_lvl+0xf2/0x150 [ 185.072010][T13002] dump_stack+0x15/0x1a [ 185.072101][T13002] should_fail_ex+0x24a/0x260 [ 185.072178][T13002] should_failslab+0x8f/0xb0 [ 185.072207][T13002] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 185.072314][T13002] ? shmem_alloc_inode+0x34/0x50 [ 185.072342][T13002] shmem_alloc_inode+0x34/0x50 [ 185.072431][T13002] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 185.072458][T13002] alloc_inode+0x3c/0x160 [ 185.072492][T13002] new_inode+0x1e/0x100 [ 185.072595][T13002] shmem_get_inode+0x24e/0x730 [ 185.072621][T13002] __shmem_file_setup+0x127/0x1f0 [ 185.072656][T13002] shmem_file_setup+0x3b/0x50 [ 185.072738][T13002] __se_sys_memfd_create+0x2e1/0x5a0 [ 185.072781][T13002] __x64_sys_memfd_create+0x31/0x40 [ 185.072805][T13002] x64_sys_call+0x2d4c/0x2dc0 [ 185.072831][T13002] do_syscall_64+0xc9/0x1c0 [ 185.072917][T13002] ? clear_bhb_loop+0x55/0xb0 [ 185.072945][T13002] ? clear_bhb_loop+0x55/0xb0 [ 185.072978][T13002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.073008][T13002] RIP: 0033:0x7effbea3d169 [ 185.073097][T13002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.073115][T13002] RSP: 002b:00007effbd0a0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 185.073138][T13002] RAX: ffffffffffffffda RBX: 000000000000058a RCX: 00007effbea3d169 [ 185.073153][T13002] RDX: 00007effbd0a0ef0 RSI: 0000000000000000 RDI: 00007effbeabec3c [ 185.073165][T13002] RBP: 0000400000000cc0 R08: 00007effbd0a0bb7 R09: 00007effbd0a0e40 [ 185.073177][T13002] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000000 [ 185.073191][T13002] R13: 00007effbd0a0ef0 R14: 00007effbd0a0eb0 R15: 0000400000000200 [ 185.073212][T13002] [ 185.606007][ T3608] usb 6-1: device descriptor read/8, error -110 [ 185.715852][ T3608] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 185.735931][ T3608] usb 6-1: enqueue for inactive port 0 [ 185.773430][ T3608] usb 6-1: enqueue for inactive port 0 [ 185.983686][ T3608] usb 6-1: enqueue for inactive port 0 [ 185.998613][T13098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13098 comm=syz.0.3422 [ 186.109820][T13107] FAULT_INJECTION: forcing a failure. [ 186.109820][T13107] name failslab, interval 1, probability 0, space 0, times 0 [ 186.122624][T13107] CPU: 0 UID: 0 PID: 13107 Comm: syz.1.3427 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 186.122689][T13107] Tainted: [W]=WARN [ 186.122697][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.122712][T13107] Call Trace: [ 186.122718][T13107] [ 186.122727][T13107] dump_stack_lvl+0xf2/0x150 [ 186.122760][T13107] dump_stack+0x15/0x1a [ 186.122798][T13107] should_fail_ex+0x24a/0x260 [ 186.122826][T13107] ? allocate_file_region_entries+0xe1/0x330 [ 186.122977][T13107] should_failslab+0x8f/0xb0 [ 186.123023][T13107] __kmalloc_cache_noprof+0x4e/0x320 [ 186.123050][T13107] ? __pfx_workingset_update_node+0x10/0x10 [ 186.123119][T13107] allocate_file_region_entries+0xe1/0x330 [ 186.123156][T13107] region_chg+0x238/0x2d0 [ 186.123185][T13107] alloc_hugetlb_folio+0x234/0xf40 [ 186.123214][T13107] hugetlb_fault+0x8e5/0x1a70 [ 186.123272][T13107] handle_mm_fault+0x18f9/0x2ac0 [ 186.123313][T13107] ? __rcu_read_unlock+0x4e/0x70 [ 186.123342][T13107] ? mt_find+0x72a/0x890 [ 186.123362][T13107] ? down_read+0x171/0x4b0 [ 186.123399][T13107] ? hugetlb_vma_unlock_read+0x8c/0xb0 [ 186.123486][T13107] __get_user_pages+0xf6a/0x2350 [ 186.123535][T13107] __mm_populate+0x25b/0x3b0 [ 186.123565][T13107] do_mlock+0x4bd/0x570 [ 186.123600][T13107] ? ksys_write+0x176/0x1b0 [ 186.123644][T13107] __x64_sys_mlock+0x36/0x40 [ 186.123810][T13107] x64_sys_call+0x26b2/0x2dc0 [ 186.123843][T13107] do_syscall_64+0xc9/0x1c0 [ 186.123876][T13107] ? clear_bhb_loop+0x55/0xb0 [ 186.123977][T13107] ? clear_bhb_loop+0x55/0xb0 [ 186.124003][T13107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.124057][T13107] RIP: 0033:0x7fdc90c5d169 [ 186.124075][T13107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.124134][T13107] RSP: 002b:00007fdc8f2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 186.124152][T13107] RAX: ffffffffffffffda RBX: 00007fdc90e75fa0 RCX: 00007fdc90c5d169 [ 186.124167][T13107] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00004000007d8000 [ 186.124211][T13107] RBP: 00007fdc8f2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.124222][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.124234][T13107] R13: 0000000000000000 R14: 00007fdc90e75fa0 R15: 00007ffc79906f68 [ 186.124250][T13107] [ 187.169935][T13224] FAULT_INJECTION: forcing a failure. [ 187.169935][T13224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.183250][T13224] CPU: 0 UID: 0 PID: 13224 Comm: syz.5.3477 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 187.183382][T13224] Tainted: [W]=WARN [ 187.183391][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.183406][T13224] Call Trace: [ 187.183413][T13224] [ 187.183422][T13224] dump_stack_lvl+0xf2/0x150 [ 187.183456][T13224] dump_stack+0x15/0x1a [ 187.183563][T13224] should_fail_ex+0x24a/0x260 [ 187.183598][T13224] should_fail+0xb/0x10 [ 187.183709][T13224] should_fail_usercopy+0x1a/0x20 [ 187.183747][T13224] _copy_to_user+0x20/0xa0 [ 187.183770][T13224] simple_read_from_buffer+0xa0/0x110 [ 187.183864][T13224] proc_fail_nth_read+0xf9/0x140 [ 187.183951][T13224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.183987][T13224] vfs_read+0x19b/0x6f0 [ 187.184011][T13224] ? __rcu_read_unlock+0x4e/0x70 [ 187.184032][T13224] ? __fget_files+0x17c/0x1c0 [ 187.184073][T13224] ksys_read+0xe8/0x1b0 [ 187.184111][T13224] __x64_sys_read+0x42/0x50 [ 187.184145][T13224] x64_sys_call+0x2874/0x2dc0 [ 187.184173][T13224] do_syscall_64+0xc9/0x1c0 [ 187.184211][T13224] ? clear_bhb_loop+0x55/0xb0 [ 187.184245][T13224] ? clear_bhb_loop+0x55/0xb0 [ 187.184334][T13224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.184492][T13224] RIP: 0033:0x7f6675b2bb7c [ 187.184509][T13224] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.184592][T13224] RSP: 002b:00007f6674197030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.184615][T13224] RAX: ffffffffffffffda RBX: 00007f6675d45fa0 RCX: 00007f6675b2bb7c [ 187.184630][T13224] RDX: 000000000000000f RSI: 00007f66741970a0 RDI: 0000000000000003 [ 187.184645][T13224] RBP: 00007f6674197090 R08: 0000000000000000 R09: 0000000000000000 [ 187.184686][T13224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.184700][T13224] R13: 0000000000000000 R14: 00007f6675d45fa0 R15: 00007ffecb851208 [ 187.184717][T13224] [ 187.390266][ T3608] usb usb6-port1: attempt power cycle [ 187.471509][T13236] ================================================================== [ 187.479645][T13236] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 187.486443][T13236] [ 187.488768][T13236] write to 0xffff888104415500 of 8 bytes by task 13232 on cpu 0: [ 187.496490][T13236] mas_wmb_replace+0x222/0x14d0 [ 187.501353][T13236] mas_wr_store_entry+0x1530/0x23f0 [ 187.506569][T13236] mas_store_prealloc+0x6bf/0x960 [ 187.511606][T13236] vma_complete+0x3a7/0x760 [ 187.516135][T13236] __split_vma+0x620/0x6a0 [ 187.520570][T13236] vma_modify+0x17d/0x1e0 [ 187.524953][T13236] vma_modify_flags+0xf1/0x120 [ 187.529733][T13236] mprotect_fixup+0x31a/0x5e0 [ 187.534421][T13236] do_mprotect_pkey+0x6cc/0x9a0 [ 187.539277][T13236] __x64_sys_mprotect+0x48/0x60 [ 187.544162][T13236] x64_sys_call+0x2770/0x2dc0 [ 187.548886][T13236] do_syscall_64+0xc9/0x1c0 [ 187.553404][T13236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.559323][T13236] [ 187.561649][T13236] read to 0xffff888104415500 of 8 bytes by task 13236 on cpu 1: [ 187.569277][T13236] mas_walk+0x123/0x320 [ 187.573450][T13236] lock_vma_under_rcu+0x95/0x270 [ 187.578392][T13236] exc_page_fault+0x150/0x650 [ 187.583078][T13236] asm_exc_page_fault+0x26/0x30 [ 187.587939][T13236] [ 187.590308][T13236] value changed: 0xffff888104ed05c1 -> 0xffff888104415500 [ 187.597434][T13236] [ 187.599754][T13236] Reported by Kernel Concurrency Sanitizer on: [ 187.605922][T13236] CPU: 1 UID: 0 PID: 13236 Comm: syz.1.3481 Tainted: G W 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 187.618193][T13236] Tainted: [W]=WARN [ 187.621994][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.632054][T13236] ================================================================== [ 187.978994][ T5157] bond0 (unregistering): Released all slaves [ 187.998551][ T5157] bond1 (unregistering): Released all slaves [ 188.007128][ T5157] bond2 (unregistering): Released all slaves [ 188.036748][ T5157] bond3 (unregistering): Released all slaves [ 188.084322][ T5157] hsr_slave_0: left promiscuous mode [ 188.095460][ T5157] hsr_slave_1: left promiscuous mode [ 188.115464][ T5157] veth1_vlan: left allmulticast mode [ 188.129537][ T5157] veth1_macvtap: left promiscuous mode [ 188.140914][ T5157] veth0_macvtap: left promiscuous mode [ 188.154262][ T5157] veth1_vlan: left promiscuous mode [ 188.165711][ T5157] veth0_vlan: left promiscuous mode [ 189.216087][ T3608] usb usb6-port1: unable to enumerate USB device