last executing test programs: 5m59.057355099s ago: executing program 4 (id=287): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4000000) 5m59.006096829s ago: executing program 4 (id=288): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m58.81913399s ago: executing program 4 (id=293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000e80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x3000044, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x100002, 0x1, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000900)={0x18, 0x0, {0x4, @empty, 'vlan0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev, 'rose0\x00'}}, 0x1e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x9}, 0x18) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb430fb655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$link(0x8, r6, r5) 5m58.79706366s ago: executing program 4 (id=296): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5m58.72767505s ago: executing program 4 (id=298): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@grpquota}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002020000000000000000edff09030000000000000000000002000000000000"], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat2(r0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000300)={0x101000, 0x1b0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020d78200000000000000000000008500000107000000950000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000280), &(0x7f0000001340)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], 0x0, 0x8f, &(0x7f0000000c80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x13, 0xb, &(0x7f0000000ec0)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000f40)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[0x1, 0xffffffffffffffff], &(0x7f0000001000)=[{0x0, 0x2, 0xe, 0x9}], 0x10, 0x800, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r11], 0x20}}, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$FS_IOC_RESVSP(r14, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x5, 0x3}) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@o_path={&(0x7f0000001100)='./bus\x00', 0x0, 0x8000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x1c, 0x2c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7fffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x8, 0x3c, &(0x7f0000000b00)=""/60, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0x2, 0xffff, 0x9}, 0x10, r6, r7, 0x6, &(0x7f0000001180)=[r8, 0xffffffffffffffff, r14, r15], &(0x7f00000011c0)=[{0x4, 0x4, 0x5, 0xb}, {0x2, 0x3, 0xf}, {0x2, 0x4, 0xc, 0xa}, {0x5, 0x5, 0xc, 0x2}, {0x1, 0x5, 0x5, 0x8}, {0x5, 0x4, 0xa, 0xfd19c4296cb78e68}], 0x10, 0x5, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m58.695917241s ago: executing program 4 (id=300): pipe(&(0x7f0000000500)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYRESDEC, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r3, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b708001a000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000700000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESDEC=r4], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000740)='mm_compaction_migratepages\x00', r2, 0x0, 0x1}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='kfree\x00', r7, 0x0, 0x200}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00a&\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r9, 0x6, 0x0, 0xf8, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES16=r10, @ANYRES32, @ANYBLOB="0800000001000000", @ANYRES32=r8, @ANYBLOB="b5e757510760e4c905000000cb7f6d31e8cd2cfb377d39d0a749267b3c79979e31b9268758832fb0bce7", @ANYRES16=r11, @ANYBLOB, @ANYRESOCT=r3], 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000800)={'syztnl1\x00', r13, 0x7808, 0x8000, 0x0, 0x7b, {{0x17, 0x4, 0x1, 0x5, 0x5c, 0x68, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0xa, 0xffffffffffffffff, [{0x0, 0x4, 'R)'}]}, @generic={0x86, 0xa, "cff1fd8198e614d0"}, @rr={0x7, 0xb, 0xfb, [@local, @multicast1]}, @generic={0x132, 0x12, "a49b529efa0743ae233b2f1df6afce93"}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x2}, {@multicast2, 0x3}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r14, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5m43.622841129s ago: executing program 32 (id=300): pipe(&(0x7f0000000500)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYRESDEC, @ANYRES8=r2, @ANYRES32=r0, @ANYRESOCT=r3, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b708001a000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000700000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESDEC=r4], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000740)='mm_compaction_migratepages\x00', r2, 0x0, 0x1}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='kfree\x00', r7, 0x0, 0x200}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00a&\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r9, 0x6, 0x0, 0xf8, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES16=r10, @ANYRES32, @ANYBLOB="0800000001000000", @ANYRES32=r8, @ANYBLOB="b5e757510760e4c905000000cb7f6d31e8cd2cfb377d39d0a749267b3c79979e31b9268758832fb0bce7", @ANYRES16=r11, @ANYBLOB, @ANYRESOCT=r3], 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000800)={'syztnl1\x00', r13, 0x7808, 0x8000, 0x0, 0x7b, {{0x17, 0x4, 0x1, 0x5, 0x5c, 0x68, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0xa, 0xffffffffffffffff, [{0x0, 0x4, 'R)'}]}, @generic={0x86, 0xa, "cff1fd8198e614d0"}, @rr={0x7, 0xb, 0xfb, [@local, @multicast1]}, @generic={0x132, 0x12, "a49b529efa0743ae233b2f1df6afce93"}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x2}, {@multicast2, 0x3}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r14, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m5.239603432s ago: executing program 5 (id=5377): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 1m5.239303352s ago: executing program 5 (id=5378): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5516}) 1m4.343497646s ago: executing program 5 (id=5394): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/106, 0x6a}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1a, 0xf, &(0x7f0000000a40)=@ringbuf, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r7, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) chmod(&(0x7f0000000000)='./file0\x00', 0x101) 1m3.153928292s ago: executing program 5 (id=5406): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}, 0x120) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000070000000500000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/162, 0xa2, 0x0, &(0x7f0000000480)=""/77, 0x4d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000010000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000640)='GPL\x00', 0x6, 0x1b, &(0x7f0000000680)=""/27, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r5 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b1a00000042bb4816cbe5383e0004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESHEX=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) getrusage(0x1, &(0x7f0000000780)) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4000) 1m2.450815925s ago: executing program 5 (id=5417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_page_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = dup(r3) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7], 0x6c}, 0x1, 0xba01}, 0x0) 1m2.106600206s ago: executing program 5 (id=5423): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) getpeername$packet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1m2.103609236s ago: executing program 33 (id=5423): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) getpeername$packet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 53.838228074s ago: executing program 6 (id=5497): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x3f}, 0x0) 53.779211135s ago: executing program 6 (id=5499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) 53.765447684s ago: executing program 6 (id=5500): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002b00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x7a1, 0x2, 0x80000000, {0x2, 0x2, 0xf, 0xc2a, 0x5, 0x2}, {0x5, 0x2, 0x5, 0x8, 0x4, 0x8}, 0x4, 0x3, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ae6}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) dup3(r2, r3, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 53.743749185s ago: executing program 6 (id=5501): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 53.169599957s ago: executing program 6 (id=5517): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_dev$loop(&(0x7f00000001c0), 0x75c, 0x107182) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b1a00000042bb4816cbe5383e0004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESHEX=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) getrusage(0x1, &(0x7f0000000780)) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) 52.943119988s ago: executing program 34 (id=5518): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}, 0x120) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000070000000500000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/162, 0xa2, 0x0, &(0x7f0000000480)=""/77, 0x4d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000010000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000640)='GPL\x00', 0x6, 0x1b, &(0x7f0000000680)=""/27, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r5 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b1a00000042bb4816cbe5383e0004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESHEX=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) getrusage(0x1, &(0x7f0000000780)) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) 2.439464469s ago: executing program 1 (id=6174): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_dev$loop(&(0x7f00000001c0), 0x75c, 0x107182) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) capget(&(0x7f0000000300)={0x20071026}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = gettid() r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 1.479387294s ago: executing program 1 (id=6190): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz7ttAkEABNDZ+9g+yZJdgiMX4T4sl+MrgYiQAohphirIkdCi+9ACELyXjGZXmtWGhzq0S9Yh2ZaS9Ekty9ka+WrmeClJl0tN6b6Py82YIR9vuz6ft/5ahiR/P1PbvKeMtTbzaJL1qfynPdfTNPa7v99PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5XQMAAP//jJwQkg==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000e70f00000700000000002000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x20000085) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000001040)=0x80000004, 0x4) listen(r2, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r3, &(0x7f00000031c0), 0x12) r4 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x2, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fefffe340000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r7 = timerfd_create(0x8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0x49, &(0x7f00000006c0)=ANY=[@ANYBLOB="18eaff0000000000000040000000000018110000", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000e8000000853e5f6aefabd00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 1.081324246s ago: executing program 3 (id=6199): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100000000000000100001", 0xd, 0xfffffffffffffffd) 1.055777756s ago: executing program 3 (id=6201): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000380)=0x9, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffefffffff0180c2000000080045000000004e214e200010907802000000000000dc1a6ad9aafe34d7e613b636e2680fb500"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21885e, &(0x7f0000000280)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x50a, &(0x7f00000019c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x1, 0x10, 0x4, 0x3, {{0x24, 0x4, 0x3, 0x0, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010100, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x46, 0x1, 0xe, [{@private=0xa010101, 0xe77}]}, @ssrr={0x89, 0x13, 0x87, [@private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x52, 0x0, [{0x2, 0xf, "88d97efa9302c9d6cf46c3a22e"}, {0x5, 0x5, "4b1bf1"}, {0x6, 0xe, "253c6f593d4a528ad1e84fc2"}, {0x2, 0x5, "aff9cc"}, {0x0, 0xd, "47d79410d61013d5d8174c"}, {0x0, 0xd, "af53fe15e4eff562367593"}, {0x5, 0xb, "bed343c16f3aff90ec"}]}, @noop, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 918.691606ms ago: executing program 2 (id=6203): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 910.264076ms ago: executing program 7 (id=6204): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000000c0)="01000100000000000000", 0xa, 0xfffffffffffffffd) 877.380826ms ago: executing program 7 (id=6205): close(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75c, 0x107182) r1 = memfd_create(0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000092900000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000180)="0000001e00", 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup2(r4, r4) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x2}}, 0x26) sendmsg$netlink(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {0x0, 0x8bc}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0xb0) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) pwritev(r1, &(0x7f0000000600)=[{0x0}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 876.896737ms ago: executing program 2 (id=6206): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x7ec91ef8, 0x5, 0x66ff, 0x6}, &(0x7f0000000300)) 861.723537ms ago: executing program 2 (id=6207): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 843.319597ms ago: executing program 2 (id=6208): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x8, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [], @ipv4=@multicast1, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x4e21}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x458) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa1000005000000070195cc4ef7ffffb702000003000000b703000000000000850000007300000095fb9c1d90f575078d40c1bef617122130e491bd37097f9fa938e8073530c0f38e15fed095531dea3b2ccf8b8af844d86e7156ea4cae4449d7ec57ace79e0b05c1c28e3fca58d9f61ab268c8da4a95b81a3fe3d5d49d22dbda0e059ede0c6dbe18ee32d1ab425037101ef344576324ce3297af7d047fc3dc0ff12046c4e22fb7cbfceb247305a3f1d7c7484236ae497b678ad4a9ce37c209831802eb947937091dd0291ea8111e38cc029a49fe53f2c6bc43b9106d410eeca0fa66d9edac80a3b41668200647734357451fa7ec0587ad050ca1a85a824e4f6e3052f8a0439c148fbdacb2e9bcfb51da3e9a04d8d7e90051eaad90b02f4b15f8b457e7a4161084ef19dadf9d0813f77291915f6891713ed5e0bec0cfa69450825a6d927128feb27ca46b9b5156744286d998211a8463a5937e70c0c662588b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='sched_switch\x00', r5}, 0x10) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x8000000, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendto$inet(r6, 0x0, 0x7, 0x20000081, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r3) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x188c2, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5"], 0x0, 0x23e, &(0x7f00000001c0)="$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") 833.008317ms ago: executing program 1 (id=6209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) 792.530117ms ago: executing program 1 (id=6210): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001580)={0x2, 0x0, @empty}, 0xfffffffffffffe57) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x4, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f80)='free_extent_state\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="cd5daec0b5bedb8b2f3cc2db61a7bd27ff924fbc11df95671073591cbcb4b2dae48bb48d79affb6f4045f6e0adf1335e96d43f2b70eb4a56a0a7ae5d18c35f0dda69d0362e397f6ac93334f1fc5dc17fbdda2c832ada524c19a33556d9a9a405e8e5d524476087f05a375f7238fa069373463df81600d0d427e777e74b15b7136c3195ce31d9174ba2c7c1187bbcdd27e0d6ded8e614cf7d4e05558dbff7f8f06710f56393bcfba1e2b55e", @ANYRES32=r3], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0xffffffffffffff5e, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000e80)=""/81}], 0xe) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000480), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x4e}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@loopback, @multicast2, 0xffffffff, 0xffffffff, 'tunl0\x00', 'pim6reg0\x00', {}, {0xff}, 0x67, 0x3, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x1, 0x9, 0x3a1a, 'snmp\x00', 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) rt_tgsigqueueinfo(0x0, 0x0, 0x37, &(0x7f0000000640)={0x15, 0x1ff, 0x7ff}) r6 = socket$netlink(0x10, 0x3, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0100001a00012420041feea501b0080a0108010002000003000000000000000000000000000000000000000000810000000000000000000000000077430ff989bdac664700000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000330000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000002000200000000000000000000004c00140078636263286165732900"/244], 0x13c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) close(r3) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89fc, &(0x7f0000001440)={'veth0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x3, 0x30040001, 0x0, 0x9, 0x0, 0x400000, 0x0, 0x3}}) getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000240)=0xc) 722.643227ms ago: executing program 1 (id=6211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100000000000000100001", 0xd, 0xfffffffffffffffd) 722.257277ms ago: executing program 1 (id=6212): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 546.565208ms ago: executing program 2 (id=6213): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x4100) ioctl$BLKROSET(r0, 0x80041284, 0x0) 487.439418ms ago: executing program 2 (id=6214): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) capget(&(0x7f0000000300)={0x20071026}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = gettid() r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 208.68918ms ago: executing program 3 (id=6215): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000000800200000000000007b00c463ba1355f6789525bef4a6c5cf4a711ad6d5969448207628b79d06", @ANYRES32, @ANYRES8=0x0, @ANYRES8=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000000)) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1ffe6}, {0xfff2, 0x1}, {0x0, 0xf}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 178.68758ms ago: executing program 3 (id=6216): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000000c0)="01000100000000000000", 0xa, 0xfffffffffffffffd) 156.68059ms ago: executing program 0 (id=6217): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private1, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}]}, 0x58}, 0x1, 0x7}, 0x0) 156.21857ms ago: executing program 3 (id=6218): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 120.54887ms ago: executing program 3 (id=6219): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz7ttAkEABNDZ+9g+yZJdgiMX4T4sl+MrgYiQAohphirIkdCi+9ACELyXjGZXmtWGhzq0S9Yh2ZaS9Ekty9ka+WrmeClJl0tN6b6Py82YIR9vuz6ft/5ahiR/P1PbvKeMtTbzaJL1qfynPdfTNPa7v99PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5XQMAAP//jJwQkg==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000e70f00000700000000002000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x20000085) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000001040)=0x80000004, 0x4) listen(r2, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r3, &(0x7f00000031c0), 0x12) r4 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x2, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fefffe340000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r7 = timerfd_create(0x8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0x49, &(0x7f00000006c0)=ANY=[@ANYBLOB="18eaff0000000000000040000000000018110000", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000e8000000853e5f6aefabd00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 89.36055ms ago: executing program 0 (id=6220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) 71.74341ms ago: executing program 0 (id=6221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) 58.06138ms ago: executing program 0 (id=6222): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000000800200000000000007b00c463ba1355f6789525bef4a6c5cf4a711ad6d5969448207628b79d06", @ANYRES32, @ANYRES8=0x0, @ANYRES8=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[], 0x1, 0x1ff, &(0x7f00000002c0)="$eJzs3MtqU1scBvB12p5ecuhldEAnLnSik02tTxCkBTGg1EbUgbBLUw2JSckOmoiDjh35HMWhM0F8gb6FsyJIRx0ZaZNerTqxjZLfD8L6wkdgLULCfweytx68eVZZzZLVtBmGxmMYCmE97IQws5t6/umtQ3t5NBy1Hq7NPt9+fe/ho9v5QmF+McaF/NKNuRjj1KUPL169vfyx+d/9d1Pvx8LmzOOtL3OfNv/fvLD1delpOYvlLNbqzZjG5Xq9mS5XS3GlnFWSGO9WS2lWiuVaVmoc61er9bW1dkxrK5O5tUYpy2Jaa8dKqR2b9dhstGP6JC3XYpIkcTIX+JXixuJimu/3LjhbjUY+HQ4hTHzXFDf6siEAoK/M/4PM/D8Iduf/XO/ze5z5HwAAAAAAAAAAAAAA/gY7nc50p9OZ3l/3H2MhhPEQwv7zfu+Ts+H9H2xH/rg3HsLn9VaxVeyu3X7hVmF+Nu6ZOXzVdqtVHD7or3f7eLz/N+R6/dyp/Wi4eqXb73Y37xRO9BNh5eyPDwAAAAMhiQdOvb5Pkh/13XTk94ET1+8j4eLIuR0DAAAA+Ims/bKSVqulhiAIwkHo9zcTAADwux0O/f3eCQAAAAAAAAAAAAAAAAAAAAyu87idWL/PCAAAAAAAAAAAAAAAAAAAAAAAAH+KbwEAAP//VuHQrA==") mkdir(&(0x7f0000000000)='./control\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000000)) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1ffe6}, {0xfff2, 0x1}, {0x0, 0xf}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x2004, &(0x7f0000000680)) 36.42129ms ago: executing program 0 (id=6223): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 7.05638ms ago: executing program 0 (id=6224): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x8, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [], @ipv4=@multicast1, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x4e21}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x458) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='sched_switch\x00', r5}, 0x10) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x8000000, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendto$inet(r6, 0x0, 0x7, 0x20000081, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r3) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x188c2, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5"], 0x0, 0x23e, &(0x7f00000001c0)="$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") bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r8, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000000000000700000001440c05"], 0x20}}], 0x1, 0x0) 0s ago: executing program 7 (id=6225): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000380)=0x9, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffefffffff0180c2000000080045000000004e214e200010907802000000000000dc1a6ad9aafe34d7e613b636e2680fb500"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21885e, &(0x7f0000000280)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x50a, &(0x7f00000019c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x1, 0x10, 0x4, 0x3, {{0x24, 0x4, 0x3, 0x0, 0x90, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010100, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x46, 0x1, 0xe, [{@private=0xa010101, 0xe77}]}, @ssrr={0x89, 0x13, 0x87, [@private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x52, 0x0, [{0x2, 0xf, "88d97efa9302c9d6cf46c3a22e"}, {0x5, 0x5, "4b1bf1"}, {0x6, 0xe, "253c6f593d4a528ad1e84fc2"}, {0x2, 0x5, "aff9cc"}, {0x0, 0xd, "47d79410d61013d5d8174c"}, {0x0, 0xd, "af53fe15e4eff562367593"}, {0x5, 0xb, "bed343c16f3aff90ec"}]}, @noop, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): :0000:0000.0016: unknown main item tag 0x0 [ 369.893033][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.900422][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.907898][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.915286][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.922678][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.930080][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.937514][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.944947][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.952340][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.959736][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.967126][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.974576][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.982041][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.989424][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 369.996851][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.004271][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.011729][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.019111][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.026588][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.034014][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.041422][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.048802][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.056249][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.059265][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5698'. [ 370.063694][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.079946][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.087387][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.094855][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.102267][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.109637][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.117149][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.124540][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.132123][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.139538][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.146982][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.154403][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.161829][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.169222][ T3379] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 370.177479][ T3379] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz1] on syz0 [ 370.187466][T18898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 370.220035][T18900] loop1: detected capacity change from 0 to 128 [ 370.255848][T18904] loop3: detected capacity change from 0 to 128 [ 370.275314][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.276987][T11116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.332861][T18909] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 370.385217][T18912] loop1: detected capacity change from 0 to 4096 [ 370.394544][T18912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.412205][T18912] EXT4-fs (loop1): shut down requested (0) [ 370.445761][T18906] xt_l2tp: v2 doesn't support IP mode [ 370.461677][T18912] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 370.470554][T18912] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 370.481589][T18912] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 370.490655][T18912] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 370.499571][T18912] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 370.509130][T18912] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 370.523937][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.531361][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.538789][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.546225][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.553737][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.561333][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.568713][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.576107][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.583535][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.590972][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.598349][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.605738][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.613136][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.620501][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.627965][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.635357][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.642803][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.650243][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.657640][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.665076][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.672482][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.679879][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.687279][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.694785][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.702292][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.709667][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.717141][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.724537][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.731971][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.739349][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.746759][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.754226][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.761631][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.769023][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.776443][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.783871][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.791380][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.798830][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.806232][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.813696][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.821177][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.828558][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.835964][ T3382] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.852034][T18918] loop3: detected capacity change from 0 to 2048 [ 370.859847][ T3382] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 370.874480][T18918] EXT4-fs (loop3): failed to initialize system zone (-117) [ 370.881760][T18918] EXT4-fs (loop3): mount failed [ 370.913256][T18782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.926477][T18782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.940260][T18782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.951035][T18782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 371.015300][T10775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.030216][T18782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.058384][T18782] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.081858][ T1924] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.089010][ T1924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.098138][ T1924] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.105203][ T1924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.116091][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5710'. [ 371.147663][T18782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.158047][T18782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.171097][T18934] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 371.293347][T18941] loop1: detected capacity change from 0 to 128 [ 371.373604][T18782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.445892][T18945] loop2: detected capacity change from 0 to 128 [ 371.502917][T18950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5714'. [ 371.777902][T18970] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 371.790007][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5721'. [ 371.810095][T18962] FAULT_INJECTION: forcing a failure. [ 371.810095][T18962] name failslab, interval 1, probability 0, space 0, times 0 [ 371.817593][T18967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 371.822858][T18962] CPU: 1 UID: 0 PID: 18962 Comm: syz.1.5718 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 371.837202][T18782] veth0_vlan: entered promiscuous mode [ 371.842886][T18962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.842901][T18962] Call Trace: [ 371.842908][T18962] [ 371.842916][T18962] dump_stack_lvl+0xf2/0x150 [ 371.869410][T18962] dump_stack+0x15/0x1a [ 371.873577][T18962] should_fail_ex+0x223/0x230 [ 371.878274][T18962] should_failslab+0x8f/0xb0 [ 371.882881][T18962] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 371.889233][T18962] ? sidtab_sid2str_get+0xb8/0x140 [ 371.894466][T18962] kmemdup_noprof+0x2a/0x60 [ 371.899028][T18962] sidtab_sid2str_get+0xb8/0x140 [ 371.904039][T18962] security_sid_to_context_core+0x1eb/0x2f0 [ 371.909985][T18962] security_sid_to_context+0x27/0x30 [ 371.915283][T18962] selinux_lsmprop_to_secctx+0x2c/0x40 [ 371.920892][T18962] security_lsmprop_to_secctx+0x4a/0x90 [ 371.926522][T18962] audit_log_task_context+0x93/0x1c0 [ 371.931811][T18962] audit_log_task+0xf9/0x1c0 [ 371.936451][T18962] audit_seccomp+0x68/0x130 [ 371.940952][T18962] __seccomp_filter+0x6fa/0x1180 [ 371.945894][T18962] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.951530][T18962] ? vfs_write+0x596/0x920 [ 371.956026][T18962] __secure_computing+0x9f/0x1c0 [ 371.961013][T18962] syscall_trace_enter+0xd1/0x1f0 [ 371.966050][T18962] ? fpregs_assert_state_consistent+0x83/0xa0 [ 371.972124][T18962] do_syscall_64+0xaa/0x1c0 [ 371.976620][T18962] ? clear_bhb_loop+0x55/0xb0 [ 371.981367][T18962] ? clear_bhb_loop+0x55/0xb0 [ 371.986154][T18962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.992070][T18962] RIP: 0033:0x7fc424fbff19 [ 371.996546][T18962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.016157][T18962] RSP: 002b:00007fc423637058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.024603][T18962] RAX: ffffffffffffffda RBX: 00007fc425185fa0 RCX: 00007fc424fbff19 [ 372.032572][T18962] RDX: 0000000000000003 RSI: 0000000020000800 RDI: 0000000000000005 [ 372.040599][T18962] RBP: 00007fc4236370a0 R08: 0000000000000000 R09: 0000000000000000 [ 372.048583][T18962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.056596][T18962] R13: 0000000000000000 R14: 00007fc425185fa0 R15: 00007ffc3bd5c448 [ 372.064620][T18962] [ 372.068776][T18971] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 372.068776][T18971] program syz.2.5719 not setting count and/or reply_len properly [ 372.071632][T18782] veth1_vlan: entered promiscuous mode [ 372.093465][T18971] netlink: 'syz.2.5719': attribute type 10 has an invalid length. [ 372.119073][T18971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.134105][T18971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.155635][T18971] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 372.186112][T18782] veth0_macvtap: entered promiscuous mode [ 372.206292][T18782] veth1_macvtap: entered promiscuous mode [ 372.216032][T18782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.226564][T18782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.236424][T18782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.246888][T18782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.258410][T18782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.267378][T18782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.277902][T18782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.287764][T18782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.298222][T18782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.308140][T18782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.318558][T18782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.328989][T18782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.337370][T18782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.346238][T18782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.354962][T18782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.363768][T18782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.567832][T18989] loop2: detected capacity change from 0 to 128 [ 372.599555][T18991] loop2: detected capacity change from 0 to 128 [ 372.797786][T18993] chnl_net:caif_netlink_parms(): no params data found [ 372.847413][T18993] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.854688][T18993] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.862111][T18993] bridge_slave_0: entered allmulticast mode [ 372.868437][T18993] bridge_slave_0: entered promiscuous mode [ 372.875245][T18993] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.882325][T18993] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.889447][T18993] bridge_slave_1: entered allmulticast mode [ 372.896433][T18993] bridge_slave_1: entered promiscuous mode [ 372.913963][T18993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.924510][T18993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.944136][T18993] team0: Port device team_slave_0 added [ 372.950755][T18993] team0: Port device team_slave_1 added [ 372.966461][T18993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.973430][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.999388][T18993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.023775][T18993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.030745][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.056799][T18993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.085478][T18993] hsr_slave_0: entered promiscuous mode [ 373.101254][T18993] hsr_slave_1: entered promiscuous mode [ 373.107566][T18993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.115518][T18993] Cannot create hsr debugfs directory [ 373.127492][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5731'. [ 373.145603][T19014] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 373.206097][T18993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.338762][T18993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.397959][T18993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.474199][T18993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.588394][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 373.588408][ T29] audit: type=1400 audit(1733271759.261:38717): avc: denied { create } for pid=19022 comm="syz.0.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 373.618038][T18993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.627793][T18993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.644757][T18993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.653437][ T29] audit: type=1400 audit(1733271759.301:38718): avc: denied { create } for pid=19022 comm="syz.0.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.673326][ T29] audit: type=1400 audit(1733271759.311:38719): avc: denied { setopt } for pid=19022 comm="syz.0.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.693228][ T29] audit: type=1400 audit(1733271759.311:38720): avc: denied { listen } for pid=19022 comm="syz.0.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.694382][T18993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.713032][ T29] audit: type=1404 audit(1733271759.311:38721): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 373.734799][ T29] audit: type=1404 audit(1733271759.311:38722): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 373.750018][ T29] audit: type=1400 audit(1733271759.311:38723): avc: denied { create } for pid=19022 comm="syz.0.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 373.769927][ T29] audit: type=1400 audit(1733271759.311:38724): avc: denied { create } for pid=19022 comm="syz.0.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.789823][ T29] audit: type=1400 audit(1733271759.321:38725): avc: denied { prog_load } for pid=19022 comm="syz.0.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 373.809126][ T29] audit: type=1400 audit(1733271759.321:38726): avc: denied { bpf } for pid=19022 comm="syz.0.5734" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 373.887569][T18993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.907949][T19029] loop1: detected capacity change from 0 to 128 [ 373.910265][T18993] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.924759][ T1793] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.931842][ T1793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.948432][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.955632][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.061122][T19037] xt_l2tp: v2 doesn't support IP mode [ 374.074678][T19040] loop7: detected capacity change from 0 to 128 [ 374.084934][T18993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.142830][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5741'. [ 374.154272][T19046] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 374.201364][T19053] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5742'. [ 374.217570][T18993] veth0_vlan: entered promiscuous mode [ 374.227941][T18993] veth1_vlan: entered promiscuous mode [ 374.242934][T18993] veth0_macvtap: entered promiscuous mode [ 374.250307][T18993] veth1_macvtap: entered promiscuous mode [ 374.260776][T18993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.271295][T18993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.281121][T18993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.291566][T18993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.301449][T18993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.311939][T18993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.322472][T18993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.340727][T18993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.351255][T18993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.361259][T18993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.371728][T18993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.381658][T18993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.392223][T18993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.402042][T18993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.412520][T18993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.423045][T18993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.432273][T18993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.441094][T18993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.449838][T18993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.458623][T18993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.568040][T19067] loop7: detected capacity change from 0 to 128 [ 374.600251][T19071] loop7: detected capacity change from 0 to 128 [ 374.645987][T19075] loop7: detected capacity change from 0 to 128 [ 374.657092][T19073] pim6reg1: entered promiscuous mode [ 374.662642][T19073] pim6reg1: entered allmulticast mode [ 374.728310][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5752'. [ 374.738038][T19077] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 375.245832][T19101] loop2: detected capacity change from 0 to 128 [ 375.372522][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5764'. [ 375.759883][T19107] loop1: detected capacity change from 0 to 128 [ 375.814757][T19105] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 375.903928][T19107] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.916974][T19107] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.996721][T19138] syz.3.5772[19138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.996811][T19138] syz.3.5772[19138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.073134][T19138] syz.3.5772[19138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.135734][T10775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.136882][T19145] loop2: detected capacity change from 0 to 128 [ 377.279372][T19150] loop7: detected capacity change from 0 to 128 [ 377.341519][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5777'. [ 377.350674][T19152] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 377.533290][T19161] loop1: detected capacity change from 0 to 8192 [ 377.550860][T19174] loop3: detected capacity change from 0 to 128 [ 377.582106][T19161] loop1: p2 p3 p4 [ 377.585908][T19161] loop1: p2 start 14935 is beyond EOD, truncated [ 377.592307][T19161] loop1: p3 size 196608 extends beyond EOD, truncated [ 377.609760][T19161] loop1: p4 start 4026530307 is beyond EOD, truncated [ 377.815323][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5792'. [ 377.825702][T19190] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 377.917986][T19197] FAULT_INJECTION: forcing a failure. [ 377.917986][T19197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.931256][T19197] CPU: 0 UID: 0 PID: 19197 Comm: syz.7.5796 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 377.942036][T19197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 377.952141][T19197] Call Trace: [ 377.955439][T19197] [ 377.958414][T19197] dump_stack_lvl+0xf2/0x150 [ 377.963019][T19197] dump_stack+0x15/0x1a [ 377.967189][T19197] should_fail_ex+0x223/0x230 [ 377.971878][T19197] should_fail+0xb/0x10 [ 377.976074][T19197] should_fail_usercopy+0x1a/0x20 [ 377.981101][T19197] _copy_to_user+0x20/0xa0 [ 377.985605][T19197] simple_read_from_buffer+0xa0/0x110 [ 377.990985][T19197] proc_fail_nth_read+0xf9/0x140 [ 377.995929][T19197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.001494][T19197] vfs_read+0x1a2/0x700 [ 378.005649][T19197] ? __rcu_read_unlock+0x4e/0x70 [ 378.010593][T19197] ? __fget_files+0x17c/0x1c0 [ 378.015280][T19197] ksys_read+0xe8/0x1b0 [ 378.019453][T19197] __x64_sys_read+0x42/0x50 [ 378.024005][T19197] x64_sys_call+0x2874/0x2dc0 [ 378.028677][T19197] do_syscall_64+0xc9/0x1c0 [ 378.033174][T19197] ? clear_bhb_loop+0x55/0xb0 [ 378.037849][T19197] ? clear_bhb_loop+0x55/0xb0 [ 378.042600][T19197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.048510][T19197] RIP: 0033:0x7ffac96ae92c [ 378.052918][T19197] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 378.072555][T19197] RSP: 002b:00007ffac7d27050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.080976][T19197] RAX: ffffffffffffffda RBX: 00007ffac9875fa0 RCX: 00007ffac96ae92c [ 378.088987][T19197] RDX: 000000000000000f RSI: 00007ffac7d270b0 RDI: 0000000000000004 [ 378.096983][T19197] RBP: 00007ffac7d270a0 R08: 0000000000000000 R09: 0000000000000000 [ 378.104954][T19197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.112921][T19197] R13: 0000000000000000 R14: 00007ffac9875fa0 R15: 00007fff0e337578 [ 378.120895][T19197] [ 378.278998][T19211] syz.7.5802[19211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.279078][T19211] syz.7.5802[19211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.295130][T19211] syz.7.5802[19211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.311699][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5804'. [ 378.381190][T19213] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 378.406042][T19215] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 378.472532][T19216] FAULT_INJECTION: forcing a failure. [ 378.472532][T19216] name failslab, interval 1, probability 0, space 0, times 0 [ 378.485280][T19216] CPU: 1 UID: 0 PID: 19216 Comm: syz.7.5802 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 378.496047][T19216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.506106][T19216] Call Trace: [ 378.509393][T19216] [ 378.512330][T19216] dump_stack_lvl+0xf2/0x150 [ 378.517076][T19216] dump_stack+0x15/0x1a [ 378.521303][T19216] should_fail_ex+0x223/0x230 [ 378.526015][T19216] should_failslab+0x8f/0xb0 [ 378.530634][T19216] __kmalloc_noprof+0xab/0x3f0 [ 378.535422][T19216] ? security_prepare_creds+0x53/0x120 [ 378.540898][T19216] security_prepare_creds+0x53/0x120 [ 378.546249][T19216] prepare_creds+0x346/0x480 [ 378.550848][T19216] copy_creds+0x90/0x3f0 [ 378.555104][T19216] copy_process+0x64b/0x1f90 [ 378.559709][T19216] ? 0xffffffff81000000 [ 378.563902][T19216] ? selinux_file_permission+0x22a/0x360 [ 378.569560][T19216] ? __rcu_read_unlock+0x4e/0x70 [ 378.574545][T19216] kernel_clone+0x167/0x5e0 [ 378.579080][T19216] ? vfs_write+0x596/0x920 [ 378.583538][T19216] __x64_sys_clone+0xe8/0x120 [ 378.588256][T19216] x64_sys_call+0x2d7e/0x2dc0 [ 378.592938][T19216] do_syscall_64+0xc9/0x1c0 [ 378.597455][T19216] ? clear_bhb_loop+0x55/0xb0 [ 378.602139][T19216] ? clear_bhb_loop+0x55/0xb0 [ 378.606818][T19216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.612757][T19216] RIP: 0033:0x7ffac96aff19 [ 378.617178][T19216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.636888][T19216] RSP: 002b:00007ffac7d06008 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 378.645306][T19216] RAX: ffffffffffffffda RBX: 00007ffac9876080 RCX: 00007ffac96aff19 [ 378.653309][T19216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040200080 [ 378.661439][T19216] RBP: 00007ffac7d060a0 R08: 0000000000000000 R09: 0000000000000000 [ 378.669471][T19216] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 378.677458][T19216] R13: 0000000000000000 R14: 00007ffac9876080 R15: 00007fff0e337578 [ 378.685449][T19216] [ 378.694762][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 378.694776][ T29] audit: type=1400 audit(1733271764.371:39090): avc: denied { create } for pid=19219 comm="syz.1.5808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 378.852971][T19233] loop7: detected capacity change from 0 to 128 [ 378.862012][T19179] syz.3.5789 (19179) used greatest stack depth: 6288 bytes left [ 378.869400][ T29] audit: type=1400 audit(1733271764.541:39091): avc: denied { mount } for pid=19232 comm="syz.7.5812" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 378.899867][ T29] audit: type=1400 audit(1733271764.541:39092): avc: denied { unmount } for pid=13360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 378.935417][ T29] audit: type=1400 audit(1733271764.571:39093): avc: denied { unmount } for pid=18423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 378.952618][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5816'. [ 378.955590][ T29] audit: type=1400 audit(1733271764.611:39094): avc: denied { setopt } for pid=19234 comm="syz.3.5813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.964795][T19241] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 378.987632][T19239] 9pnet_fd: Insufficient options for proto=fd [ 378.995791][ T29] audit: type=1400 audit(1733271764.661:39095): avc: denied { mounton } for pid=19238 comm="syz.7.5815" path="/62/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 379.029736][ T29] audit: type=1400 audit(1733271764.701:39096): avc: denied { read } for pid=19234 comm="syz.3.5813" path="socket:[61961]" dev="sockfs" ino=61961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.059055][T19244] loop7: detected capacity change from 0 to 128 [ 379.105399][T19248] loop3: detected capacity change from 0 to 2048 [ 379.124863][T19248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.149150][ T29] audit: type=1400 audit(1733271764.821:39097): avc: denied { mount } for pid=19247 comm="syz.3.5819" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 379.153198][T19252] loop7: detected capacity change from 0 to 128 [ 379.183965][ T29] audit: type=1326 audit(1733271764.861:39098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19257 comm="syz.2.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a264ff19 code=0x7ffc0000 [ 379.209728][ T29] audit: type=1400 audit(1733271764.861:39099): avc: denied { read } for pid=19247 comm="syz.3.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 379.246952][T13360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.310171][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5828'. [ 379.319650][T19270] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 379.408292][T19280] can0: slcan on pts0. [ 379.420208][T19282] loop7: detected capacity change from 0 to 128 [ 379.446359][T19279] can0 (unregistered): slcan off pts0. [ 379.494168][T19284] FAULT_INJECTION: forcing a failure. [ 379.494168][T19284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.507404][T19284] CPU: 0 UID: 0 PID: 19284 Comm: syz.7.5836 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 379.518177][T19284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 379.528241][T19284] Call Trace: [ 379.531525][T19284] [ 379.534496][T19284] dump_stack_lvl+0xf2/0x150 [ 379.539114][T19284] dump_stack+0x15/0x1a [ 379.543371][T19284] should_fail_ex+0x223/0x230 [ 379.548127][T19284] should_fail+0xb/0x10 [ 379.552285][T19284] should_fail_usercopy+0x1a/0x20 [ 379.557341][T19284] _copy_to_user+0x20/0xa0 [ 379.561843][T19284] simple_read_from_buffer+0xa0/0x110 [ 379.567247][T19284] proc_fail_nth_read+0xf9/0x140 [ 379.572201][T19284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.577751][T19284] vfs_read+0x1a2/0x700 [ 379.581957][T19284] ? __rcu_read_unlock+0x4e/0x70 [ 379.586912][T19284] ? __fget_files+0x17c/0x1c0 [ 379.591602][T19284] ksys_read+0xe8/0x1b0 [ 379.595803][T19284] __x64_sys_read+0x42/0x50 [ 379.600333][T19284] x64_sys_call+0x2874/0x2dc0 [ 379.605006][T19284] do_syscall_64+0xc9/0x1c0 [ 379.609514][T19284] ? clear_bhb_loop+0x55/0xb0 [ 379.614195][T19284] ? clear_bhb_loop+0x55/0xb0 [ 379.618874][T19284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.624862][T19284] RIP: 0033:0x7ffac96ae92c [ 379.629273][T19284] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 379.648886][T19284] RSP: 002b:00007ffac7d27050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.657322][T19284] RAX: ffffffffffffffda RBX: 00007ffac9875fa0 RCX: 00007ffac96ae92c [ 379.665370][T19284] RDX: 000000000000000f RSI: 00007ffac7d270b0 RDI: 000000000000000c [ 379.673404][T19284] RBP: 00007ffac7d270a0 R08: 0000000000000000 R09: 0000000000000000 [ 379.681377][T19284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.689366][T19284] R13: 0000000000000000 R14: 00007ffac9875fa0 R15: 00007fff0e337578 [ 379.697352][T19284] [ 379.737299][T19291] loop1: detected capacity change from 0 to 2048 [ 379.783892][T19291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.789925][T19301] loop7: detected capacity change from 0 to 512 [ 379.812934][T19301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.825570][T19301] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.848234][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.935286][T19312] loop2: detected capacity change from 0 to 128 [ 380.025514][T19318] bridge0: port 3(vlan2) entered blocking state [ 380.031880][T19318] bridge0: port 3(vlan2) entered disabled state [ 380.038240][T19318] vlan2: entered allmulticast mode [ 380.044167][T19318] vlan2: left allmulticast mode [ 380.329512][T19330] loop7: detected capacity change from 0 to 512 [ 380.349248][T19330] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.7.5851: corrupted xattr block 95: invalid header [ 380.364414][T19330] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5851: bg 0: block 7: invalid block bitmap [ 380.378109][T19330] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 380.388181][T19330] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #11: comm syz.7.5851: corrupted xattr block 95: invalid header [ 380.402056][T19330] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 380.411350][T19330] EXT4-fs (loop7): 1 orphan inode deleted [ 380.417503][T19330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.592264][T10775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.635376][T19339] loop3: detected capacity change from 0 to 512 [ 380.662476][T19339] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.5854: corrupted xattr block 95: invalid header [ 380.688456][T19339] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5854: bg 0: block 7: invalid block bitmap [ 380.723574][T19339] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 380.749781][T19339] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.5854: corrupted xattr block 95: invalid header [ 380.843092][T19339] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 380.886284][T19339] EXT4-fs (loop3): 1 orphan inode deleted [ 380.914839][T19339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.956804][T19347] loop2: detected capacity change from 0 to 128 [ 381.200063][T19355] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 381.343448][T19353] bridge0: port 3(vlan2) entered blocking state [ 381.349745][T19353] bridge0: port 3(vlan2) entered disabled state [ 381.360983][T19353] vlan2: entered allmulticast mode [ 381.366743][T19353] vlan2: left allmulticast mode [ 381.459396][T19363] loop2: detected capacity change from 0 to 128 [ 381.477290][T19363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.561484][T19363] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.605314][T19363] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 381.908659][T19363] can0: slcan on ttyS3. [ 381.986010][T19363] can0 (unregistered): slcan off ttyS3. [ 382.030143][T19363] Falling back ldisc for ttyS3. [ 382.138495][T13360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.186774][T19375] FAULT_INJECTION: forcing a failure. [ 382.186774][T19375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.199871][T19375] CPU: 1 UID: 0 PID: 19375 Comm: syz.3.5869 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 382.210645][T19375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.220780][T19375] Call Trace: [ 382.224135][T19375] [ 382.227061][T19375] dump_stack_lvl+0xf2/0x150 [ 382.231678][T19375] dump_stack+0x15/0x1a [ 382.235946][T19375] should_fail_ex+0x223/0x230 [ 382.240646][T19375] should_fail+0xb/0x10 [ 382.244836][T19375] should_fail_usercopy+0x1a/0x20 [ 382.249876][T19375] _copy_from_user+0x1e/0xb0 [ 382.254494][T19375] get_user_ifreq+0x8c/0x160 [ 382.259152][T19375] sock_do_ioctl+0xc6/0x260 [ 382.263681][T19375] sock_ioctl+0x40f/0x600 [ 382.268109][T19375] ? __pfx_sock_ioctl+0x10/0x10 [ 382.273013][T19375] __se_sys_ioctl+0xc9/0x140 [ 382.277635][T19375] __x64_sys_ioctl+0x43/0x50 [ 382.282359][T19375] x64_sys_call+0x1690/0x2dc0 [ 382.287039][T19375] do_syscall_64+0xc9/0x1c0 [ 382.291553][T19375] ? clear_bhb_loop+0x55/0xb0 [ 382.296245][T19375] ? clear_bhb_loop+0x55/0xb0 [ 382.301050][T19375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.307019][T19375] RIP: 0033:0x7f9b84e0ff19 [ 382.311437][T19375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.331098][T19375] RSP: 002b:00007f9b83487058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.339657][T19375] RAX: ffffffffffffffda RBX: 00007f9b84fd5fa0 RCX: 00007f9b84e0ff19 [ 382.347639][T19375] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000008 [ 382.355611][T19375] RBP: 00007f9b834870a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.363581][T19375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.371582][T19375] R13: 0000000000000000 R14: 00007f9b84fd5fa0 R15: 00007fff0fce9178 [ 382.379567][T19375] [ 382.407618][T18993] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.485112][T19386] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 382.527517][T19390] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 382.538960][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5877'. [ 382.549863][T19392] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 382.562567][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.588978][T19396] loop2: detected capacity change from 0 to 1024 [ 382.595759][T19396] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 382.656251][T19396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.664734][T19396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.005584][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5884'. [ 383.299655][T19411] bridge0: port 3(vlan2) entered blocking state [ 383.306061][T19411] bridge0: port 3(vlan2) entered disabled state [ 383.316588][T19411] vlan2: entered allmulticast mode [ 383.331229][T19411] vlan2: left allmulticast mode [ 383.507804][T19419] FAULT_INJECTION: forcing a failure. [ 383.507804][T19419] name failslab, interval 1, probability 0, space 0, times 0 [ 383.520544][T19419] CPU: 1 UID: 0 PID: 19419 Comm: syz.7.5889 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 383.531365][T19419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.541416][T19419] Call Trace: [ 383.544696][T19419] [ 383.547621][T19419] dump_stack_lvl+0xf2/0x150 [ 383.552298][T19419] dump_stack+0x15/0x1a [ 383.556495][T19419] should_fail_ex+0x223/0x230 [ 383.561172][T19419] should_failslab+0x8f/0xb0 [ 383.565839][T19419] kmem_cache_alloc_node_noprof+0x59/0x320 [ 383.571647][T19419] ? __alloc_skb+0x10b/0x310 [ 383.576347][T19419] __alloc_skb+0x10b/0x310 [ 383.580908][T19419] netlink_alloc_large_skb+0xad/0xe0 [ 383.586218][T19419] netlink_sendmsg+0x3b4/0x6e0 [ 383.591004][T19419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.596287][T19419] __sock_sendmsg+0x140/0x180 [ 383.601028][T19419] ____sys_sendmsg+0x312/0x410 [ 383.605791][T19419] __sys_sendmsg+0x19d/0x230 [ 383.610413][T19419] __x64_sys_sendmsg+0x46/0x50 [ 383.615223][T19419] x64_sys_call+0x2734/0x2dc0 [ 383.619921][T19419] do_syscall_64+0xc9/0x1c0 [ 383.624427][T19419] ? clear_bhb_loop+0x55/0xb0 [ 383.629099][T19419] ? clear_bhb_loop+0x55/0xb0 [ 383.633778][T19419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.639812][T19419] RIP: 0033:0x7ffac96aff19 [ 383.644234][T19419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.664032][T19419] RSP: 002b:00007ffac7d27058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.672443][T19419] RAX: ffffffffffffffda RBX: 00007ffac9875fa0 RCX: 00007ffac96aff19 [ 383.680411][T19419] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 383.688377][T19419] RBP: 00007ffac7d270a0 R08: 0000000000000000 R09: 0000000000000000 [ 383.696371][T19419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.704342][T19419] R13: 0000000000000000 R14: 00007ffac9875fa0 R15: 00007fff0e337578 [ 383.712315][T19419] [ 383.719086][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5890'. [ 383.755585][T19423] loop2: detected capacity change from 0 to 1024 [ 383.762724][T19423] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 383.765364][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 383.765409][ T29] audit: type=1326 audit(1733271769.441:39257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 383.800728][ T29] audit: type=1326 audit(1733271769.441:39258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 383.815732][T19423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.836859][ T29] audit: type=1326 audit(1733271769.501:39259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 383.837940][T19423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.860773][ T29] audit: type=1326 audit(1733271769.501:39260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 383.891713][ T29] audit: type=1326 audit(1733271769.511:39261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 383.915230][ T29] audit: type=1326 audit(1733271769.511:39262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 383.938935][ T29] audit: type=1326 audit(1733271769.511:39263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 383.962605][ T29] audit: type=1326 audit(1733271769.511:39264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 383.986338][ T29] audit: type=1326 audit(1733271769.511:39265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 384.009960][ T29] audit: type=1326 audit(1733271769.511:39266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 384.228290][ T3447] IPVS: starting estimator thread 0... [ 384.321000][T19435] IPVS: using max 2736 ests per chain, 136800 per kthread [ 384.417117][T19437] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 384.518079][T19439] loop7: detected capacity change from 0 to 128 [ 384.726176][T19451] loop7: detected capacity change from 0 to 128 [ 384.747557][T19450] loop2: detected capacity change from 0 to 128 [ 385.033847][T19464] loop7: detected capacity change from 0 to 128 [ 385.043207][T19466] loop2: detected capacity change from 0 to 1024 [ 385.049955][T19466] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 385.096763][T19468] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 385.110308][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.118892][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.712251][T19490] sctp: [Deprecated]: syz.2.5919 (pid 19490) Use of int in maxseg socket option. [ 385.712251][T19490] Use struct sctp_assoc_value instead [ 385.712486][T19493] loop3: detected capacity change from 0 to 128 [ 385.755926][T19492] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5920'. [ 385.861085][T19501] loop2: detected capacity change from 0 to 128 [ 386.015505][T19505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5924'. [ 386.072758][T19508] loop7: detected capacity change from 0 to 8192 [ 386.109413][T19511] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 386.114539][T19505] loop3: detected capacity change from 0 to 512 [ 386.120223][T19508] loop7: p2 p3 p4 [ 386.131336][T19508] loop7: p2 start 14935 is beyond EOD, truncated [ 386.137706][T19508] loop7: p3 size 196608 extends beyond EOD, truncated [ 386.145686][T19505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 386.151987][T19508] loop7: p4 start 4026530307 is beyond EOD, truncated [ 386.182981][T19505] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5924: invalid indirect mapped block 4294967295 (level 0) [ 386.206964][T19505] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5924: invalid indirect mapped block 4294967295 (level 1) [ 386.224725][T19505] EXT4-fs (loop3): 1 orphan inode deleted [ 386.230476][T19505] EXT4-fs (loop3): 1 truncate cleaned up [ 386.240761][T19505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.276581][T19505] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #2: block 13: comm syz.3.5924: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 386.546487][T19520] loop2: detected capacity change from 0 to 1024 [ 386.553362][T19520] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 386.572232][T19522] FAULT_INJECTION: forcing a failure. [ 386.572232][T19522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.585321][T19522] CPU: 0 UID: 0 PID: 19522 Comm: syz.1.5931 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 386.596087][T19522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 386.606156][T19522] Call Trace: [ 386.609444][T19522] [ 386.612411][T19522] dump_stack_lvl+0xf2/0x150 [ 386.617140][T19522] dump_stack+0x15/0x1a [ 386.621350][T19522] should_fail_ex+0x223/0x230 [ 386.626048][T19522] should_fail+0xb/0x10 [ 386.626907][T19520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.630204][T19522] should_fail_usercopy+0x1a/0x20 [ 386.639333][T19520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.643546][T19522] _copy_to_user+0x20/0xa0 [ 386.655796][T19522] simple_read_from_buffer+0xa0/0x110 [ 386.661195][T19522] proc_fail_nth_read+0xf9/0x140 [ 386.666161][T19522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.671755][T19522] vfs_read+0x1a2/0x700 [ 386.675919][T19522] ? __rcu_read_unlock+0x4e/0x70 [ 386.681008][T19522] ? __fget_files+0x17c/0x1c0 [ 386.685702][T19522] ksys_read+0xe8/0x1b0 [ 386.689866][T19522] __x64_sys_read+0x42/0x50 [ 386.694377][T19522] x64_sys_call+0x2874/0x2dc0 [ 386.699188][T19522] do_syscall_64+0xc9/0x1c0 [ 386.703693][T19522] ? clear_bhb_loop+0x55/0xb0 [ 386.708415][T19522] ? clear_bhb_loop+0x55/0xb0 [ 386.713185][T19522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.719089][T19522] RIP: 0033:0x7fc424fbe92c [ 386.723512][T19522] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 386.743134][T19522] RSP: 002b:00007fc423637050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.751631][T19522] RAX: ffffffffffffffda RBX: 00007fc425185fa0 RCX: 00007fc424fbe92c [ 386.759604][T19522] RDX: 000000000000000f RSI: 00007fc4236370b0 RDI: 0000000000000004 [ 386.767574][T19522] RBP: 00007fc4236370a0 R08: 0000000000000000 R09: 0000000000000000 [ 386.775544][T19522] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 386.783518][T19522] R13: 0000000000000000 R14: 00007fc425185fa0 R15: 00007ffc3bd5c448 [ 386.791565][T19522] [ 386.808048][T13360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.835013][T19526] random: crng reseeded on system resumption [ 386.968159][T19537] loop3: detected capacity change from 0 to 256 [ 387.023884][T19539] loop1: detected capacity change from 0 to 128 [ 387.180031][T19547] bridge0: port 3(vlan2) entered blocking state [ 387.186385][T19547] bridge0: port 3(vlan2) entered disabled state [ 387.192951][T19547] vlan2: entered allmulticast mode [ 387.198588][T19547] vlan2: left allmulticast mode [ 387.287529][T19556] FAULT_INJECTION: forcing a failure. [ 387.287529][T19556] name failslab, interval 1, probability 0, space 0, times 0 [ 387.300326][T19556] CPU: 1 UID: 0 PID: 19556 Comm: syz.0.5945 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 387.311127][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 387.321205][T19556] Call Trace: [ 387.324487][T19556] [ 387.327500][T19556] dump_stack_lvl+0xf2/0x150 [ 387.332113][T19556] dump_stack+0x15/0x1a [ 387.336337][T19556] should_fail_ex+0x223/0x230 [ 387.341038][T19556] should_failslab+0x8f/0xb0 [ 387.345658][T19556] __kmalloc_noprof+0xab/0x3f0 [ 387.350546][T19556] ? cond_policydb_dup+0xa0/0x710 [ 387.355684][T19556] ? vsscanf+0x11bc/0x1270 [ 387.360118][T19556] cond_policydb_dup+0xa0/0x710 [ 387.365021][T19556] ? should_failslab+0x8f/0xb0 [ 387.369873][T19556] ? __kmalloc_node_track_caller_noprof+0x1e4/0x410 [ 387.376495][T19556] ? security_set_bools+0x8b/0x350 [ 387.381626][T19556] security_set_bools+0xa8/0x350 [ 387.386620][T19556] ? sel_commit_bools_write+0x164/0x260 [ 387.392194][T19556] sel_commit_bools_write+0x1de/0x260 [ 387.397663][T19556] vfs_writev+0x3fb/0x880 [ 387.402015][T19556] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 387.408077][T19556] ? mutex_lock+0xd/0x40 [ 387.412433][T19556] do_writev+0xf4/0x220 [ 387.416596][T19556] __x64_sys_writev+0x45/0x50 [ 387.421290][T19556] x64_sys_call+0x1fab/0x2dc0 [ 387.425983][T19556] do_syscall_64+0xc9/0x1c0 [ 387.430496][T19556] ? clear_bhb_loop+0x55/0xb0 [ 387.435259][T19556] ? clear_bhb_loop+0x55/0xb0 [ 387.439968][T19556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.446065][T19556] RIP: 0033:0x7f26fc2cff19 [ 387.450486][T19556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.470102][T19556] RSP: 002b:00007f26fa947058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 387.478606][T19556] RAX: ffffffffffffffda RBX: 00007f26fc495fa0 RCX: 00007f26fc2cff19 [ 387.486582][T19556] RDX: 0000000000000001 RSI: 00000000200025c0 RDI: 0000000000000003 [ 387.494563][T19556] RBP: 00007f26fa9470a0 R08: 0000000000000000 R09: 0000000000000000 [ 387.502527][T19556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.510491][T19556] R13: 0000000000000000 R14: 00007f26fc495fa0 R15: 00007ffca6934e78 [ 387.518544][T19556] [ 387.533879][T19550] chnl_net:caif_netlink_parms(): no params data found [ 387.569193][T19570] FAULT_INJECTION: forcing a failure. [ 387.569193][T19570] name failslab, interval 1, probability 0, space 0, times 0 [ 387.581978][T19570] CPU: 0 UID: 0 PID: 19570 Comm: syz.0.5948 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 387.592790][T19570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 387.602860][T19570] Call Trace: [ 387.606133][T19570] [ 387.609073][T19570] dump_stack_lvl+0xf2/0x150 [ 387.613708][T19570] dump_stack+0x15/0x1a [ 387.617901][T19570] should_fail_ex+0x223/0x230 [ 387.622585][T19570] should_failslab+0x8f/0xb0 [ 387.627186][T19570] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 387.632908][T19570] ? __d_alloc+0x3d/0x340 [ 387.637269][T19570] __d_alloc+0x3d/0x340 [ 387.641482][T19570] d_alloc_parallel+0x54/0xc60 [ 387.646333][T19570] ? __rcu_read_unlock+0x4e/0x70 [ 387.651275][T19570] ? __d_lookup+0x342/0x370 [ 387.655798][T19570] ? inode_permission+0xbf/0x300 [ 387.660761][T19570] __lookup_slow+0x8d/0x250 [ 387.665341][T19570] lookup_one_len+0xea/0x1a0 [ 387.669942][T19570] do_mq_open+0x163/0x4b0 [ 387.674285][T19570] __x64_sys_mq_open+0xcc/0x100 [ 387.679178][T19570] x64_sys_call+0x1d6f/0x2dc0 [ 387.683906][T19570] do_syscall_64+0xc9/0x1c0 [ 387.688402][T19570] ? clear_bhb_loop+0x55/0xb0 [ 387.693076][T19570] ? clear_bhb_loop+0x55/0xb0 [ 387.697753][T19570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.703813][T19570] RIP: 0033:0x7f26fc2cff19 [ 387.708220][T19570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.727944][T19570] RSP: 002b:00007f26fa947058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 387.736438][T19570] RAX: ffffffffffffffda RBX: 00007f26fc495fa0 RCX: 00007f26fc2cff19 [ 387.744415][T19570] RDX: 0000000000000000 RSI: 0000000000000042 RDI: 00000000205a1ffb [ 387.752389][T19570] RBP: 00007f26fa9470a0 R08: 0000000000000000 R09: 0000000000000000 [ 387.760363][T19570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.768371][T19570] R13: 0000000000000000 R14: 00007f26fc495fa0 R15: 00007ffca6934e78 [ 387.776352][T19570] [ 387.835116][T19550] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.842285][T19550] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.847924][T19550] bridge_slave_0: entered allmulticast mode [ 387.856566][T19550] bridge_slave_0: entered promiscuous mode [ 387.863432][T19550] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.870694][T19550] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.878002][T19550] bridge_slave_1: entered allmulticast mode [ 387.884691][T19550] bridge_slave_1: entered promiscuous mode [ 387.903236][T19550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.914310][T19550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.915093][T19589] loop7: detected capacity change from 0 to 128 [ 387.960340][T19550] team0: Port device team_slave_0 added [ 387.973863][T19550] team0: Port device team_slave_1 added [ 387.993295][T19586] bridge0: port 3(vlan2) entered blocking state [ 387.999586][T19586] bridge0: port 3(vlan2) entered disabled state [ 388.019175][T19586] vlan2: entered allmulticast mode [ 388.029266][T19586] vlan2: left allmulticast mode [ 388.035743][T19597] loop7: detected capacity change from 0 to 2048 [ 388.056031][T19597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.078933][T19550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.085996][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.112181][T19550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.143457][T19600] loop3: detected capacity change from 0 to 128 [ 388.212398][ T28] bridge_slave_1: left allmulticast mode [ 388.218108][ T28] bridge_slave_1: left promiscuous mode [ 388.223769][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.242195][ T28] bridge_slave_0: left allmulticast mode [ 388.247936][ T28] bridge_slave_0: left promiscuous mode [ 388.253634][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.314645][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.343479][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.354956][T19613] loop3: detected capacity change from 0 to 512 [ 388.361779][ T28] bond0 (unregistering): Released all slaves [ 388.363204][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.381070][T19613] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 388.389653][T19550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.396656][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.422615][T19550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.434290][T19613] EXT4-fs (loop3): invalid journal inode [ 388.439980][T19613] EXT4-fs (loop3): can't get journal size [ 388.454873][T19613] EXT4-fs (loop3): orphan cleanup on readonly fs [ 388.469363][T19613] EXT4-fs (loop3): 1 truncate cleaned up [ 388.477797][T19613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 388.505444][T19550] hsr_slave_0: entered promiscuous mode [ 388.512016][T19550] hsr_slave_1: entered promiscuous mode [ 388.518676][T19550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.527356][T19550] Cannot create hsr debugfs directory [ 388.534448][ T28] hsr_slave_0: left promiscuous mode [ 388.540005][ T28] hsr_slave_1: left promiscuous mode [ 388.550148][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.565461][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.604768][ T28] team0 (unregistering): Port device team_slave_1 removed [ 388.620539][ T28] team0 (unregistering): Port device team_slave_0 removed [ 388.660798][T19625] bridge0: port 3(vlan2) entered blocking state [ 388.667317][T19625] bridge0: port 3(vlan2) entered disabled state [ 388.676347][T19625] vlan2: entered allmulticast mode [ 388.682512][T19625] vlan2: left allmulticast mode [ 388.744158][T19636] loop2: detected capacity change from 0 to 128 [ 388.935530][T19641] netlink: 324 bytes leftover after parsing attributes in process `syz.2.5972'. [ 388.944756][T19641] FAULT_INJECTION: forcing a failure. [ 388.944756][T19641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.957871][T19641] CPU: 0 UID: 0 PID: 19641 Comm: syz.2.5972 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 388.968648][T19641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.978754][T19641] Call Trace: [ 388.982036][T19641] [ 388.984968][T19641] dump_stack_lvl+0xf2/0x150 [ 388.989589][T19641] dump_stack+0x15/0x1a [ 388.993774][T19641] should_fail_ex+0x223/0x230 [ 388.998502][T19641] should_fail+0xb/0x10 [ 389.002802][T19641] should_fail_usercopy+0x1a/0x20 [ 389.007834][T19641] _copy_to_user+0x20/0xa0 [ 389.012335][T19641] simple_read_from_buffer+0xa0/0x110 [ 389.017823][T19641] proc_fail_nth_read+0xf9/0x140 [ 389.022826][T19641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.028424][T19641] vfs_read+0x1a2/0x700 [ 389.032642][T19641] ? __rcu_read_unlock+0x4e/0x70 [ 389.037653][T19641] ? __fget_files+0x17c/0x1c0 [ 389.042362][T19641] ksys_read+0xe8/0x1b0 [ 389.046531][T19641] __x64_sys_read+0x42/0x50 [ 389.051128][T19641] x64_sys_call+0x2874/0x2dc0 [ 389.055873][T19641] do_syscall_64+0xc9/0x1c0 [ 389.060403][T19641] ? clear_bhb_loop+0x55/0xb0 [ 389.065163][T19641] ? clear_bhb_loop+0x55/0xb0 [ 389.069936][T19641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.075872][T19641] RIP: 0033:0x7f22a264e92c [ 389.080312][T19641] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 389.099942][T19641] RSP: 002b:00007f22a0cc7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.108378][T19641] RAX: ffffffffffffffda RBX: 00007f22a2815fa0 RCX: 00007f22a264e92c [ 389.116428][T19641] RDX: 000000000000000f RSI: 00007f22a0cc70b0 RDI: 0000000000000003 [ 389.124466][T19641] RBP: 00007f22a0cc70a0 R08: 0000000000000000 R09: 0000000000000000 [ 389.132444][T19641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.140547][T19641] R13: 0000000000000000 R14: 00007f22a2815fa0 R15: 00007ffc354b60b8 [ 389.148531][T19641] [ 389.155132][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 389.155147][ T29] audit: type=1400 audit(1733271774.831:39466): avc: denied { cpu } for pid=19644 comm="syz.0.5973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 389.183297][T19647] loop2: detected capacity change from 0 to 512 [ 389.190584][ T29] audit: type=1400 audit(1733271774.841:39467): avc: denied { create } for pid=19646 comm="syz.2.5974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 389.211476][ T29] audit: type=1400 audit(1733271774.841:39468): avc: denied { bind } for pid=19646 comm="syz.2.5974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 389.232172][ T29] audit: type=1400 audit(1733271774.841:39469): avc: denied { mounton } for pid=19646 comm="syz.2.5974" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 389.242249][T19647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.272971][T19647] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.285906][ T29] audit: type=1326 audit(1733271774.961:39470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.7.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 389.309544][ T29] audit: type=1326 audit(1733271774.971:39471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.7.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 389.333215][ T29] audit: type=1326 audit(1733271774.971:39472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.7.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 389.356783][ T29] audit: type=1326 audit(1733271774.981:39473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.7.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 389.380433][ T29] audit: type=1326 audit(1733271774.981:39474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.7.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac96aff19 code=0x7ffc0000 [ 389.406305][T13360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.412776][ T28] IPVS: stop unused estimator thread 0... [ 389.448713][T18993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.449317][T19550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.477029][T19550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.500778][T19550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.510337][ T29] audit: type=1400 audit(1733271775.181:39475): avc: denied { map } for pid=19658 comm="syz.2.5978" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 389.534900][T19550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.605320][T19666] loop7: detected capacity change from 0 to 2048 [ 389.669050][T19550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.682796][T19550] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.699799][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.706915][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.727664][T19665] bridge0: port 3(vlan2) entered blocking state [ 389.734042][T19665] bridge0: port 3(vlan2) entered disabled state [ 389.740613][T19665] vlan2: entered allmulticast mode [ 389.748586][T19665] vlan2: left allmulticast mode [ 389.765910][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.772991][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.779627][T19675] loop7: detected capacity change from 0 to 512 [ 389.788167][T19675] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 389.800498][T19675] EXT4-fs (loop7): 1 truncate cleaned up [ 389.809877][T19675] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.871094][T19550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.882956][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.916537][T19689] FAULT_INJECTION: forcing a failure. [ 389.916537][T19689] name failslab, interval 1, probability 0, space 0, times 0 [ 389.929276][T19689] CPU: 0 UID: 0 PID: 19689 Comm: syz.7.5987 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 389.940054][T19689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 389.942395][T19550] veth0_vlan: entered promiscuous mode [ 389.950095][T19689] Call Trace: [ 389.950103][T19689] [ 389.958864][T19550] veth1_vlan: entered promiscuous mode [ 389.961747][T19689] dump_stack_lvl+0xf2/0x150 [ 389.971834][T19689] dump_stack+0x15/0x1a [ 389.976177][T19689] should_fail_ex+0x223/0x230 [ 389.977628][T19550] veth0_macvtap: entered promiscuous mode [ 389.980854][T19689] should_failslab+0x8f/0xb0 [ 389.991151][T19689] __kmalloc_noprof+0xab/0x3f0 [ 389.991948][T19550] veth1_macvtap: entered promiscuous mode [ 389.995966][T19689] ? bpf_test_init+0xc7/0x170 [ 389.995995][T19689] bpf_test_init+0xc7/0x170 [ 390.006158][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.006332][T19689] bpf_prog_test_run_xdp+0x321/0x8b0 [ 390.010845][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.021220][T19689] ? __rcu_read_unlock+0x4e/0x70 [ 390.026513][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.036282][T19689] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 390.036311][T19689] bpf_prog_test_run+0x20f/0x3a0 [ 390.036339][T19689] __sys_bpf+0x400/0x7a0 [ 390.041266][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.051639][T19689] __x64_sys_bpf+0x43/0x50 [ 390.057427][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.062406][T19689] x64_sys_call+0x2914/0x2dc0 [ 390.066639][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.066653][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.066665][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.069889][T19550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.076470][T19689] do_syscall_64+0xc9/0x1c0 [ 390.076494][T19689] ? clear_bhb_loop+0x55/0xb0 [ 390.085910][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.091269][T19689] ? clear_bhb_loop+0x55/0xb0 [ 390.091295][T19689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.095963][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.105730][T19689] RIP: 0033:0x7ffac96aff19 [ 390.105750][T19689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.105768][T19689] RSP: 002b:00007ffac7d27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.105786][T19689] RAX: ffffffffffffffda RBX: 00007ffac9875fa0 RCX: 00007ffac96aff19 [ 390.105799][T19689] RDX: 0000000000000069 RSI: 00000000200002c0 RDI: 000000000000000a [ 390.116202][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.125959][T19689] RBP: 00007ffac7d270a0 R08: 0000000000000000 R09: 0000000000000000 [ 390.125975][T19689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.133254][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.137620][T19689] R13: 0000000000000000 R14: 00007ffac9875fa0 R15: 00007fff0e337578 [ 390.142288][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.152656][T19689] [ 390.279582][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.289419][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.300071][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.310156][T19550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.320615][T19550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.327059][T19695] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5989'. [ 390.332881][T19550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.367355][T19550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.376178][T19550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.384908][T19550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.393646][T19550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.423105][T19701] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5992'. [ 390.443398][T19701] FAULT_INJECTION: forcing a failure. [ 390.443398][T19701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.456510][T19701] CPU: 1 UID: 0 PID: 19701 Comm: syz.3.5992 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 390.467276][T19701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 390.477327][T19701] Call Trace: [ 390.480600][T19701] [ 390.483568][T19701] dump_stack_lvl+0xf2/0x150 [ 390.488178][T19701] dump_stack+0x15/0x1a [ 390.492350][T19701] should_fail_ex+0x223/0x230 [ 390.497056][T19701] should_fail+0xb/0x10 [ 390.501211][T19701] should_fail_usercopy+0x1a/0x20 [ 390.506302][T19701] _copy_to_user+0x20/0xa0 [ 390.510722][T19701] simple_read_from_buffer+0xa0/0x110 [ 390.516157][T19701] proc_fail_nth_read+0xf9/0x140 [ 390.521102][T19701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.526649][T19701] vfs_read+0x1a2/0x700 [ 390.530846][T19701] ? __rcu_read_unlock+0x4e/0x70 [ 390.535842][T19701] ? __fget_files+0x17c/0x1c0 [ 390.540573][T19701] ksys_read+0xe8/0x1b0 [ 390.544788][T19701] __x64_sys_read+0x42/0x50 [ 390.549344][T19701] x64_sys_call+0x2874/0x2dc0 [ 390.554021][T19701] do_syscall_64+0xc9/0x1c0 [ 390.558627][T19701] ? clear_bhb_loop+0x55/0xb0 [ 390.563299][T19701] ? clear_bhb_loop+0x55/0xb0 [ 390.568040][T19701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.573968][T19701] RIP: 0033:0x7f9b84e0e92c [ 390.578381][T19701] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 390.597992][T19701] RSP: 002b:00007f9b83487050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.606399][T19701] RAX: ffffffffffffffda RBX: 00007f9b84fd5fa0 RCX: 00007f9b84e0e92c [ 390.614374][T19701] RDX: 000000000000000f RSI: 00007f9b834870b0 RDI: 0000000000000003 [ 390.622439][T19701] RBP: 00007f9b834870a0 R08: 0000000000000000 R09: 0000000000000000 [ 390.630449][T19701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.638492][T19701] R13: 0000000000000000 R14: 00007f9b84fd5fa0 R15: 00007fff0fce9178 [ 390.646488][T19701] [ 390.745662][T19712] bridge0: port 3(vlan2) entered blocking state [ 390.749036][T19716] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 390.752017][T19712] bridge0: port 3(vlan2) entered disabled state [ 390.771495][T19712] vlan2: entered allmulticast mode [ 390.777763][T19712] vlan2: left allmulticast mode [ 390.817699][T19723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6001'. [ 390.893484][T19132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.902327][T19731] loop7: detected capacity change from 0 to 512 [ 391.005430][T19747] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 391.088378][T19753] loop1: detected capacity change from 0 to 128 [ 391.089916][T19752] loop7: detected capacity change from 0 to 8192 [ 391.104100][T19752] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.230147][T19752] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.239070][T19752] FAT-fs (loop7): Filesystem has been set read-only [ 391.246918][T19755] FAULT_INJECTION: forcing a failure. [ 391.246918][T19755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.260120][T19755] CPU: 1 UID: 0 PID: 19755 Comm: syz.7.6013 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 391.270893][T19755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 391.276511][T19752] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.280940][T19755] Call Trace: [ 391.280949][T19755] [ 391.280989][T19755] dump_stack_lvl+0xf2/0x150 [ 391.295986][T19752] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.300503][T19755] dump_stack+0x15/0x1a [ 391.313466][T19755] should_fail_ex+0x223/0x230 [ 391.315241][T19754] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.318158][T19755] should_fail+0xb/0x10 [ 391.331092][T19755] should_fail_usercopy+0x1a/0x20 [ 391.336203][T19755] _copy_from_user+0x1e/0xb0 [ 391.340812][T19755] copy_msghdr_from_user+0x54/0x2a0 [ 391.346164][T19755] ? __fget_files+0x17c/0x1c0 [ 391.350892][T19755] __sys_recvmsg+0x140/0x260 [ 391.355592][T19755] __x64_sys_recvmsg+0x46/0x50 [ 391.360377][T19755] x64_sys_call+0xc64/0x2dc0 [ 391.365128][T19755] do_syscall_64+0xc9/0x1c0 [ 391.369639][T19755] ? clear_bhb_loop+0x55/0xb0 [ 391.374319][T19755] ? clear_bhb_loop+0x55/0xb0 [ 391.379018][T19755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.384935][T19755] RIP: 0033:0x7ffac96aff19 [ 391.389345][T19755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.409031][T19755] RSP: 002b:00007ffac7ce5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 391.417445][T19755] RAX: ffffffffffffffda RBX: 00007ffac9876160 RCX: 00007ffac96aff19 [ 391.425412][T19755] RDX: 0000000000010000 RSI: 0000000020000340 RDI: 000000000000000c [ 391.433403][T19755] RBP: 00007ffac7ce50a0 R08: 0000000000000000 R09: 0000000000000000 [ 391.441381][T19755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.449367][T19755] R13: 0000000000000000 R14: 00007ffac9876160 R15: 00007fff0e337578 [ 391.457384][T19755] [ 391.496821][T19757] loop1: detected capacity change from 0 to 8192 [ 391.501541][T18423] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.505112][T19757] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.607555][T19762] loop2: detected capacity change from 0 to 512 [ 391.619911][T19759] loop7: detected capacity change from 0 to 8192 [ 391.636300][T19762] EXT4-fs: Ignoring removed orlov option [ 391.655590][T19759] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.672414][T19762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.684477][T19757] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.693329][T19757] FAT-fs (loop1): Filesystem has been set read-only [ 391.700667][T19757] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.709833][T19757] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.721984][T19762] EXT4-fs (loop2): 1 orphan inode deleted [ 391.727763][T19762] EXT4-fs (loop2): 1 truncate cleaned up [ 391.750729][T19762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.753083][T19760] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.776925][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6016'. [ 391.802485][T19762] team0 (unregistering): Port device team_slave_0 removed [ 391.812511][T19762] team0 (unregistering): Port device team_slave_1 removed [ 391.839529][T19759] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.848534][T19759] FAT-fs (loop7): Filesystem has been set read-only [ 391.856283][T19759] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.867391][T19759] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.870504][T19550] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.885890][T19771] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 391.912027][T18993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.950475][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6019'. [ 391.990086][T19778] team0 (unregistering): Port device team_slave_0 removed [ 392.024054][ T3447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.038520][T19778] team0 (unregistering): Port device team_slave_1 removed [ 392.137119][T19783] loop3: detected capacity change from 0 to 512 [ 393.231273][T19784] FAULT_INJECTION: forcing a failure. [ 393.231273][T19784] name failslab, interval 1, probability 0, space 0, times 0 [ 393.243906][T19784] CPU: 1 UID: 0 PID: 19784 Comm: syz.2.6020 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 393.254691][T19784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 393.264757][T19784] Call Trace: [ 393.268038][T19784] [ 393.271052][T19784] dump_stack_lvl+0xf2/0x150 [ 393.275659][T19784] dump_stack+0x15/0x1a [ 393.279853][T19784] should_fail_ex+0x223/0x230 [ 393.284550][T19784] should_failslab+0x8f/0xb0 [ 393.289174][T19784] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 393.294981][T19784] ? shmem_alloc_inode+0x34/0x50 [ 393.299930][T19784] shmem_alloc_inode+0x34/0x50 [ 393.304707][T19784] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 393.310173][T19784] alloc_inode+0x3c/0x160 [ 393.314501][T19784] new_inode+0x1e/0x100 [ 393.318657][T19784] shmem_get_inode+0x24e/0x730 [ 393.323521][T19784] __shmem_file_setup+0x127/0x1f0 [ 393.328570][T19784] shmem_file_setup+0x3b/0x50 [ 393.333248][T19784] __se_sys_memfd_create+0x31d/0x5c0 [ 393.338586][T19784] __x64_sys_memfd_create+0x31/0x40 [ 393.343855][T19784] x64_sys_call+0x2d4c/0x2dc0 [ 393.348593][T19784] do_syscall_64+0xc9/0x1c0 [ 393.353094][T19784] ? clear_bhb_loop+0x55/0xb0 [ 393.357767][T19784] ? clear_bhb_loop+0x55/0xb0 [ 393.362487][T19784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.368390][T19784] RIP: 0033:0x7f22a264ff19 [ 393.372807][T19784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.392488][T19784] RSP: 002b:00007f22a0c84e38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 393.400981][T19784] RAX: ffffffffffffffda RBX: 000000000000048f RCX: 00007f22a264ff19 [ 393.408957][T19784] RDX: 00007f22a0c84f10 RSI: 0000000000000000 RDI: 00007f22a26c4209 [ 393.416934][T19784] RBP: 0000000020000940 R08: 00007f22a0c84bd7 R09: 00007f22a0c84e60 [ 393.424907][T19784] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000 [ 393.432876][T19784] R13: 00007f22a0c84f10 R14: 00007f22a0c84ed0 R15: 0000000020000100 [ 393.440878][T19784] [ 393.485608][T18423] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 393.950954][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.458881][T19783] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.6021: corrupted xattr block 95: invalid header [ 394.475122][T19783] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.6021: bg 0: block 7: invalid block bitmap [ 394.487617][T19783] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 394.496967][T19783] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.6021: corrupted xattr block 95: invalid header [ 394.510928][T19783] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 394.519983][T19783] EXT4-fs (loop3): 1 orphan inode deleted [ 394.526155][T19783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.626065][ T3447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.709983][T19802] loop7: detected capacity change from 0 to 128 [ 394.710655][T13360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.764645][T19804] loop3: detected capacity change from 0 to 512 [ 394.779519][T19804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 394.790322][T19804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 394.799640][T19804] System zones: 1-12 [ 394.805365][T19804] EXT4-fs (loop3): 1 truncate cleaned up [ 394.812834][T19804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.826357][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 394.826373][ T29] audit: type=1400 audit(1733271780.501:39594): avc: denied { create } for pid=19803 comm="syz.3.6028" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 394.854402][ T29] audit: type=1400 audit(1733271780.531:39595): avc: denied { read } for pid=19803 comm="syz.3.6028" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 394.894141][T13360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.995627][T19811] loop3: detected capacity change from 0 to 8192 [ 395.008892][T19813] loop7: detected capacity change from 0 to 128 [ 395.042198][T19811] loop3: p2 p3 p4 [ 395.046027][T19811] loop3: p2 start 14935 is beyond EOD, truncated [ 395.047423][T19815] loop7: detected capacity change from 0 to 128 [ 395.052526][T19811] loop3: p3 size 196608 extends beyond EOD, truncated [ 395.066427][T19811] loop3: p4 start 4026530307 is beyond EOD, truncated [ 395.080709][ T29] audit: type=1400 audit(1733271780.751:39596): avc: denied { create } for pid=19810 comm="syz.3.6031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 395.102629][ T29] audit: type=1400 audit(1733271780.781:39597): avc: denied { setopt } for pid=19810 comm="syz.3.6031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 395.122477][ T29] audit: type=1400 audit(1733271780.781:39598): avc: denied { listen } for pid=19810 comm="syz.3.6031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 395.142474][ T29] audit: type=1404 audit(1733271780.781:39599): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 395.161372][ T29] audit: type=1400 audit(1733271780.801:39600): avc: denied { read write } for pid=18423 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 395.185984][ T29] audit: type=1400 audit(1733271780.811:39601): avc: denied { prog_load } for pid=19816 comm="syz.7.6034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 395.205335][ T29] audit: type=1400 audit(1733271780.811:39602): avc: denied { prog_load } for pid=19816 comm="syz.7.6034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 395.224553][ T29] audit: type=1400 audit(1733271780.821:39603): avc: denied { read write } for pid=18423 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 395.694056][ T3447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Dec 4 00:23:01 syzkaller kern.warn kernel: [ 395.694056][ T3447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.335067][T19900] loop1: detected capacity change from 0 to 128 [ 396.510352][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6076'. [ 396.546184][T19912] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 396.590645][T19916] bridge0: port 3(vlan2) entered blocking state [ 396.597046][T19916] bridge0: port 3(vlan2) entered disabled state [ 396.609003][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.616497][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.617227][T18209] udevd[18209]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 396.623932][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.639473][T19916] vlan2: entered allmulticast mode [ 396.641087][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.653660][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.661070][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.668460][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.675948][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.683450][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.690872][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.698266][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.705719][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.713131][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.720525][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.728081][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.735615][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.743115][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.750500][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.757929][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.765354][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.772804][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.780196][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.787744][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.795230][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.802708][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.810126][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.817557][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.825051][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832582][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832610][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832639][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832660][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832687][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832722][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832750][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832778][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832806][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832829][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832853][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832881][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.832958][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.833036][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.833063][T19132] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 396.833234][ T3447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.833294][T19916] vlan2: left allmulticast mode [ 396.835037][ T3447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.836711][T19132] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.863045][T19927] loop1: detected capacity change from 0 to 128 [ 397.099154][T19937] loop1: detected capacity change from 0 to 8192 [ 397.151355][T19937] loop1: p2 p3 p4 [ 397.155194][T19937] loop1: p2 start 14935 is beyond EOD, truncated [ 397.161637][T19937] loop1: p3 size 196608 extends beyond EOD, truncated [ 397.172878][T19937] loop1: p4 start 4026530307 is beyond EOD, truncated [ 397.181857][ T3008] loop1: p2 p3 p4 [ 397.185786][ T3008] loop1: p2 start 14935 is beyond EOD, truncated [ 397.192184][ T3008] loop1: p3 size 196608 extends beyond EOD, truncated [ 397.217151][ T3008] loop1: p4 start 4026530307 is beyond EOD, truncated [ 397.291572][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.823755][T19966] loop3: detected capacity change from 0 to 512 [ 397.852733][T19132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.853305][T19969] FAULT_INJECTION: forcing a failure. [ 397.853305][T19969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.874040][T19969] CPU: 0 UID: 0 PID: 19969 Comm: syz.1.6098 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 397.881618][T19971] loop7: detected capacity change from 0 to 4096 [ 397.884796][T19969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.884811][T19969] Call Trace: [ 397.884819][T19969] [ 397.905245][T19971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.907360][T19969] dump_stack_lvl+0xf2/0x150 [ 397.907399][T19969] dump_stack+0x15/0x1a [ 397.923253][T19971] EXT4-fs (loop7): shut down requested (0) [ 397.924362][T19969] should_fail_ex+0x223/0x230 [ 397.939034][T19969] should_fail+0xb/0x10 [ 397.939718][T19966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.943201][T19969] should_fail_usercopy+0x1a/0x20 [ 397.955919][T19966] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.960620][T19969] _copy_to_user+0x20/0xa0 [ 397.975551][T19969] simple_read_from_buffer+0xa0/0x110 [ 397.980948][T19969] proc_fail_nth_read+0xf9/0x140 [ 397.985896][T19969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.991450][T19969] vfs_read+0x1a2/0x700 [ 397.995635][T19969] ? __rcu_read_unlock+0x4e/0x70 [ 398.000621][T19969] ? __fget_files+0x17c/0x1c0 [ 398.005348][T19969] ksys_read+0xe8/0x1b0 [ 398.009598][T19969] __x64_sys_read+0x42/0x50 [ 398.014111][T19969] x64_sys_call+0x2874/0x2dc0 [ 398.018787][T19969] do_syscall_64+0xc9/0x1c0 [ 398.023355][T19969] ? clear_bhb_loop+0x55/0xb0 [ 398.028028][T19969] ? clear_bhb_loop+0x55/0xb0 [ 398.032699][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.038673][T19969] RIP: 0033:0x7f5d2452e92c [ 398.043080][T19969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.062720][T19969] RSP: 002b:00007f5d22ba7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.071139][T19969] RAX: ffffffffffffffda RBX: 00007f5d246f5fa0 RCX: 00007f5d2452e92c [ 398.079128][T19969] RDX: 000000000000000f RSI: 00007f5d22ba70b0 RDI: 0000000000000004 [ 398.087170][T19969] RBP: 00007f5d22ba70a0 R08: 0000000000000000 R09: 0000000000000002 [ 398.095133][T19969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.103100][T19969] R13: 0000000000000000 R14: 00007f5d246f5fa0 R15: 00007ffe38d9b618 [ 398.111072][T19969] [ 398.118439][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.145925][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.153347][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.160783][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.168317][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.175802][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.183286][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.190666][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.198195][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.205622][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.213092][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.220480][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.227957][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.235405][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.242805][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.250215][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.257647][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.265113][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.272524][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.280099][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.287526][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.295072][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.302483][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.309866][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.317410][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.324879][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.332429][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.339991][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.347409][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.354804][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.362282][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.369818][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.377290][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.384911][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.392396][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.399782][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.407289][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.414683][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.422094][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.429646][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.435908][T19995] loop1: detected capacity change from 0 to 8192 [ 398.437023][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.450710][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.458240][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.465636][ T1107] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 398.473954][ T1107] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.476272][T19976] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=14 [ 398.492584][T19976] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=14 [ 398.512102][ T3008] loop1: p2 p3 p4 [ 398.515898][ T3008] loop1: p2 start 14935 is beyond EOD, truncated [ 398.522267][ T3008] loop1: p3 size 196608 extends beyond EOD, truncated [ 398.529524][ T3008] loop1: p4 start 4026530307 is beyond EOD, truncated [ 398.537192][ T3008] loop1: p2 p3 p4 [ 398.541007][ T3008] loop1: p2 start 14935 is beyond EOD, truncated [ 398.547418][ T3008] loop1: p3 size 196608 extends beyond EOD, truncated [ 398.554718][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.554772][ T3008] loop1: p4 start 4026530307 is beyond EOD, truncated [ 398.572869][T19995] loop1: p2 p3 p4 [ 398.576757][T19995] loop1: p2 start 14935 is beyond EOD, truncated [ 398.583282][T19995] loop1: p3 size 196608 extends beyond EOD, truncated [ 398.590923][T19995] loop1: p4 start 4026530307 is beyond EOD, truncated [ 398.616604][ T3008] loop1: p2 p3 p4 [ 398.623173][T13360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.630410][T20000] loop7: detected capacity change from 0 to 512 [ 398.632542][ T3008] loop1: p2 start 14935 is beyond EOD, truncated [ 398.638946][T20000] EXT4-fs: Ignoring removed oldalloc option [ 398.644874][ T3008] loop1: p3 size 196608 extends beyond EOD, truncated [ 398.660564][ T3008] loop1: p4 start 4026530307 is beyond EOD, truncated [ 398.668522][T20000] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.6110: Parent and EA inode have the same ino 15 [ 398.686411][T20000] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.6110: Parent and EA inode have the same ino 15 [ 398.700896][T20000] EXT4-fs (loop7): 1 orphan inode deleted [ 398.707049][T20000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.778942][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.837514][T20009] bridge0: port 3(vlan2) entered blocking state [ 398.843822][T20009] bridge0: port 3(vlan2) entered disabled state [ 398.850158][T20009] vlan2: entered allmulticast mode [ 398.855784][T20009] vlan2: left allmulticast mode [ 398.892865][T19132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.979672][T20011] bridge0: port 3(vlan2) entered blocking state [ 398.986006][T20011] bridge0: port 3(vlan2) entered disabled state [ 398.992348][T20011] vlan2: entered allmulticast mode [ 398.997903][T20011] vlan2: left allmulticast mode [ 399.117134][T20017] FAULT_INJECTION: forcing a failure. [ 399.117134][T20017] name failslab, interval 1, probability 0, space 0, times 0 [ 399.129805][T20017] CPU: 1 UID: 0 PID: 20017 Comm: syz.7.6116 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 399.140657][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.150775][T20017] Call Trace: [ 399.154051][T20017] [ 399.156975][T20017] dump_stack_lvl+0xf2/0x150 [ 399.161633][T20017] dump_stack+0x15/0x1a [ 399.165800][T20017] should_fail_ex+0x223/0x230 [ 399.170478][T20017] should_failslab+0x8f/0xb0 [ 399.175090][T20017] kmem_cache_alloc_noprof+0x52/0x320 [ 399.180496][T20017] ? mas_alloc_nodes+0x1e3/0x490 [ 399.185517][T20017] mas_alloc_nodes+0x1e3/0x490 [ 399.190294][T20017] mas_preallocate+0x44a/0x650 [ 399.195079][T20017] __split_vma+0x244/0x6a0 [ 399.199507][T20017] vma_modify+0x17d/0x1e0 [ 399.203944][T20017] vma_modify_policy+0xeb/0x120 [ 399.208838][T20017] mbind_range+0x1d8/0x490 [ 399.213267][T20017] __se_sys_mbind+0x915/0x1160 [ 399.218052][T20017] __x64_sys_mbind+0x78/0x90 [ 399.222642][T20017] x64_sys_call+0x2662/0x2dc0 [ 399.227442][T20017] do_syscall_64+0xc9/0x1c0 [ 399.231948][T20017] ? clear_bhb_loop+0x55/0xb0 [ 399.236722][T20017] ? clear_bhb_loop+0x55/0xb0 [ 399.241430][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.247356][T20017] RIP: 0033:0x7ffac96aff19 [ 399.251765][T20017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.271393][T20017] RSP: 002b:00007ffac7d27058 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 399.279821][T20017] RAX: ffffffffffffffda RBX: 00007ffac9875fa0 RCX: 00007ffac96aff19 [ 399.287868][T20017] RDX: 0000000000008000 RSI: 0000000000003000 RDI: 000000002055a000 [ 399.295915][T20017] RBP: 00007ffac7d270a0 R08: 000000000000000d R09: 0000000000000000 [ 399.303880][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.311874][T20017] R13: 0000000000000000 R14: 00007ffac9875fa0 R15: 00007fff0e337578 [ 399.319861][T20017] [ 399.451992][T20031] vlan2: entered allmulticast mode [ 399.470321][T20032] loop7: detected capacity change from 0 to 512 [ 399.504500][T20032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.521287][T20032] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.542555][T20037] loop1: detected capacity change from 0 to 128 [ 399.606802][T20041] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 399.631907][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.639388][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.646818][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.654263][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.661674][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.669065][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.676490][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.683885][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.691369][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.698750][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.706152][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.713639][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.721124][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.728520][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.735936][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.743352][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.750739][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.758138][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.765167][T20044] loop1: detected capacity change from 0 to 128 [ 399.765580][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.779252][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.786777][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.794194][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.801597][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.808993][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.816410][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.823822][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.831254][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.838742][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.846145][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.853764][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.861282][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.868692][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.876134][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.883601][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.891034][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.898460][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.905900][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.913293][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.920709][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.928104][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.935573][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.942970][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.950394][ T3381] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 399.958063][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.966575][T19132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.974622][ T3381] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 399.991703][T20046] netlink: '+}[@': attribute type 32 has an invalid length. [ 399.999045][T20046] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 400.009439][T20046] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 400.049583][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 400.049599][ T29] audit: type=1400 audit(1733271785.721:40289): avc: denied { unmount } for pid=19550 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 400.060687][T20049] loop3: detected capacity change from 0 to 8192 [ 400.101132][T20049] loop3: p2 p3 p4 [ 400.104967][T20049] loop3: p2 start 14935 is beyond EOD, truncated [ 400.111483][T20049] loop3: p3 size 196608 extends beyond EOD, truncated [ 400.120511][T20049] loop3: p4 start 4026530307 is beyond EOD, truncated [ 400.144019][ T3008] loop3: p2 p3 p4 [ 400.147823][ T3008] loop3: p2 start 14935 is beyond EOD, truncated [ 400.154391][ T3008] loop3: p3 size 196608 extends beyond EOD, truncated [ 400.163050][ T3008] loop3: p4 start 4026530307 is beyond EOD, truncated [ 400.173695][ T29] audit: type=1400 audit(1733271785.851:40290): avc: denied { create } for pid=20047 comm="syz.3.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.194641][ T29] audit: type=1400 audit(1733271785.851:40291): avc: denied { setopt } for pid=20047 comm="syz.3.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.217978][ T29] audit: type=1400 audit(1733271785.851:40292): avc: denied { listen } for pid=20047 comm="syz.3.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.237868][ T29] audit: type=1404 audit(1733271785.851:40293): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 400.252979][ T29] audit: type=1400 audit(1733271785.891:40294): avc: denied { create } for pid=20052 comm="syz.1.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 400.272720][ T29] audit: type=1404 audit(1733271785.891:40295): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 400.287782][ T29] audit: type=1400 audit(1733271785.891:40296): avc: denied { prog_load } for pid=20052 comm="syz.1.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.306999][ T29] audit: type=1400 audit(1733271785.891:40297): avc: denied { create } for pid=20047 comm="syz.3.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.326920][ T29] audit: type=1400 audit(1733271785.891:40299): avc: denied { bpf } for pid=20052 comm="syz.1.6130" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.364367][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.364405][T20062] loop1: detected capacity change from 0 to 512 [ 400.364772][T20062] EXT4-fs: Ignoring removed oldalloc option [ 400.392044][T20062] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.6133: Parent and EA inode have the same ino 15 [ 400.416455][T20062] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.6133: Parent and EA inode have the same ino 15 [ 400.441989][T20065] loop7: detected capacity change from 0 to 1024 [ 400.448484][T20065] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 400.449313][T20062] EXT4-fs (loop1): 1 orphan inode deleted [ 400.462851][T20062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.500117][T20065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.508671][T20065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.533525][T19550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.539367][T20067] loop2: detected capacity change from 0 to 2048 [ 400.560415][T20067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.585408][T20067] vlan2: entered allmulticast mode [ 400.685664][T18993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.713389][T20078] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 400.733793][T20079] loop1: detected capacity change from 0 to 128 [ 400.828675][T20081] bridge0: port 3(vlan2) entered blocking state [ 400.834996][T20081] bridge0: port 3(vlan2) entered disabled state [ 400.852565][T20081] vlan2: entered allmulticast mode [ 400.864972][T20081] vlan2: left allmulticast mode [ 400.982999][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.067843][T20101] loop1: detected capacity change from 0 to 128 [ 401.070346][T20106] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 401.131766][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.137616][T20110] loop7: detected capacity change from 0 to 8192 [ 401.166549][ T3382] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 401.174314][ T3382] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 401.187521][ T3382] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x3 [ 401.196765][ T3382] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 401.208243][T20110] loop7: p2 p3 p4 [ 401.212414][T20110] loop7: p2 start 14935 is beyond EOD, truncated [ 401.218768][T20110] loop7: p3 size 196608 extends beyond EOD, truncated [ 401.238783][T20110] loop7: p4 start 4026530307 is beyond EOD, truncated [ 401.344600][T20124] syz.1.6157[20124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.344724][T20124] syz.1.6157[20124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.358722][T20124] syz.1.6157[20124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.375577][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6157'. [ 401.399958][T20124] netlink: 'syz.1.6157': attribute type 4 has an invalid length. [ 401.407801][T20124] netlink: 'syz.1.6157': attribute type 3 has an invalid length. [ 401.415551][T20124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6157'. [ 401.604620][T20131] pim6reg1: entered promiscuous mode [ 401.609955][T20131] pim6reg1: entered allmulticast mode [ 401.814774][T20137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.824893][T20137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.845294][T18209] udevd[18209]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 401.933267][T20142] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 402.012746][T20146] bridge0: port 3(vlan2) entered blocking state [ 402.019037][T20146] bridge0: port 3(vlan2) entered disabled state [ 402.025488][T19132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.026311][T20146] vlan2: entered allmulticast mode [ 402.039214][T20146] vlan2: left allmulticast mode [ 402.390541][T20162] x_tables: duplicate underflow at hook 3 [ 402.406201][T20162] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6172'. [ 402.420572][T20162] loop1: detected capacity change from 0 to 512 [ 402.427716][T20162] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 402.758468][T20169] bridge0: port 3(vlan2) entered blocking state [ 402.764851][T20169] bridge0: port 3(vlan2) entered disabled state [ 402.771271][T20169] vlan2: entered allmulticast mode [ 402.776709][T20169] vlan2: left allmulticast mode [ 402.933815][T20175] bridge0: port 3(vlan2) entered blocking state [ 402.940103][T20175] bridge0: port 3(vlan2) entered disabled state [ 402.946514][T20175] vlan2: entered allmulticast mode [ 402.952079][T20175] vlan2: left allmulticast mode [ 402.971147][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.035338][T20181] loop3: detected capacity change from 0 to 1024 [ 403.042680][T20181] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 403.051963][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.067115][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.074880][T20188] x_tables: duplicate underflow at hook 3 [ 403.116884][T20188] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6184'. [ 403.141338][T20181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.149865][T20181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.220215][T20196] FAULT_INJECTION: forcing a failure. [ 403.220215][T20196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.233336][T20196] CPU: 0 UID: 0 PID: 20196 Comm: syz.0.6188 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 403.244087][T20196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 403.254134][T20196] Call Trace: [ 403.257399][T20196] [ 403.260382][T20196] dump_stack_lvl+0xf2/0x150 [ 403.265038][T20196] dump_stack+0x15/0x1a [ 403.269189][T20196] should_fail_ex+0x223/0x230 [ 403.273902][T20196] should_fail+0xb/0x10 [ 403.278046][T20196] should_fail_usercopy+0x1a/0x20 [ 403.283092][T20196] strncpy_from_user+0x25/0x210 [ 403.288032][T20196] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 403.293667][T20196] ? getname_flags+0x81/0x3b0 [ 403.298364][T20196] getname_flags+0xb0/0x3b0 [ 403.302879][T20196] user_path_at+0x26/0x120 [ 403.307293][T20196] do_sys_truncate+0x5b/0x130 [ 403.312084][T20196] __x64_sys_truncate+0x31/0x40 [ 403.316929][T20196] x64_sys_call+0x26d0/0x2dc0 [ 403.321638][T20196] do_syscall_64+0xc9/0x1c0 [ 403.326157][T20196] ? clear_bhb_loop+0x55/0xb0 [ 403.330835][T20196] ? clear_bhb_loop+0x55/0xb0 [ 403.335564][T20196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.341469][T20196] RIP: 0033:0x7f26fc2cff19 [ 403.345916][T20196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.365521][T20196] RSP: 002b:00007f26fa947058 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 403.373933][T20196] RAX: ffffffffffffffda RBX: 00007f26fc495fa0 RCX: 00007f26fc2cff19 [ 403.381900][T20196] RDX: 0000000000000000 RSI: 0000000000005c00 RDI: 0000000020000140 [ 403.389941][T20196] RBP: 00007f26fa9470a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.397997][T20196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.406042][T20196] R13: 0000000000000000 R14: 00007f26fc495fa0 R15: 00007ffca6934e78 [ 403.414094][T20196] [ 403.470016][T20202] loop1: detected capacity change from 0 to 8192 [ 403.522655][T20202] loop1: p2 p3 p4 [ 403.526490][T20202] loop1: p2 start 14935 is beyond EOD, truncated [ 403.533026][T20202] loop1: p3 size 196608 extends beyond EOD, truncated [ 403.542026][T20202] loop1: p4 start 4026530307 is beyond EOD, truncated [ 403.724018][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6192'. [ 403.733296][T20210] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 403.828927][T20220] x_tables: duplicate underflow at hook 3 [ 403.848706][T20220] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6197'. [ 403.955857][T20230] loop3: detected capacity change from 0 to 512 [ 403.982832][T20230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.996171][T20230] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.039764][T20239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6203'. [ 404.050329][T20239] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 404.166236][T20254] x_tables: duplicate underflow at hook 3 [ 404.181389][T20254] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6210'. [ 404.248642][T20261] loop2: detected capacity change from 0 to 128 [ 404.248756][T20260] loop1: detected capacity change from 0 to 2048 [ 404.282326][T20260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.740146][T13360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.800697][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6218'. [ 404.809795][T20275] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 404.866662][T20277] loop3: detected capacity change from 0 to 8192 [ 404.912365][T20277] loop3: p2 p3 p4 [ 404.916326][T20277] loop3: p2 start 14935 is beyond EOD, truncated [ 404.922701][T20277] loop3: p3 size 196608 extends beyond EOD, truncated [ 404.941409][T20277] loop3: p4 start 4026530307 is beyond EOD, truncated [ 404.948927][ T3008] ================================================================== [ 404.957028][ T3008] BUG: KCSAN: data-race in d_delete / lookup_fast [ 404.963464][ T3008] [ 404.965790][ T3008] read-write to 0xffff8881069750c0 of 4 bytes by task 18210 on cpu 1: [ 404.973958][ T3008] d_delete+0x15a/0x180 [ 404.978149][ T3008] d_delete_notify+0x34/0x100 [ 404.982863][ T3008] vfs_unlink+0x320/0x430 [ 404.987229][ T3008] do_unlinkat+0x237/0x4d0 [ 404.991660][ T3008] __x64_sys_unlink+0x2e/0x40 [ 404.996378][ T3008] x64_sys_call+0x2329/0x2dc0 [ 405.001080][ T3008] do_syscall_64+0xc9/0x1c0 [ 405.005614][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.011534][ T3008] [ 405.013885][ T3008] read to 0xffff8881069750c0 of 4 bytes by task 3008 on cpu 0: [ 405.021457][ T3008] lookup_fast+0xd9/0x2a0 [ 405.025822][ T3008] walk_component+0x3f/0x230 [ 405.030460][ T3008] path_lookupat+0x10a/0x2b0 [ 405.035091][ T3008] filename_lookup+0x150/0x340 [ 405.039891][ T3008] do_readlinkat+0x89/0x210 [ 405.044428][ T3008] __x64_sys_readlink+0x47/0x60 [ 405.049284][ T3008] x64_sys_call+0x28ba/0x2dc0 [ 405.053966][ T3008] do_syscall_64+0xc9/0x1c0 [ 405.058463][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.064359][ T3008] [ 405.066673][ T3008] value changed: 0x00600108 -> 0x00000008 [ 405.072378][ T3008] [ 405.074693][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 405.080831][ T3008] CPU: 0 UID: 0 PID: 3008 Comm: udevd Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 405.091064][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 405.101119][ T3008] ================================================================== [ 405.116886][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 405.116898][ T29] audit: type=1400 audit(1733271790.791:40702): avc: denied { create } for pid=20276 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 405.143054][ T29] audit: type=1400 audit(1733271790.791:40703): avc: denied { create } for pid=20276 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 405.162931][ T29] audit: type=1400 audit(1733271790.791:40704): avc: denied { create } for pid=20276 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 405.182704][ T29] audit: type=1400 audit(1733271790.791:40705): avc: denied { create } for pid=20276 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 405.202444][ T29] audit: type=1400 audit(1733271790.791:40706): avc: denied { prog_load } for pid=20276 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 405.221789][ T29] audit: type=1400 audit(1733271790.791:40707): avc: denied { wake_alarm } for pid=20276 comm="syz.3.6219" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 405.243112][ T29] audit: type=1400 audit(1733271790.791:40708): avc: denied { prog_load } for pid=20276 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 405.262411][ T29] audit: type=1400 audit(1733271790.791:40709): avc: denied { map_create } for pid=20276 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 405.281711][ T29] audit: type=1400 audit(1733271790.791:40710): avc: denied { prog_load } for pid=20276 comm="syz.3.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 405.313126][T19550] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 405.331741][ T29] audit: type=1400 audit(1733271790.841:40711): avc: denied { create } for pid=20290 comm="syz.7.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 Dec 4 00:23:11 syzkaller kern.crit kernel: [ 405.313126][T19550] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) Dec 4 0[ 405.372546][T19550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 0:23:11 syzkaller kern.notice kernel: [ 405.331741][ T29] audit: type=1400 audit(1733271790.841:40711): avc: denied { create } for pid=20290 comm="syz.7.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.372546][T19550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.534861][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.534861][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.583341][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.583341][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.643918][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.643918][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.703477][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.703477][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.773556][ T28] bridge_slave_1: left allmulticast mode [ 405.779339][ T28] bridge_slave_1: left promiscuous mode [ 405.785021][ T28] bridge0: port 2(bridge_slave_1) entered disabled state Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.773556][ T28] bridge_slave_1: left allmulticast mode Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.779339][ T28] bridge_slave_1: left promiscuous mode Dec 4 00:2[ 405.811663][ T28] bridge_slave_0: left allmulticast mode 3:11 syzkaller k[ 405.817893][ T28] bridge_slave_0: left promiscuous mode ern.info kernel:[ 405.824974][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.785021][ T28] bridge0: port 2(bridge_slave_1) entered disabled state Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.811663][ T28] bridge_slave_0: left allmulticast mode Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.817893][ T28] bridge_slave_0: left promiscuous mode Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.824974][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.923439][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.935359][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface Dec 4 00:23:11 syzkaller kern.i[ 405.945633][ T28] bond0 (unregistering): Released all slaves nfo kernel: [ 405.923439][ T28] bond0 (unregi[ 405.956387][ T28] bond1 (unregistering): Released all slaves stering): (slave bond_slave_0): Releasing backup interface Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.935359][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.945633][ T28] bond0 (unregistering): Released all slaves Dec 4 00:23:11 syzkaller kern.info kernel: [ 405.956387][ T28] bond1 (unregistering): Released all slaves [ 406.005060][ T28] hsr_slave_0: left promiscuous mode Dec 4 00:23:11 [ 406.012059][ T28] hsr_slave_1: left promiscuous mode syzkaller kern.i[ 406.018217][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 nfo kernel: [ 4[ 406.026622][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 06.005060][ T28] hsr_slave_0: [ 406.036867][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 left promiscuous[ 406.045368][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 mode Dec 4 00:23:11 syzkaller kern.info kerne[ 406.056819][ T28] veth1_macvtap: left promiscuous mode l: [ 406.012059[ 406.063449][ T28] veth0_macvtap: left promiscuous mode ][ T28] hsr_sl[ 406.070254][ T28] veth1_vlan: left promiscuous mode ave_1: left prom[ 406.070293][ T28] veth0_vlan: left promiscuous mode iscuous mode Dec 4 00:23:11 syzkaller kern.info kernel: [ 406.018217][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 Dec 4 00:23:11 syzkaller kern.info kernel: [ 406.026622][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 Dec 4 00:23:11 syzkaller kern.info kernel: [ 406.036867][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 Dec 4 00:23:11 syzkaller kern.info kernel: [ 406.045368][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 Dec 4 00:23:11 syzkaller kern.info kernel: [ 406.056819][ T28] veth1_macvtap: left promiscuous mode Dec 4 00:23:11 syzkaller kern.info kernel: [ 406.063449][ T28] veth0_macvtap: left promiscuous mode Dec 4 00:23:11 syzkaller kern.info kernel: [ 406.070254][ T28] veth1_vlan: left promiscuous mode Dec 4 00:23:11 syzkaller kern.info kernel: [ 406.070293][ T28] veth0_vlan: left promiscuous mode